Privacy Policy
Last updated on
On this page
1. Who we are
This website (granaat.be) is operated by Granaat Consultancy BV, registered office at Hovingstraat 4, B-8890 Moorslede, België, registered under BTW BE0567.545.218 · RPR Gent, afd. Kortrijk. Granaat Consultancy BV is the data controller for the personal data collected through this website, within the meaning of the General Data Protection Regulation (GDPR).
For any question about this privacy policy or about how we process your data, you can contact us at info@granaat.be. We operate without a separate Data Protection Officer (DPO); requests reach us directly.
2. What data we collect
We only collect the data necessary to provide our services and run the website:
- Contact form — name, email address, optional company name, the chosen topic, and your message.
- Analytics data — aggregated visit statistics derived from our own web server's log files (page requested, timestamp, referring page, browser type, and a truncated IP address). These log files are generated automatically as a byproduct of serving each page; we set no cookies for this and engage no external analytics service.
- Security data — a verification token from Cloudflare Turnstile, used to keep automated spam traffic off the contact form.
3. Purposes and legal basis
We use contact-form data solely to handle and respond to your inquiry — this relies on the legal basis of pre-contractual measures taken at your request (GDPR art. 6.1.b).
We use analytics data to understand and improve how the site works and how its content is used. This relies on our legitimate interest (GDPR art. 6.1.f): the processing is limited to log files that are generated anyway when serving the site, the IP address is truncated before storage, processing takes place on our own infrastructure in the EU, and no data is shared with third parties or used to track you across websites. Because we store or read no information on your device for this, no consent is required.
Turnstile verification relies on our legitimate interest (GDPR art. 6.1.f) in preventing abuse and spam through the contact form.
4. Retention period
We keep contact-form data for a maximum of 24 months after the last contact moment, unless an ongoing engagement or a legal obligation requires a longer retention period.
Raw web server log files are rotated automatically by our hosting and deleted after a few days. The visit statistics derived from them are aggregated and contain no full IP address; they are retained with no fixed expiry, since they cannot be traced back to an individual visitor.
5. Who we share your data with
We only share your data with processors responsible for the technical operation of the website — hosting, email/SMTP delivery, and spam protection (Cloudflare) — each bound by a data processing agreement. Our visit statistics are processed on our own server infrastructure and are not sent to any external analytics service. We never sell personal data to third parties and do not use your data for targeted advertising.
6. Your rights
You have the right to access, rectify, erase, and restrict the processing of your data, the right to data portability, and the right to object to processing. You can exercise these rights by contacting us at info@granaat.be.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA) if you believe we are not processing your data correctly.
8. Changes to this policy
We may update this privacy policy whenever our services, tools, or applicable regulations change. The date at the top of this page shows when the policy was last updated.