Privacy policy
Information under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Data controller
SRI Group BV (VAT BE1037052239) · Legal form: private limited company (besloten vennootschap, BV) under Belgian law · Registered office: Korte Gasthuisstraat 18/301, 2000 Antwerpen, Belgium · Company number (CBE): BE 1037.052.239 · Register of legal entities: Register of Legal Entities (RPR) Antwerp, Antwerp division · Email: [email protected] · Telephone: +32 484 24 10 00
For any question, email us at the address above. We have not appointed a data protection officer (not required for our activity).
What we process, why and for how long
Search and preview
- Data and purpose: the address typed or point chosen, to find the address and show the preview; we record for which point a preview was requested, never your IP address.
- Legal basis: pre-contractual steps and legitimate interest (art. 6(1)(b) and (f) GDPR).
- Retention: one year.
Order and delivery
- Data and purpose: the address ordered, the dossier, your name and email, the language: to produce and deliver the dossier and send the confirmation.
- Legal basis: performance of the contract (art. 6(1)(b) GDPR).
- Retention: the dossier for twelve months; order data for seven years (Belgian accounting).
Proof of the contract
- Data and purpose: the text of the two boxes ticked with date and time, and the version of the terms.
- Legal basis: legal obligation and legitimate interest (art. 6(1)(c) and (f) GDPR).
- Retention: seven years.
Account
- Data and purpose: if you create one: email, name, encrypted password, the addresses viewed and the last login.
- Legal basis: the contract (art. 6(1)(b) GDPR).
- Retention: as long as you have the account; deleted within thirty days on request.
Security and technical logs
- Data and purpose: hosting logs requests (date, page, IP address, browser) for security.
- Legal basis: legitimate interest (art. 6(1)(f) GDPR).
- Retention: at most thirty days.
Service providers
- Railway Corporation (United States): hosting, on servers in the European Union (Netherlands). Processor.
- Neon Inc. (United States): the database, in the European Union (Germany). Processor.
- Resend Inc. (United States): sending emails, without open or click tracking. Processor.
- Stripe Payments Europe Ltd (Ireland): payment; independent controller for fraud prevention and its legal obligations.
- IGN (Géoplateforme): the address search; we send the typed text or the point, never your identity.
- Google Ireland Ltd: Google Analytics, only if you accept it. Any transfer to Google LLC relies on the EU–US Data Privacy Framework.
Cookies
Without your choice, only technical cookies, exempt from consent (article 82 of the French Data Protection Act): ‘taal’ if you choose a language (one year) and the session if you log in.
Audience measurement, only with your consent: Google Analytics, with the _ga cookies (up to thirteen months). Google never receives the address you search for. In the banner ‘Accept all’ and ‘Refuse all’ carry the same weight; the cross means refusal; ‘Customise’ lets you choose per purpose. Your choice is kept for six months and you can change it at any time with ‘Manage my cookies’ at the bottom of every page.
Advertising: none. No advertising cookies or pixels, no profiling.
Your rights
You can request access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interest and withdraw consent at any time, by writing to us. We reply within one month. You can lodge a complaint with the CNIL (cnil.fr) or the Belgian Data Protection Authority (dataprotectionauthority.be), the lead authority for our registered office.
The dossier contains no data on owners or occupants, and we take no automated decisions about you.
Updated on