Only if you accept “Anonymous statistics” in the cookie settings do we count your visits, with our own first-party, cookieless system — no Google Analytics or other third party. For each page view we store the page, your browser language and browser type, a shortened (anonymised) IP address, and a visitor code that changes every day, so visits cannot be linked across days. For the first page of a visit we also store where you came from, reduced to the site name (e.g. “Google” — never the full address), and your country, looked up on our own server from your IP address before it is shortened (IP geolocation by DB-IP); the full IP address is never stored. If you reject statistics, or your browser sends Do Not Track or Global Privacy Control, nothing is recorded. Purpose: understanding which pages are useful. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings”; withdrawing does not affect counting that took place before. We also record each consent choice — its date, version and the categories chosen, without your IP address or any identifier — so we can show that consent was given.
The public website loads nothing from third parties (our fonts are hosted on our own servers) and uses no advertising or tracking cookies. It only keeps the strictly necessary items below in your browser; they need no consent and cannot be switched off. The customer and admin portals add one strictly necessary, secure session cookie (bp_rt) when you sign in; it is deleted when you sign out and expires after at most 30 days. The portals also remember in your browser that you have signed in before.
| Name | Purpose | Kept for |
|---|---|---|
.AspNetCore.Antiforgery.* |
Protects the contact form against forged submissions. | Until you close the browser |
BlackPanda.Consent |
Remembers your privacy choice. | 6 months |
When you send us a message we store your name, email address, phone number, company, topic and message, together with your IP address and browser type to protect the form against abuse. We use it only to answer you. Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing spam (Art. 6(1)(f)).
If you have an account in our customer portal we store your name, email address, company details, language and the marketing and cookie choices you made — with the date and IP address of each choice, so we can prove your consent. Your organisation's administrator can block your account and add a reason; you see that reason when you try to sign in. Legal basis: performance of the contract with your organisation (Art. 6(1)(b) GDPR).
To protect accounts against misuse we log sign-ins, failed sign-in attempts and other security events with the IP address and browser type involved, and we block IP addresses that make repeated failed attempts until we review them. Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
Page-view statistics, consent records, security logs and contact-form messages are kept for six months. Every six months we delete everything older than that, so these records are never kept for more than about twelve months. Account data is kept for as long as your account exists. Invoices and orders are kept for seven years, because Belgian accounting law requires it.
You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable format, and you can withdraw a consent at any time. You also have the right to lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).
If you have any questions about your data, get in touch via Contact
Turning your digital dreams into reality.
CONTACT
BTW 1028 52 62 36
