Legal
Privacy notice
Draft: this notice is awaiting legal review.
Who is responsible for your data
The controller of personal data collected through this website is ELILJO ADVISORY BV, Grotesteenweg 122, 2440 Geel, Belgium, enterprise number (KBO/BCE) 1042.599.946.
Privacy questions: privacy@eliljoadvisory.be.
What data this website collects
This website only collects the information you choose to submit through the contact form: your name, business email address, organisation, subject or engagement interest, and your message.
To protect the contact form against spam, the website uses Cloudflare Turnstile. It checks technical signals from your browser and connection (such as your IP address) to distinguish people from automated bots. Cloudflare may set a strictly necessary security cookie for this purpose; it is not used for advertising or tracking. See Cloudflare's Turnstile Privacy Addendum.
The website itself uses no analytics, no tracking technologies and no advertising cookies.
Why the data is used
Your details are used only to respond to your enquiry and, where relevant, to follow up on the conversation you started. They are never sold, shared for marketing, or added to a mailing list.
Legal basis: our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR) and, where your enquiry concerns a possible engagement, taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). The spam protection relies on our legitimate interest in keeping the contact form secure.
Who processes the data
- Website hosting: Microsoft Azure Static Web Apps. It serves the static pages only and stores no form data. Microsoft processes visitors' IP addresses to deliver the pages through its global network, under Microsoft's data processing terms and, where data leaves the EU, the EU–US Data Privacy Framework and standard contractual clauses.
- Contact form relay: Microsoft Azure Functions, region Belgium Central
- Form processing and email delivery: Microsoft Azure Logic Apps (region Belgium Central) and Microsoft 365 (Exchange Online), within ELILJO ADVISORY's own Microsoft tenant. Microsoft stores this Microsoft 365 data at rest in Belgium.
- Spam protection: Cloudflare Turnstile (Cloudflare, Inc.), under Cloudflare's data processing terms, the EU–US Data Privacy Framework and standard contractual clauses
How long data is kept
Enquiries that do not lead to an engagement are deleted no later than 12 months after the last contact. If an enquiry leads to an engagement, the correspondence becomes part of the engagement records and is kept for as long as needed for that engagement and for legal and accounting obligations.
Your rights
Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, contact privacy@eliljoadvisory.be.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be.
Changes
Last updated: [date of publication].