Privacy statement
Who processes your data
This privacy statement describes how personal data is processed when you use bonalogic.be. The controller is Geert Bonamie, trading as Bonalogic, Beverenstraat 44A, 8810 Lichtervelde, Belgium, enterprise number 0882.046.437, reachable at info@bonalogic.be.
Bonalogic is a sole proprietorship. There is no staff who could look at your data: I am the only person who sees it.
What data, and why
This website measures how it is used, but only if you give permission for that. There is no advertising or tracking technology and no embedded third-party content. You do not need an account, and you cannot create one.
Beyond that, data is processed only when you enter it yourself:
| What | When | Why | Legal basis |
|---|---|---|---|
| Name, email address, optionally company name, subject and the content of your message | When you submit the contact form or email directly | To answer your question, and to keep corresponding if work follows from it | Performance of a contract or steps preceding one, and legitimate interest in answering a question |
| Language preference | When you switch language | To show the site in that language | Legitimate interest in a working site, see the cookie statement |
| Which pages you open, how long you stay, which site you arrive from, your language, roughly which country or region you are in, and the device and browser you use | On every visit, but only after you have accepted the analytics cookies | To see which pages get read and whether the site is being found | Your consent, which you can withdraw at any time |
That measurement is done with Google Analytics, loaded through Google Tag Manager. If you refuse, nothing is measured: consent defaults to refused and Google waits for it. Your IP address is used to work out roughly where you are opening the site from and is not stored by Google. No attempt is made to identify you as a person, and the data is not used to target advertising at you.
There is no newsletter and no mailing list. Your email address is not used to send you unsolicited commercial messages, and it is not sold or shared for marketing purposes.
Who your data is shared with
For running the site, sending messages and measuring visits I rely on three processors, and on no one else:
| Processor | Role | Where |
|---|---|---|
| Hostinger | Hosting of the website and the servers it runs on | Frankfurt, Germany (EEA) |
| Resend | Delivery of the email the contact form sends | United States, under standard data protection clauses, see their data processing agreement |
| Measurement of site usage with Google Analytics, loaded through Google Tag Manager, and only after your consent | Google Ireland Limited, Dublin, with transfer to the United States under the EU-US Data Privacy Framework and standard clauses, see their processor terms |
Messages arrive in an ordinary mailbox and are kept there like any other correspondence.
Beyond these processors your data is not passed to third parties, unless a legal obligation or a court order requires it.
How long data is kept
Messages from the contact form are kept as long as they are useful to the correspondence they belong to. If a conversation leads to work, the statutory retention periods for administration and invoicing apply, which in Belgium is seven years. If it leads to nothing, the message is cleared out once it no longer serves a purpose.
The language cookie expires after one year, or sooner if you delete it yourself. The cookie that remembers your choice about cookies expires after six months, after which the question is asked again.
If you accept the measurement, Google keeps the data about your visit for at most fourteen months, after which it is deleted there. The reports that come out of it show counts, not people.
Your rights
You have the right to access your data, to have it corrected, to have it erased, to have the processing restricted, to object to the processing, and to receive your data in a common format.
Consent you have given can be withdrawn at any time, and as easily as it was given: at the bottom of every page there is a "Cookie preferences" link that asks again. Withdrawal applies from that moment and does not make what happened before it unlawful.
To exercise any of these, send a message to info@bonalogic.be stating which right you want to exercise. You will get an answer within thirty days. You may be asked to prove your identity, so that data is not handed to the wrong person.
If you are not satisfied with how your request was handled, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be.
Data supplied by clients
During an assignment a client may supply documents or data containing personal data. In that case Bonalogic acts as processor and the client remains the controller. What happens to that data is set out in a separate data processing agreement attached to the assignment, not in this statement.
Security
Connections to this site run over HTTPS. Access to the servers is limited to me and uses key authentication. Absolute security does not exist, but nothing more is collected than what answers a question or counts a visit, and that is the best protection there is.
Changes
If the way this site processes data ever changes, this statement is updated and the date at the top moves with it.