Privacy notice

01 / Who is responsible?

Artsay is the trading name of Ayoub Oufkir, a sole trader. Business address: Westdiep 4, 8301 Knokke-Heist, Belgium. Enterprise and VAT number: BE0798.081.356. For privacy questions or requests: info@artsay.pro or +32 485 96 44 34.

02 / What data do we process?

The contact form collects your name, email address, selected service, project description and any optional attachment. By email, telephone or WhatsApp, we receive the information you choose to share, including your phone number and message content. A commission may also require company, address, quotation, invoice and payment details. Hosting and security providers may process technical data such as IP address, browser type, requested URL and time for website delivery and security. Do not send medical records, identity documents or other sensitive information through the form. Only share other people’s photos and data if you have a valid reason or their permission.

03 / Why do we process data, and on what basis?

We handle enquiries and prepare quotations to take steps at your request before a potential contract (GDPR Article 6(1)(b)). This also applies to contracts with you personally. For business contacts and general enquiries, we rely on our legitimate interest in professional communication and managing commissions (Article 6(1)(f)). Invoicing and statutory administration are based on legal obligations (Article 6(1)(c)). Security and abuse prevention serve our legitimate interest in protecting our website and communications. Fields marked with an asterisk are needed to handle your enquiry; attachments are optional. Without the necessary details, we cannot properly respond.

04 / Newsletters and commercial messages

The contact form does not automatically subscribe you to marketing. We obtain prior consent for electronic advertising where required (GDPR Article 6(1)(a)). Only where the statutory existing-customer exception applies may we promote our own similar services based on our legitimate interest: contact details must have been obtained during a sale, with an easy, free opt-out when collected and in every message. You may object or withdraw consent at any time via info@artsay.pro or the opt-out facility in the message. We then stop using your data for direct marketing. Withdrawal does not affect the lawfulness of earlier processing.

05 / Who receives your data?

FormSubmit processes the form and emails your submission and any attachment to Artsay. One.com hosts our email. This website is published through OpenAI Sites using Cloudflare infrastructure; these parties may process technical visitor data. Clicking WhatsApp takes you outside our website and WhatsApp/Meta’s terms also apply. Where necessary, an accountant, adviser or delivery partner receives only the information needed for administration or your commission. Competent authorities may receive data where required by law. We do not sell your personal data.

06 / Processing outside the EEA

External providers may process data outside the European Economic Area. Such transfers require a valid GDPR transfer mechanism, such as an applicable adequacy decision or appropriate contractual safeguards. FormSubmit’s public information does not clearly specify processing countries and transfer safeguards; we cannot guarantee exclusively European storage for that service. Contact info@artsay.pro for information about providers and available safeguards. You may email us directly if you do not want to use FormSubmit; the email provider’s terms still apply.

07 / How long do we keep data?

Enquiries that do not lead to a commission, including correspondence and attachments, are kept for no more than 12 months after the last substantive contact. Commission data is retained as needed for delivery, follow-up and possible claims; statutory records are kept for the applicable legal period. Marketing data is used while a valid basis exists, and use stops on withdrawal or objection. A minimal suppression record may be retained to respect your choice. Evidence of consent and information needed for a dispute are retained only while demonstrably necessary. FormSubmit states that it archives submissions for 30 days; according to its documentation, attachments are not accessible through that archive. This is separate from the copy in our mailbox. Technical logs are subject to the retention policies of the relevant hosting and security provider.

08 / Cookies and external services

With your consent (Article 6(1)(a) GDPR), we use Google Analytics 4 for visitor statistics and website improvement. Google receives information about page views and usage, browsers and devices, and pseudonymous visitor and session identifiers. Google may process this data internationally; see Google’s privacy policy and data processing terms for the applicable safeguards. Our tag disables Google signals and advertising personalisation. Without consent, the Analytics tag is not loaded. Our own form code does not send names, email addresses, messages or attachments to Analytics. You can reject or withdraw consent through Cookie settings at the bottom without affecting your enquiry or access to the site. Our cookie policy describes the cookies and their maximum 180-day lifetime. Retention in the Analytics account depends on the account settings. Fonts and images are served from our website. Submitting the form opens FormSubmit, which may use reCAPTCHA and cookies. WhatsApp’s terms also apply after opening that service.

09 / Your rights

You may request access, correction, deletion or restriction of your data. Where applicable, you may request portability, withdraw consent or object to processing based on legitimate interests. Objections to direct marketing are always respected. Email info@artsay.pro. We normally respond within one month; complex requests may take two additional months, in which case we will inform you within the first month. We may request proportionate information to verify your identity. Some data cannot be deleted while a legal retention obligation or other valid exception applies. Artsay does not make solely automated decisions with legal or similarly significant effects.

10 / Security and complaints

We limit access to personal data to what is needed for our services and use encrypted connections where supported by the website and services. No internet service offers absolute security. Report suspected misuse to info@artsay.pro. You may complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, through gegevensbeschermingsautoriteit.be. You may also contact the competent supervisory authority directly without contacting us first.

11 / Changes

We update this notice when our services or data processing change. The date above shows the latest revision. We will communicate important changes appropriately.

Further information from the providers