Draft for review by Metal Spark. This notice has not been legally reviewed yet.

Privacy

Privacy notice

This notice explains what personal data we receive when you contact us through this website, why we use it and what your rights are.

Who is responsible for your data

Metal Spark bv, Itselaarlaan 8 (bedrijfspand 1.022), 3290 Diest, Belgium (VAT BE 0765.578.339) is the controller of the personal data described in this notice.

What we collect

This website has no accounts and no newsletter. We only receive personal data when you send us an enquiry through the contact form:

  • your name, company and email address
  • your telephone number, if you give it
  • the subject and message of your enquiry
  • an attachment, if you add one (an image or PDF)

Why we use it

We use these details to answer your enquiry, for example to give you advice, to prepare a quote or to plan an analysis, and to follow up on it.

When you visit the site or send the form, your browser also shares technical data such as your IP address. Our hosting provider uses it to deliver the website and to protect the form against spam and abuse.

We process your enquiry to take steps at your request before a possible contract (GDPR article 6(1)(b)), and on the basis of our legitimate interest in answering business enquiries and keeping the website secure (GDPR article 6(1)(f)).

Who processes it for us

The website is hosted by Cloudflare, Inc. Cloudflare also processes the contact form and provides Turnstile, a check that tells people and bots apart. Turnstile is used only to detect and block bots, not to identify or track you.

Cloudflare is based in the United States. Transfers of personal data to Cloudflare are covered by its Data Processing Addendum, under the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.

The form sends your enquiry to our mailbox, which is hosted by [email provider to be confirmed by Metal Spark].

We do not sell your data or share it with anyone else, unless the law requires it.

How long we keep it

The website itself does not store your enquiry. It is delivered as an email to our mailbox, and that email is the only copy we keep.

We keep it as long as we need it to handle your enquiry and any follow-up, [retention period to be confirmed by Metal Spark]. If your enquiry leads to an assignment, we keep what we need for that assignment and for our legal obligations, such as accounting.

Cookies and tracking

This website sets no cookies and uses no analytics, advertising or tracking. Turnstile on the contact form is a security feature, not a tracking tool.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you
  • have it corrected if it is wrong or incomplete
  • have it erased
  • restrict how we process it
  • object to processing based on our legitimate interest
  • receive it in a structured, commonly used format, or have it sent to another organisation

Complaints

If you think we handle your data incorrectly, please contact us first. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

Questions and requests

To exercise your rights or ask a question about your data, email us. We may ask you to confirm your identity before we act on a request.