Privacy policy

Privacy Policy – www.iflux.be

1. Who we are

iFLUX develops sensors and services to measure contaminant and water fluxes in groundwater and surface water. The data controller for the personal data described in this policy is:

iFLUX NV Galileilaan 18 2845 Niel, Belgium Company number BE0683854156

For all questions about privacy or this policy you can contact us at dpo@iflux.be.

2. Scope

This policy applies to our website www.iflux.be in all its language versions, and to the forms, landing pages, newsletters and other marketing e-mails we send through it. It describes how we process personal data of website visitors, people who contact us or request a demo, newsletter subscribers, and contacts at our (prospective) customers and partners.

Our website is built and hosted on HubSpot, a customer relationship management (CRM) and marketing platform. Data you leave on our website is stored in our HubSpot account.

This policy does not cover our data platform YUCA, which has its own privacy policy, nor websites of third parties that we link to (such as our social media pages).

3. Which personal data we process

• Contact and form data: the data you enter in our forms, for example when you get in touch, request a demo, book a meeting, download a document or register for an event: first and last name, e-mail address, phone number, company, job title, country and the content of your message.
• Newsletter and e-mail data: your e-mail address, your subscription preferences and whether you opened our e-mails or clicked on links in them.
• Communication data: the e-mails, meeting requests and other messages we exchange with you, and notes our team makes about our contacts with you.
• Website usage data: pages you visit, the time and duration of your visit, the website that referred you, the forms you submit and the e-mails that brought you to our site. If you accept analytics cookies, this information is linked to a unique cookie identifier and, once you fill in a form, to your contact record.
• Technical data: IP address, browser type, device type, operating system, language settings and an approximate location (country/city) derived from your IP address.
• Business information from public sources: in a business-to-business context we may add publicly available information about your company or professional role (for example from your company's website or LinkedIn profile) to your contact record.

We do not ask for sensitive data (such as health data) through our website. Please do not include such data in your messages.

4. Why we process your data and on which legal basis

We do not sell your data and we do not use it for automated decision-making that has legal or similarly significant effects on you.

5. Cookies

When you first visit our website, a cookie banner asks for your consent. Strictly necessary cookies are always placed; all other cookies are only placed after you accept them. You can change or withdraw your choice at any time via the cookie settings link at the bottom of every page.

The exact list of cookies, with their names, providers and retention periods, is kept up to date in our cookie policy. You can also block or delete cookies in your browser settings, but some parts of the website may then no longer work properly.

6. Who we share data with

We only share personal data with service providers that help us run our website and marketing, and only to the extent needed. They process the data on our behalf under a data processing agreement:

• HubSpot, Inc. and HubSpot Germany GmbH – website hosting, forms, CRM, meeting scheduling, newsletters and website analytics. Our HubSpot account is hosted in HubSpot's EU data centre in Frankfurt, Germany.
• Google – Google Tag Manager and Google Analytics (only after consent for analytics cookies).
• Microsoft – e-mail and calendar (Microsoft 365), when we answer your message or schedule a meeting.

If you accept advertising cookies, LinkedIn and Google receive information about your visit to measure and target our campaigns. For these purposes they may act as (joint) controllers; their own privacy policies then apply as well.

Where relevant to your request, we may pass your contact details to an iFLUX distributor or partner in your country so they can help you. We tell you when we do so. We may also disclose data when required by law or by a court order.

7. Transfers outside the European Economic Area

We store the data from our website within the European Economic Area. Some of the providers listed above (such as HubSpot, Google, Microsoft and LinkedIn) belong to groups established in the United States and may access or process data outside the EEA, for example for support or security. In that case we rely on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on the Standard Contractual Clauses of the European Commission.

8. How long we keep your data

After these periods we delete or anonymise the data.

9. How we protect your data

iFLUX operates an information security management system following ISO/IEC 27001. Among other measures:

• all traffic to our website is encrypted (HTTPS);
• forms are protected against spam and abuse;
• access to our CRM is limited to employees who need it for their job, using personal accounts with multi-factor authentication and role-based permissions;
• we only work with service providers that offer appropriate security guarantees and have signed a data processing agreement with us.

10. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you;
• have incorrect data corrected;
• have your data erased, unless we are legally required to keep it;
• restrict the processing or object to processing based on our legitimate interest;
• object at any time to the use of your data for direct marketing;
• withdraw your consent at any time (for example by unsubscribing from our newsletter or changing your cookie settings), without affecting the lawfulness of processing before the withdrawal;
• receive your data in a structured, machine-readable format (data portability).

To exercise these rights, contact us at dpo@iflux.be. We will answer within one month. We may ask you to confirm your identity first.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be).

11. Changes to this policy

We may update this policy, for example when we add new tools or features to our website. The version number and date at the top of this page show when it was last changed. For significant changes we will inform our newsletter subscribers by e-mail.