Privacy policy
We only collect what we need to answer you and run the website, we never sell data, and audience measurement only starts with your consent.
01Data controller
Legal framework: Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
02Data we process
Contact form
- Name, email address, company, phone (optional)
- Service concerned and the content of your message
Direct exchanges
- Data you send us by email, phone or WhatsApp
Technical data
- Server logs: IP address, date, requested page, browser — for security and troubleshooting
- Audience and campaign measurement (only with your consent): see the cookie policy
The cybersecurity self-check runs in your browser: your answers are only sent to us if you choose to add them to your message. Your language preference is stored on your device only.
03Purposes and legal bases
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Answer your contact, audit or quote requests | Pre-contractual measures / legitimate interest |
| Deliver our services and manage the client relationship | Performance of a contract |
| Invoicing, accounting, tax obligations | Legal obligation |
| Secure the website (logs, attack detection and blocking) | Legitimate interest |
| Audience measurement (Google Analytics) | Consent |
| LinkedIn campaign measurement | Consent |
04Retention periods
- Requests not followed up: 3 years after the last contact
- Clients: duration of the relationship, then 10 years for accounting and tax records
- Server security logs: 12 months maximum
- Audience measurement data: 14 months maximum
- Proof of your cookie choice: 12 months
05Recipients and processors
Your data is only accessible to authorised BeeWorks staff and to the following providers, bound by a data processing agreement (DPA):
| Provider | Role | Location |
|---|---|---|
| OVHcloud | Website hosting | European Union |
| Google (Workspace, Apps Script) | Email, receipt of the contact form | EU / United States |
| Google (Analytics, Tag Manager) | Audience measurement — with consent | EU / United States |
| Campaign measurement (Insight Tag) — with consent | Ireland / United States | |
| Usercentrics (Cookiebot) | Consent management | European Union |
No data is sold or rented. It may be disclosed to authorities upon lawful request.
06Transfers outside the European Union
Some providers (Google, LinkedIn) may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses.
07Your rights
- Access to your data and a copy of it
- Rectification
- Erasure
- Restriction of processing
- Portability
- Objection, including to direct marketing
- Withdrawal of consent at any time, without retroactive effect
Write to contact@beeworks-it.be. We answer within one month (extendable by two months for complex requests) and may ask for proof of identity in case of reasonable doubt.
08Security
- Encrypted traffic (HTTPS, TLS 1.2/1.3)
- Hosting in the European Union
- Firewall, intrusion detection and automatic attack blocking
- Administrative access restricted to a private network with strong authentication
- Encrypted backups and regular security updates
09Complaints
You can lodge a complaint with the Belgian supervisory authority:
10Changes
This policy may change; the update date is shown at the top of the page.