Privacy
Privacy policy
B&C Enterprise SRL, publisher of the digitaleasy.ai website, processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018. This page explains what we collect, why, how long we keep it and how to exercise your rights.
Last updated: 12 August 2026
01Data controller
- Controller
- B&C Enterprise SRL
- Registered office
- c/o Hive5 — Securex Building, 2nd/3rd floor, Cours Saint-Michel 30b, 1040 Brussels, Belgium
- Company number
- BE 0707.603.419
- Privacy contact
- hello@digitaleasy.ai
Given its size and the nature of its activities, the company is not required to appoint a data protection officer. Any question about your data can be sent to the address above.
02Data collected, purposes and legal bases
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email, phone, company and message — via the contact form | Answer your enquiry and, where relevant, prepare a proposal | Pre-contractual steps at your request (Art. 6(1)(b)) and legitimate interest in responding to enquiries (Art. 6(1)(f)) | 3 years from the last contact |
| Name, work email, phone, company, website, company size, AI maturity and free-text answer — via the offer pre-registration form | Call you back, assess whether the offer fits your situation and, where relevant, prepare a proposal | Pre-contractual steps at your request (Art. 6(1)(b)) | 3 years from the last contact |
| Email address — waiting list for an offer, or newsletter sign-up | Tell you when registration opens, or send you our publications and analyses | Consent (Art. 6(1)(a)) | Until you withdraw consent |
| Cookie-based browsing data: pages viewed, referrer, device type, measurement identifier | Measure audience and understand how the site is used (Google Analytics 4) | Consent (Art. 6(1)(a)), collected through the banner | 13 months maximum |
| Complementary audience measurement: pages viewed, referrer, outbound links, visitor and session identifier | Complement traffic measurement and interaction tracking (taap.it) | Consent (Art. 6(1)(a)), collected through the banner | Visitor identifier kept until local storage is cleared or consent is withdrawn |
| Server logs (IP address, timestamp, requested resource) | Maintain security, diagnose incidents and prevent abuse | Legitimate interest in service security (Art. 6(1)(f)) | 6 months |
| Contract and billing data (clients) | Deliver the engagement and meet accounting obligations | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) | 7 years (Belgian statutory accounting retention period) |
We carry out no profiling and no automated decision-making producing legal effects concerning you. We neither sell nor rent your data.
03Recipients and processors
Your data is accessible to our team and to the providers listed below, acting as processors under contractual instruction. Each one accesses only what its service requires.
| Provider | Role | Location |
|---|---|---|
| Infomaniak Network SA | Hosting of the website and its database | Switzerland — adequacy decision |
| Google Ireland Limited | Google Tag Manager and Google Analytics 4 (audience measurement) — activated only after consent | European Union, with transfers to the United States |
| Google Ireland Limited | Google Fonts — loading of interface icons; your IP address is sent to Google during that load | European Union, with transfers to the United States |
| Google Ireland Limited | Google Search Console — aggregated search statistics, with no individual identification | European Union, with transfers to the United States |
| Fillout Inc. | Hosting and processing of the contact form. The tool relies on its own technical providers, including Functional Software, Inc. (Sentry) for error monitoring | United States |
| Attio Limited | Customer relationship management (CRM): enquiries received through our forms are recorded there so they can be followed up. The platform is hosted on Google Cloud and relies on its own sub-processors, some of them established in the United States | United Kingdom — transfers covered by the standard contractual clauses and their UK addendum |
| taap.it Inc. (company registered in Delaware) | Complementary audience measurement — stores a visitor identifier in the browser's local storage; loaded only after consent | United States — data hosted in the United States |
| Amazon Web Services (CloudFront) and Unsplash Inc. | Delivery of site imagery; no trackers, though the IP address is required to serve the files | United States |
04Transfers outside the European Union
Some providers are established in the United States or transfer data there. Those transfers are covered either by the EU–US Data Privacy Framework where the provider is certified, or by the standard contractual clauses adopted by the European Commission, together with supplementary technical measures.
Primary hosting is located in Switzerland, which benefits from an adequacy decision: that transfer requires no additional safeguards.
05Cookies and trackers
No analytics cookie is set before you agree. Until you accept, tags are loaded in "consent denied" mode: they can neither write a cookie, nor read an identifier, nor recognise you from one visit to the next.
The rules cover more than cookies: they apply to any storage of information on your device. Trackers that write to the browser's local storage are therefore subject to the same requirements, and handled here the same way — nothing is written before you agree. If you withdraw your consent, identifiers already stored are deleted.
| Name | Purpose | Consent | Duration |
|---|---|---|---|
| NEXT_LOCALE | Remembers the language you selected | Not required — strictly necessary | Session |
| de-cookie-consent | Stores your cookie choice (browser local storage) | Not required — strictly necessary | Until browser data is cleared |
| _ga, _ga_3P2QEN4246 | Google Analytics 4 — distinguish visitors and measure audience | Required | 13 months |
| __va_vid, __va_sid, __va_last | taap.it — visitor and session identifier, held in the browser's local storage rather than as a cookie | Required | Until browser data is cleared or consent is withdrawn |
You can change or withdraw your choice at any time, without justification and as easily as you gave it:
Your browser also lets you block or delete cookies already stored. Declining does not restrict access to the site or any of its features.
06Security
The site is served exclusively over HTTPS with HSTS, and hardened with a Content Security Policy and the usual protection headers. Access to the admin interface is authenticated and restricted. Backups are encrypted and held by the host.
In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed without undue delay, in accordance with Article 34 GDPR.
07Your rights
You have the following rights over data concerning you:
- Right of access — obtain a copy of the data we hold about you
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request deletion of your data
- Right to restriction of processing
- Right to object — in particular to processing based on our legitimate interest
- Right to data portability — receive your data in a structured, machine-readable format
- Right to withdraw consent at any time, without affecting the lawfulness of processing already carried out
To exercise these rights, write to hello@digitaleasy.ai. We reply within one month, extendable by two months for complex requests. Proof of identity may be requested in case of reasonable doubt.
You may lodge a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — dataprotectionauthority.be.
08Changes
This policy may change along with the site and the tools we use. The last update date appears at the top of the page. Any substantial change of purpose triggers a fresh request for your consent.