Privacy Policy

Article 1 — Data Controller

The data controller for your personal data is:

Article 2 — Data Collected

We collect the following data depending on how you use our website:

Via the contact form

• First and last name
• Email address
• Phone number (optional)
• Company and job title (optional)
• Content of your message

Via the order / quote form

• Billing and delivery details
• Order-related information
• Payment information (processed directly by our secure payment provider)

Via the newsletter

• Email address
• Language preference

Browsing data (cookies)

• Anonymised IP address
• Pages visited, session duration
• Browser type and device

Article 3 — Purposes and Legal Basis

Your data is processed for the following purposes:

• Managing enquiries and orders — legal basis: performance of a contract (Art. 6.1.b GDPR)
• Sending the newsletter — legal basis: consent (Art. 6.1.a GDPR), withdrawable at any time
• Website improvement and statistical analysis — legal basis: legitimate interest (Art. 6.1.f GDPR)
• Compliance with legal obligations — legal basis: legal obligation (Art. 6.1.c GDPR)

Article 4 — Retention Periods

• Contact / order data: retained for 5 years from the date of last contact or last order
• Newsletter: retained until unsubscription
• Browsing data: retained for a maximum of 13 months
• Accounting data: retained for 7 years in accordance with Belgian legislation

Article 5 — Data Recipients

Your data is never sold. It may be shared with the following processors, strictly to the extent necessary for their services:

• Brevo (formerly Sendinblue) — newsletter and transactional email management
• Google Analytics — audience analysis (anonymised data)
• Payment provider — secure transaction processing
• OVH SAS — website hosting

These processors are bound by confidentiality obligations and may only use your data for the purposes defined.

Article 6 — International Data Transfers

Some of our service providers may process data outside the European Union. In such cases, we ensure that transfers are governed by appropriate safeguards (European Commission standard contractual clauses or equivalent mechanism).

Article 7 — Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of the data held about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data (“right to be forgotten”)
• Right to restriction: suspend the processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to processing based on our legitimate interest
• Right to withdraw consent: withdraw your consent for the newsletter at any time

To exercise these rights, contact us at info@spiridondeco.com. We will respond within one month.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA): www.autoriteprotectiondonnees.be — Rue de la Presse 35, 1000 Brussels, Belgium.

Article 8 — Cookies

Our use of cookies is detailed in our Cookie Policy.

Article 9 — Changes to this Policy

We reserve the right to amend this policy at any time, in particular to comply with any legal, regulatory or technical developments. The date of the last update is indicated at the top of this document. We encourage you to consult it regularly.

Article 10 — Contact