Your data, in plain terms.

Data controller

Click Lab SRL, Route de Philippeville 377 — 6010 Couillet, Belgium — company number 0480.064.579 — is the controller for the processing described on this page.

For any question about your data: db@clicklab.be.

The data we collect

We collect nothing without your knowledge. Specifically:

• Contact form — name, company, email, phone, division concerned, message content and the timestamp of your consent.
• Project estimator — your email address and the parameters of the brief you send us.
• Technical server logs — IP address, date and time, page visited, browser type. Generated automatically by the host for security and diagnostics.
• Display preferences — light/dark theme and language, stored in your browser and never transmitted to our servers.

Why, and on what legal basis

• Answering your enquiry and preparing an offer — pre-contractual steps taken at your request, and your consent (Art. 6(1)(b) and 6(1)(a) GDPR).
• Keeping the site secure and working — legitimate interest of Click Lab (Art. 6(1)(f)).
• Meeting our accounting and tax obligations once a commercial relationship begins — legal obligation (Art. 6(1)(c)).

We do not use your data for unsolicited prospecting, and we carry out no automated decision-making or profiling.

Who receives your data

Your data stays with us. Three technical providers act in the chain, as processors:

• Web3Forms — delivers the content of the forms to our mailbox. No data is stored with them on a lasting basis.
• Our host — OVH SAS — 2 rue Kellermann, 59100 Roubaix, France — ovh.com — hosts the site files and generates the technical logs.
• Google Fonts — typefaces are loaded from Google's servers, which therefore receives your IP address when the page is displayed.
• Our accounting and legal advisers where applicable, strictly within their statutory remit.

Transfers outside the European Union

Web3Forms and Google are established in the United States. These transfers are governed by the European Commission's standard contractual clauses and, where applicable, by the EU — US Data Privacy Framework. The rest of our processing takes place in Europe.

How long we keep it

• Enquiry with no follow-up — 12 months from the last exchange.
• Commercial relationship — the term of the contract, then 10 years under Belgian accounting obligations.
• Technical logs — 6 months at most.
• Preferences in the browser — until you clear them yourself.

Your rights

The GDPR gives you the right to access your data, to have it rectified or erased, to restrict its processing, to object to it, to request its portability, and to withdraw at any time a consent already given.

A message to db@clicklab.be is enough. We reply within one month. We may ask for proof of identity where reasonable doubt exists.

Complaints

If our answer does not satisfy you, you may lodge a complaint with the Belgian Data Protection Authority:

• Data Protection Authority (APD/GBA)
• Rue de la Presse 35, 1000 Brussels, Belgium
• contact@apd-gba.be — dataprotectionauthority.be

Security

The site is served exclusively over HTTPS. Access to the messages received is limited to the people at Click Lab who have to answer them. Our backups are encrypted and tested. In the event of a data breach posing a risk to your rights, we notify the authority within 72 hours and inform you if the risk is high.

Changes

This policy may change as the site does. The date of the last update appears at the top of this page; any substantial change will be flagged on the home page.