Privacy policy

The controller is the Institut Belge de Cybersécurité Citoyenne ASBL, CBE 1039.889.191, Rue André Lafaille 6, box 012, 6031 Monceau-sur-Sambre, Belgium, which operates the WEBURL service. Contact for any data question: info@weburl.be.

weburl.be has no user accounts, advertising, advertising pixels or embedded social media content. Fonts and images are served from our own server. Internal audience measurement is activated only after your explicit consent.

• Technical server logs: IP address, date and time, requested page, browser and response code, needed to operate and secure the site.
• Optional audience measurement: after consent, the visited URL, referrer and campaign parameters, technical browser and device characteristics, performance, scroll depth, duration and aggregate interactions. A random visit ID and short technical signature connect the start and end of the same visit and help filter bots.
• Your privacy choice: the decision and its expiry are stored locally for 180 days.
• Your messages: the form sends nothing to our server; it prepares an e-mail in your own mail app. We only receive what you choose to send.
• Contractual relationship: if an engagement is agreed, the data needed to deliver, invoice and follow it up.

• Answering your request and preparing a proposal: pre-contractual steps (Art. 6(1)(b) GDPR).
• Delivering and invoicing an engagement: performance of the contract (Art. 6(1)(b)) and legal accounting and tax obligations (Art. 6(1)(c)).
• Securing the site and preventing abuse: legitimate interest (Art. 6(1)(f)).
• Measuring audiences and improving the site: your consent (Art. 6(1)(a)), withdrawable at any time through “Privacy settings”.

We do not use your data for automated prospecting, advertising profiling or resale.

Your data is processed by the WEBURL team. When an engagement requires it, it may be shared with the specialists or suppliers assigned to that engagement, bound by confidentiality, and only to the extent necessary. It may also be disclosed to authorities where the law requires it.

We do not transfer your data outside the European Economic Area. Should an engagement exceptionally require such a transfer, it would be covered by the safeguards of the GDPR and you would be informed in advance.

• Technical logs: a limited period, strictly necessary for security and diagnosis.
• Contacts without a resulting contract: up to 3 years after the last contact.
• Engagement and invoicing data: for the duration of the relationship, then for the periods required by Belgian accounting and tax law.

The site is served over HTTPS only and hosted on infrastructure administered by the association. Access to data is limited to those who need it, and our staff are bound by confidentiality.

You may request access to, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest. Write to info@weburl.be; we reply within one month. Proof of identity may be requested in case of reasonable doubt.

If you believe your rights are not respected, you can lodge a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be — contact@apd-gba.be.

This policy may be updated if our processing changes. The date of the last update appears at the top of the page.