Privacy policy

Questions about your privacy or a request about your data? Send me an email.

Three kinds:

1. What you fill in via the contact form: name, email and message. Plus your chosen language, time on page, screen width, browser language, referrer and any UTM parameters.
2. Technical data on every visit: your IP address (briefly — at most 10 minutes in working memory, for spam protection) and standard server logs from my hosting provider.
3. Analytical data (only after your cookie consent): pages visited, time on page, anonymised location and device type via Google Analytics 4.

• Messages from the contact form: kept in my mail inbox until I clean up — no fixed expiration. You can always request deletion via the rights section below.
• Rate-limit data: at most 10 minutes in working memory, not persisted.
• Analytics: 14 months by default at Google.
• Server logs: at most 90 days.

Three technical processors help me run this website:

• Microsoft Azure — hosting (EU region).
• Postmark (ActiveCampaign) — sending of transactional emails, EU servers (Ireland).
• Google Analytics (Google Ireland) — website analytics, only after consent. Processing may take place in the US under the EU-US Data Privacy Framework.

I never sell your data and I do not use it for advertising.

Under the GDPR you have the right to:

• Access the data I hold about you.
• Correction of incorrect or incomplete information.
• Erasure ("right to be forgotten").
• Restriction of processing.
• Portability (receive a copy).
• Object to processing.
• Withdraw your consent for analytics.

Send an email to bjorn@blue-bear.be — I reply within 30 days.

Not happy with how I handle your data? You can always file a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels — contact@apd-gba.be — gegevensbeschermingsautoriteit.be).