Privacy Policy

This policy explains how personal data is processed when you visit this website. It is written to meet the requirements of the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the ePrivacy rules on cookies.

1. Who is responsible for your data (controller)

The data controller for this website is BeEthical, 13 rue Vatable, 80090 Amiens, France. VAT / registration number: FR23508597614.

The point of contact for data protection matters is Enrico Panai. You can reach us about privacy matters at info@beethical.be or on +33 6 22 33 03 28.

2. What data we process

Technical and usage data. When you visit, our hosting infrastructure may process limited technical data such as your IP address, browser type, and pages requested. This is standard for operating a website securely.

Consent data. If you set cookie preferences, we store your choices in a strictly necessary first-party cookie (see the Cookie Policy).

Correspondence. If you contact us (by email or through the contact form), we process the personal data you choose to share — such as your name, email address, organisation, and message — so we can respond and, where relevant, discuss a possible engagement. Contact-form submissions are delivered to us through a specialist form-processing provider acting as our processor.

We use Google Analytics (Google Ireland Ltd) to understand, in aggregate, how the site is used. It runs only after you consent to the Analytics cookie category and sets cookies such as _ga; if you reject Analytics, no data is sent to Google. This may involve a transfer of usage data to Google under its Standard Contractual Clauses. We do not use advertising or social tracking, and we self-host our fonts and interactive map so that the rest of the site does not transfer your data to third-party content networks.

3. Purposes and legal bases

Operating and securing the website — legal basis: our legitimate interests (Art. 6(1)(f) GDPR) in providing a functioning, secure site.

Remembering your cookie choices — legal basis: compliance with a legal obligation and your consent for any non-essential cookies (Art. 6(1)(a) and (c) GDPR; ePrivacy).

Responding to your enquiries — legal basis: our legitimate interests and/or steps taken at your request prior to entering a contract (Art. 6(1)(f) and (b) GDPR).

Non-essential cookies, if ever enabled — legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Who has access to your data

Your data is accessible only to our team and to service providers acting as our processors under appropriate agreements. Our website and email are hosted by Serverplan (serverplan.com), based in Italy, which acts as our processor. The contact form on this site opens your own email client and sends your message directly to us; it does not pass through a third-party form service. We do not sell your personal data, and we do not share it for third-party marketing.

We use Google Analytics for aggregate website statistics, activated only with your consent (see the Cookie Policy). You can withdraw consent at any time via “Cookie preferences” in the footer.

5. International transfers

Our hosting and email provider (Serverplan) operates within the European Union, so your data is processed within the European Economic Area (EEA). We do not currently transfer personal data outside the EEA. If that changes, we will rely on a lawful transfer mechanism (such as an adequacy decision or the European Commission’s Standard Contractual Clauses) and update this policy.

6. How long we keep it

We keep personal data only as long as necessary for the purposes above: technical logs for a short period for security and troubleshooting; your cookie-consent record for up to 180 days before we ask again; and correspondence for as long as needed to handle your request and to meet any legal obligations.

7. Your rights

Under the GDPR you have the right to access your data; to rectify inaccurate data; to erasure; to restrict or object to processing; to data portability; and, where processing is based on consent, to withdraw that consent at any time without affecting prior processing. To exercise any of these rights, contact us at info@beethical.be.

You also have the right to lodge a complaint with a supervisory authority. In Belgium this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit). You may also contact the authority in your EU country of residence.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, and we serve this website over encrypted connections.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date above indicates the current version; material changes affecting cookies will also trigger a fresh consent request.