Document drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. The boxed items must be completed before this site goes public.
Data controller
The controller of the data collected on this site is: AkaCorp SRL, CBE 1040.345.784, Rue Berthelot 154, 1190 Forest (Brussels), Belgium, reachable at contact@akacorp.dev.
Given the nature and volume of the processing described below, appointing a data protection officer is not mandatory. Requests concerning personal data are handled directly by the controller.
What is actually collected
This site has no visitor accounts, no newsletter and no member area. The only data recorded is what you deliberately type into one of the two public forms, plus a technical fingerprint used to curb abuse and a language cookie.
Contact form
- Name and email address: required in order to reply to you.
- Company, subject and indicative budget: optional, used to qualify the request.
- Message content and date of submission.
- Hashed IP fingerprint (see below): limiting automated submissions.
Comments below articles
- Name or pseudonym: published with the comment. Nothing requires you to use your legal name.
- Email address: optional, never published, never used to write to you for reasons unrelated to your comment.
- Comment content and date of publication.
- Hashed IP fingerprint and browser user agent: moderation and spam prevention.
IP fingerprint
Your IP address is never stored in clear text. On arrival it is turned into a salted, truncated SHA-256 fingerprint that cannot be reversed and only makes it possible to observe that several submissions share the same origin. This fingerprint cannot identify you, locate you or follow you from page to page.
Language preference
The site exists in French, English and Dutch. The language on display is stored in a technical cookie so that the right version is served on your next visit. That cookie holds nothing but a language code — “fr”, “en” or “nl” — with no identifier and no browsing history.
Audience measurement
Each article has a plain view counter incremented when the page is served. It is an aggregate number: no identifier, no session data and no browsing profile is attached to it.
Technical logs
The web server produces connection logs (IP address, date, requested resource) kept on AkaCorp’s own infrastructure for security and diagnostic purposes. They are rotated automatically, are never cross-referenced with other data, and serve no audience-measurement purpose.
Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Contact message | Answer your request and, where relevant, prepare a proposal | Pre-contractual steps taken at your request (art. 6.1.b GDPR) |
| Comment | Publish your contribution below the article concerned | Legitimate interest in running a discussion space, acted upon by your voluntary publication (art. 6.1.f) |
| IP fingerprint and user agent | Prevent spam and automated submissions | Legitimate interest in keeping the service secure (art. 6.1.f) |
| Language cookie | Serve the site in the language you selected | Cookie strictly necessary for the service requested, exempt from consent |
| Administration session | Authenticate the site editor | Legitimate interest in securing access (art. 6.1.f) |
Your contact details are never used for unsolicited marketing, nor transferred, rented or resold.
Retention periods
| Data | Period |
|---|---|
| Contact message with no follow-up | Archived, then deleted at the latest 12 months after the last exchange |
| Message that led to a contractual relationship | 3 years from the last contact, without prejudice to the accounting obligations applying to the file |
| Published comment | Kept for as long as the article is online, or until you ask for its removal |
| IP fingerprint and user agent | Deleted together with the message or comment they are attached to |
| Language cookie | 12 months, or until you clear it in your browser |
| In-memory anti-spam counter | 30 minutes, then purged automatically |
Cookies and trackers
This site sets no analytics cookie, no advertising tracker and no social network pixel. There is therefore no consent banner: the only two cookies in use are strictly necessary to operate the site and, as such, exempt from consent.
Typefaces are served from the site’s own domain. No request is made to a third-party server during your visit, and no browsing data leaves the hosting infrastructure.
| Name | Purpose | Duration |
|---|---|---|
akacorp_locale | Remember the language you selected in order to serve the right version of the site. Holds a language code only, no identifier. | 12 months |
akacorp_session | Keep the site administrator’s authenticated session. Set after a successful back-office login, never during an ordinary visit. | 7 days |
Recipients and processors
The data is accessible to the controller alone, through a password-protected back office. The following act as technical processors:
- the provider hosting the site and its database: Amazon Web Services EMEA SARL;
- the service delivering notification emails, called only when a contact message arrives: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
No data is passed to a third party for commercial, statistical or advertising purposes.
Transfers outside the European Union
The website and its database are hosted in France, in the AWS Europe (Paris) Region. Notification e-mails are delivered by Google Ireland Limited: this processor may involve processing outside the European Union, covered by the EU–US Data Privacy Framework and, additionally, by the European Commission’s standard contractual clauses. No other transfer to a third country takes place.
Security
- TLS encryption of all traffic across the site.
- Restrictive HTTP security headers and a ban on framing the site inside a third-party frame.
- IP addresses never stored in clear text: only a salted, non-reversible fingerprint is kept.
- Administration password stored as a bcrypt hash, session signed cryptographically.
- Comment content rendered as plain text, with no code interpretation, to rule out injection.
Your rights
You have the right to access, rectify, erase, restrict, object to and port the data concerning you.
To exercise them, write to contact@akacorp.dev stating the purpose of your request. You will receive an answer within one month. In case of reasonable doubt about your identity, additional proof may be requested.
A comment or a contact message is deleted on simple request, with no justification required.
If the answer given does not satisfy you, you may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.
Minors
This site addresses a professional audience. In Belgium the age of digital consent is 13: no data is knowingly collected from anyone younger. Any data reported as coming from a child under 13 is deleted without delay.
Changes to this policy
This policy may be amended to reflect changes to the site or to the applicable rules. The date of the last update appears at the top of the page; details about the publisher and the hosting provider are set out in the legal notice.