Privacy Policy

This privacy policy applies to the website dewofire.be (the "Website"), operated by:

Dewofire BVT
Ter Ferrants 148520 Kuurne, Belgium
Company registration number (VAT/KBO): BE0551.838.344
Email: info@dewofire.be

In this policy we explain what personal data we collect, why, how long we keep it, and what rights you have. This policy is drafted in line with the General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

1. What data do we collect?

1.1 Data via cookies and analytics (PostHog and Google Analytics)

When you visit our Website, with your consent we collect the following data:

• IP address (not stored by default with PostHog Cloud EU; processed in anonymised form by Google Analytics)
• Device, browser and operating system information
• Pages visited, clicks, scroll behaviour and time spent on the Website
• Referral source of your visit (e.g. via search engine, social media, direct link)
• Session recordings (session replay) via PostHog: an anonymised/masked recording of your on-screen interactions on our Website, in which input fields such as passwords and payment details are automatically masked

1.2 Data via the contact form

When you fill in our contact form, we collect:

• Name
• Email address
• The content of your message
• Any other data you voluntarily provide

2. Why do we process this data (purpose and legal basis)?

Website analysis and improving user experience
‍Data: analytics data (PostHog, GA4)
Legal basis: consent (Art. 6.1.a GDPR) via our cookie banner

Understanding how visitors use the Website (session recordings)
‍Data: PostHog session replay
Legal basis: consent (Art. 6.1.a GDPR)

Responding to enquiries via the contact form
‍Data: name, email, message
Legal basis: performance of a (pre-contractual) request / legitimate interest (Art. 6.1.b/f GDPR)

For analytics and session recordings, we always ask for your prior consent via the cookie banner on the Website. You can withdraw this consent at any time (see section 6).

3. What cookies do we use?

Functional/necessary cookies (cookie_consent)
‍Category: necessary
Purpose: proper functioning of the Website (e.g. language choice, cookie preferences)
Retention period: session up to 12 months

PostHog (ph_*)
‍Category: analytics
Purpose: visitor statistics, click behaviour, session recordings
Retention period: up to 1 year

Google Analytics 4 (_ga, ga*)
‍Category: analytics
Purpose: visitor statistics, audience insights
Retention period: up to 14 months

Analytics cookies are only placed once you have given your consent via the cookie banner. You can change your preferences at any time via the cookie settings at the bottom of the Website or via your browser settings.

4. Who has access to your data and where is it processed?

We only share data with processors who help us run the Website, and we enter into a data processing agreement (DPA) with each of them:

• PostHog (PostHog Cloud EU): hosting of analytics and session recording data on servers within the European Union (Frankfurt, Germany). In principle, no transfer takes place outside the European Economic Area (EEA).
• Google Ireland Limited / Google LLC (Google Analytics 4): Google may process data on servers outside the EEA (United States). Google LLC is certified under the EU-US Data Privacy Framework (DPF), which is currently a valid legal basis for this transfer. We monitor developments in this area and will update this policy if necessary.

We never sell your data to third parties.

5. How long do we keep your data?

• Session recordings (PostHog): maximum 1 year, then automatically deleted.
• Analytics data (Google Analytics 4): maximum 14 months, then automatically deleted.
• Contact form: we keep your message and contact details for as long as needed to handle your enquiry, and a maximum of 2 years thereafter, unless a longer retention period is legally required.

6. What rights do you have?

You have the right, at any time, to:

• Request access to the data we process about you
• Request rectification of inaccurate data
• Request erasure ("right to be forgotten") of your data
• Request restriction of processing
• Object to processing
• Request data portability
• Withdraw your consent for analytics/cookies at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, contact us at info@dewofire.be. We will respond within the statutory period of one month.

7. Right to lodge a complaint

Do you have a complaint about how we handle your data? Please contact us first at info@dewofire.be. You also always have the right to lodge a complaint with the supervisory authority:

Belgian Data Protection Authority (DPA)
‍Drukpersstraat 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
Email: contact@apd-gba.be

8. Automated decision-making

We do not make any decisions about you based solely on automated processing (including profiling) that produces legal effects concerning you or otherwise significantly affects you.

9. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted connections (HTTPS), access restrictions and the masking of sensitive fields in session recordings.

10. Minors

Our Website is not specifically aimed at children under the age of 16. We do not knowingly collect data from minors without the consent of a parent or guardian.

11. Changes to this policy

We may update this privacy policy from time to time, for example following changes to our tools or the law. The most recent version is always available on this page, with the date of the last update indicated.

12. Contact

Questions about this privacy policy or about how we process your data? Contact us at:

Dewofire BVE
Email: info@dewofire.be
Address: Ter Ferrants 14, 8520 Kuurne, Belgium

‍