1. Who is responsible
ArrowEye BV, VAT BE 1030.266.494, Tervuursesteenweg 575, 1982 Elewijt, België, is the controller for the data collected through this website. You can send questions about this policy to contact@arroweye.be.
2. Which data we process, and why
When you fill in the form
Your name, your email address, your company and what you write to us, possibly your phone number and the training or the subject you are contacting us about. We use that data to reply to you, schedule a call and, if you want, draw up a proposal. Legal basis: the steps needed prior to entering into a contract, at your request (article 6(1)(b) GDPR), and our legitimate interest in answering questions from businesses (article 6(1)(f)).
When you email or call us
The data you send us yourself. We use it only to handle your question.
When you visit the site
Our hosting provider keeps technical log files (IP address, time, requested page, browser) to keep the site secure and available. We do not use those logs to track you. Legal basis: legitimate interest (security and operation of the site).
When you play a video
We show videos through YouTube's privacy-enhanced mode (youtube-nocookie.com). Only when you play a video does your browser connect to YouTube (Google). From that moment, Google's privacy policy applies as well.
3. Cookies and measurement
Today this site sets no analytics or marketing cookies and we use no tools that track your behaviour on the site. If we later decide to measure how the site is used, we will update this policy and ask for your consent where the law requires it, through the cookie banner on the site.
4. Who we share data with
We never sell your data. We share it only with the service providers we need in order to work: our hosting provider, our email and calendar service, and the system in which we keep track of contacts and appointments. Those parties process your data only on our instructions and under a data processing agreement. If a service provider is located outside the European Economic Area, the transfer takes place on the basis of the European Commission's standard contractual clauses or an adequacy decision.
5. How long we keep data
Data from the form or an email we keep for as long as we are following up on your question, and afterwards for a maximum of two years after our last contact, unless a contract has been concluded in the meantime. In that case the statutory retention periods for invoices and contracts apply (seven years). Technical log files are deleted automatically after a short time.
6. Your rights
You can ask us which data we hold about you (access), and ask us to correct it, erase it or restrict its processing, and you can object to processing based on legitimate interest. Data you gave us yourself you can request in a common file format. Email contact@arroweye.be for that; we reply within a month. If you disagree with how we process your data, you can lodge a complaint with the Belgian Data Protection Authority (GBA/APD), Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be.
7. Client data during an assignment
During a training, discovery or build we work in your environment, with your data and according to your rules. For that we conclude a data processing agreement where needed; what it says prevails over this policy. How we set that up is explained on our governance page.
8. Changes
If anything changes in how we process data, we will update this policy and the date at the top. For an important change we will also say so on the site.