Privacy policy

The controller of your personal data is:

• DroneBXL — Maxime Palasthy, self-employed sole trader
• Brussels, Belgium
• Email: contact@dronebxl.be
• Phone: +32 456 95 25 05

DroneBXL only processes data that is strictly necessary. What that covers depends on how you use the site:

• Contact by email, phone or WhatsApp: the information you choose to share. Usually your first and last name, email address, phone number and, where relevant, your company name. Plus a description of your project (location, preferred date, type of service).
• Quote request form: your answers are sent to DroneBXL by email. That covers first and last name, email, phone if you give it, project type, date, location and description. Delivery goes through Web3Forms, a form relay service that only turns your submission into an email, without storing or reusing it. This data is used solely to prepare your quote and reply to you.
• Technical browsing data: as with any website, the hosting provider may record technical logs. These include IP address, browser type, pages requested, date and time. They keep the site running and secure.
• YouTube videos: if you play an embedded video, YouTube (Google) receives the technical data linked to that playback. Section 9 explains how this works.
• Audience measurement: if you accept, Google Analytics 4 records page views, visit duration and quote form submissions. Google does not record your IP address. Without your consent, nothing is recorded.

The site carries no advertising trackers.

Your data is used only to:

• answer your questions and quote requests;
• prepare, carry out and follow up on the services ordered;
• manage the business relationship, invoicing and accounting;
• keep the site running properly and securely;
• meet DroneBXL's legal obligations.

Your data is never sold, rented or passed on to third parties for marketing purposes.

• Pre-contractual steps and performance of a contract (Art. 6(1)(b)): handling your quote requests, organising and carrying out services.
• Legal obligation (Art. 6(1)(c)): keeping accounting and tax records as required by Belgian law.
• Legitimate interest (Art. 6(1)(f)): site security, abuse prevention and follow-up with clients and prospects.
• Consent (Art. 6(1)(a)): Google Analytics audience measurement, only after you accept in the cookie banner.
• Consent (Art. 6(1)(a)): loading the YouTube player, which only happens when you click play yourself. You can withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.

• Enquiries and quote requests that do not lead to an order: 3 years from the last contact.
• Client data linked to a service: for the length of the business relationship. After that, for the statutory retention period for accounting and tax records under Belgian law.
• Technical logs: in line with the hosting provider's retention policy, limited to what site security needs.
• Audience measurement: Google Analytics records are kept for 14 months at most. Google then deletes them.
• Requests received through the form: they land in the DroneBXL mailbox. They are kept for 3 years after the last contact when no work follows. Nothing stays in your browser after sending.

Only DroneBXL has access to your data. The following providers may process it, strictly within the scope of their services:

• Hosting provider: LWS (Ligne Web Services) SAS, 10 rue Penthièvre, 75008 Paris, France.
• DroneBXL's email and telephone service providers, to receive and handle your messages.

Some services only come into play if you choose to use them. Their own privacy policies then apply:

• WhatsApp (Meta): the WhatsApp link on the site opens the WhatsApp app or website. Conversations there fall under WhatsApp's privacy policy.
• YouTube (Google): only when you play an embedded video.
• Google Ireland Limited (Google Analytics): only if you accept audience measurement.

The site's fonts are served from the site itself. No request goes to an external font service.

DroneBXL does not itself transfer your data outside the European Union. Using WhatsApp, accepting audience measurement or playing a YouTube video changes that. Meta and Google may then process some data outside the European Economic Area, particularly in the United States. These transfers are their responsibility. They rely on safeguards such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. To avoid them, contact DroneBXL by email or phone.

Under the GDPR, you have the following rights over your personal data:

• Right of access: get confirmation that your data is processed and receive a copy.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request deletion of your data, subject to legal retention obligations.
• Right to restriction: request a temporary halt to processing in the cases set out in the GDPR.
• Right to object: object to processing based on legitimate interest, on grounds relating to your particular situation.
• Right to data portability: receive the data you provided in a structured, commonly used and machine-readable format.
• Right to withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, email contact@dronebxl.be. If there is reasonable doubt, you may be asked to prove your identity. You get a reply within one month of your request. For complex requests, this period may be extended by two further months, and you will be told.

Requests sent through the form sit in the DroneBXL mailbox: write to contact@dronebxl.be to get a copy or have them deleted.

The site uses no advertising cookies. No non-essential cookie is set before you accept.

• Consent banner: your choice is kept in your browser's local storage, under the key dronebxl:consent. Nothing else is written there.
• Audience measurement: once you accept, Google Analytics 4 sets the _ga and _ga_* cookies in your browser. Google sets their lifetime, up to two years. They count visits and show which pages are useful.
• To change your mind, click “Cookies” at the bottom of any page. You can accept or decline at any time.
• The quote form writes nothing to your browser: no cookie, no local storage. What you type is sent straight by email and leaves the page once sending is confirmed.
• YouTube videos: each video first appears as a static preview. No YouTube content or cookies load until you click play. Once the player starts, YouTube (Google) may set cookies and collect browsing data under Google's privacy policy.

You can delete cookies and local storage data at any time in your browser settings.

DroneBXL applies appropriate technical and organisational measures. They protect your data against loss, unauthorised access, alteration or disclosure. Communication with the site is encrypted (HTTPS). A data breach likely to put your rights and freedoms at risk is reported to the Data Protection Authority within 72 hours. This follows Article 33 GDPR. You are also informed where the law requires it.

Think the processing of your data breaks the rules? You can lodge a complaint with the Belgian supervisory authority. You can also contact DroneBXL first, and your concern will be addressed.

• Data Protection Authority (APD / GBA)
• Rue de la Presse 35, 1000 Brussels
• Phone: +32 2 274 48 00
• Email: contact@apd-gba.be
• Website: www.autoriteprotectiondonnees.be

This policy may change with the site and with the regulations. Any change is published on this page with its update date. For a significant change, a visible notice appears on the site.