Privacy Policy

Last updated: [July 2025]
Your privacy is important to us. This privacy policy explains how INSIDE SPIRIT SRL collects, uses, shares, and protects your personal data when you use our website www.mselisabeth.be. It complies with the General Data Protection Regulation (GDPR – EU Regulation 2016/679), the Belgian law of July 30, 2018 on the protection of individuals, and, where applicable, the TDDDG (applicable in Germany).

1. Data Controller

The data controller is:
INSIDE SPIRIT SRL
Rue Vanderkindere 82
B-1180 Brussels – Belgium
Company number: BE0461.019.719
Legal representative: Mr. Cédryc Henry de Frahan
Contact email: henrydefrahan@me.com

2. Categories of Personal Data Collected

2.1 Automatically Collected Data

When you visit our website, we collect:

IP address (shortened/anonymized)
Browser type, version, preferred language
Operating system, screen resolution
Pages visited, time spent, clicks, mouse movements
Date, time, and frequency of visits
Referrers (sites or links that led you here)

2.2 Voluntarily Provided Data

Data you provide through contact forms or other input fields, such as:

Name, email address, message content, etc.

3. Purpose of Data Processing

Your personal data is processed for the following purposes:

Analyzing website usage (traffic, page views, bounce rate, session duration)
Improving user experience and site performance
Optimizing content and services
Securing forms against automated abuse
Internal statistics and reporting

4. Legal Basis for Processing

In accordance with Article 6 of the GDPR, processing is based on:

Your explicit consent (Art. 6(1)(a) GDPR), for non-essential cookies (e.g. analytics, marketing)
The legitimate interest of INSIDE SPIRIT SRL (Art. 6(1)(f) GDPR), in order to:
- Secure the site using anti-spam tools (e.g. Google reCAPTCHA)
- Analyze performance and improve services

5. Use of Google Analytics

This site uses Google Analytics 4, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

Data collected includes:

Site interaction: pages visited, clicks, internal navigation
Technical data: anonymized IP, browser, device, language, resolution
Approximate location (region/country)

Data transfer:
This data is transferred to Google LLC (USA) under the EU-U.S. Data Privacy Framework, recognized by the EU Commission’s adequacy decision of July 10, 2023. Maximum retention: 24 months.

Legal basis:
Processing is based on your consent (Art. 6(1)(a) GDPR and §25 TDDDG), collected via a cookie banner on your first visit.

Opt-out:
You can disable Google Analytics anytime via our [consent manager] or by installing:
https://tools.google.com/dlpage/gaoptout

More information:

Terms of Use: https://marketingplatform.google.com/about/analytics/terms/
Privacy Policy: https://policies.google.com/privacy
Ad Settings: https://adssettings.google.com/

6. Use of Google reCAPTCHA

To protect our forms, we use Google reCAPTCHA v3 to detect automated abuse.

Data processed includes:

IP address
Browser data
Typing time, navigation behavior, mouse movements
Date and time of access

Processors:
Google Ireland Ltd & Google LLC

Legal basis:
Legitimate interest (Art. 6(1)(f) GDPR) – Security and fraud prevention.

More info: https://policies.google.com/privacy

7. Cookies and Similar Technologies

Cookies may be placed on your device during your visit. Some are essential for functionality, others require your consent (e.g. analytics, marketing).

You can manage cookie preferences or withdraw consent at any time via our cookie banner.
See our [Cookie Policy] for more details.

8. Data Recipients

Your data is only accessible to:

Our authorized internal team
Our technical service providers (host, developers)
Subcontractors bound by data processing agreements (e.g. Google Ireland)

We do not sell or share your data with unauthorized third parties.

9. Hosting & Data Retention

Our servers are located in the European Union.
Google Analytics cookie data is stored for up to 24 months, depending on the cookie type and your settings.

Form data is stored only as long as needed to respond to your inquiry, and automatically deleted after 12 months max.

10. Your Rights

Under the GDPR, you have the following rights:

Right to access your data
Right to rectification
Right to erasure (“right to be forgotten”)
Right to data portability
Right to restrict processing
Right to object to processing based on legitimate interest
Right to withdraw your consent at any time
Right to lodge a complaint with the Data Protection Authority: www.autoriteprotectiondonnees.be

To exercise your rights, please contact us at: [insert GDPR contact email]
We commit to replying within 30 days.

11. Changes

This policy may be updated at any time to reflect legal or technical developments. The date of last update is indicated at the top of this page.

12. Contact

For any questions, comments, or rights requests, contact:

INSIDE SPIRIT SRL
Rue Vanderkindere 82, B-1180 Brussels – Belgium
Email: [henrydefrahan@me.com]
Company number: BE0461.019.719