Privacy policy

The data controller is:

• GH-Groep BV, trading as GH-Groep
• Address: Vinkenlaan 14, 9100 Sint-Niklaas
• Enterprise number: 0779.346.104
• Email: ghgroep@hotmail.com
• Phone: +32 484 10 93 37

For any questions about this policy or your data, you can reach us at ghgroep@hotmail.com. Confirm whether a data protection officer (DPO) has been appointed. If so, state their name and contact details.

We only process the data needed for the purposes described below:

• Contact form: name, email address, phone number (optional), subject and your message.
• Quote form: name, email address, phone number, postcode and town, project type, desired service or system, the description of your project and whether you prefer to be contacted by phone or email.
• Direct contact by email or phone: the information you choose to share with us.
• Customers: the data needed to perform the contract, such as the site address, billing details and technical details of the installation.
• Website visits: technical data your browser sends automatically, such as IP address, browser type, date and time and the page requested. Our hosting provider keeps these in server log files.

Please do not include sensitive data (such as health information) in your message unless it is needed to answer your question.

• Answering your question via the contact form, email or phone. Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR), or steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) when your question concerns a possible assignment.
• Preparing a quote and, if needed, scheduling a site visit. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Performing the contract: scheduling, installation, maintenance, invoicing, warranty and customer service. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Complying with legal obligations, such as our accounting and tax obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Keeping the website secure and working properly (server log files). Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Establishing or defending our rights in a dispute. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

The website has no newsletter and we do not use your data for advertising without your prior consent. We do not sell your data and we do not make decisions based solely on automated processing or profiling.

We keep your data no longer than necessary for the purpose for which it was collected:

• Contact and quote requests that do not lead to a contract: period to be determined, e.g. 12 months after the last contact.
• Customer data: for the duration of the contract and afterwards as long as needed for warranty, liability and any disputes: period to be determined.
• Invoices and accounting records: the statutory retention period, in principle 10 years.
• Server log files: hosting provider's retention period.

When these periods end, we delete or anonymise your data.

We only share your data where needed for the purposes above, with:

• our hosting provider, which hosts the website and the server log files: name and country of establishment;
• the service that processes the forms and delivers them to us by email: name and country of establishment; the form is not yet connected;
• our email provider: name and country of establishment;
• our bookkeeper or accountant and IT service providers, where necessary: complete or remove;
• public authorities, where we are legally required to do so.

Service providers that process data on our behalf do so under a data processing agreement and only on our instructions.

State whether data is transferred outside the European Economic Area (for example by a US hosting or email provider) and on which safeguard, such as an adequacy decision (EU-US Data Privacy Framework) or the European Commission's standard contractual clauses. If not: "Your data is processed within the European Economic Area."

Cookies are small text files that a website stores on your device. This website currently sets no cookies and uses no analytics, advertising or tracking technologies, such as Google Analytics, social media pixels or embedded maps and videos. Fonts are loaded from our own server, so no connection is made to Google or other external services when you visit. That is why we do not show a cookie banner.

If we use non-essential cookies in the future, we will only set them after you have given consent through our cookie banner. Refusing will then be as easy as accepting, and you can change or withdraw your choice at any time via "Cookie settings" at the bottom of every page. Your choice will be stored in a strictly necessary cookie (ghg_consent) for 6 months, after which we will ask you again. This policy will then be extended with an overview of the cookies used.

You have the following rights regarding your personal data:

• Right of access: you can ask which data we process about you.
• Right to rectification: you can have inaccurate or incomplete data corrected.
• Right to erasure: you can ask us to delete your data, unless we must keep it, for example to comply with a legal obligation.
• Right to restriction: you can ask us to temporarily restrict processing.
• Right to data portability: you can receive the data you provided to us in a common format, or have it transferred.
• Right to object: you can object to processing based on our legitimate interest.
• Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time, without affecting processing carried out before the withdrawal.

To exercise your rights, send an email to ghgroep@hotmail.com. We will respond within one month. In exceptional cases this period may be extended by two months; we will let you know if so. To prevent misuse, we may ask you to confirm your identity.

If you disagree with how we process your data, please contact us first. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, such as an encrypted connection (HTTPS) and restricted access to the data. Confirm or complete with the measures that actually apply.

We may update this privacy policy, for example when the website or our services change. The latest version is always available on this page, with the date of the last change at the top.