Who we are
This policy explains what personal data Mendel & Co collects through this website, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Belgian data protection law.
The controller responsible for your personal data is:
Mendel & Co [legal form, e.g. BV / SRL]
Frankrijklei 5, 2000 Antwerpen, Belgium
Company number (KBO/BCE): [0xxx.xxx.xxx]
Email: [privacy@… or info@…]
For any question about this policy or your data, write to us at the email address above.
When you visit the site
When you open the website, our hosting provider [e.g. Cloudflare, Inc.] automatically processes technical data needed to deliver the pages and keep them secure: your IP address, date and time of the request, the page requested, browser type and operating system.
- Purpose: delivering the website, security, preventing abuse.
- Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
- Retention: server logs are kept for a short period and then deleted [confirm with host, e.g. max. 30 days].
All fonts, scripts and images are served from our own server. We do not use Google Fonts, analytics, advertising or social-media tracking.
Project requests and contact forms
When you send a request through the “Start a project” form or the “Talk to us” panel, we process the data you provide:
- who you are (architect, designer, contractor, developer, private client), name and company;
- email address and/or phone number;
- project location, project type and your message;
- drawings or other files you choose to attach.
- Purpose: answering your request and preparing a proposal or quote.
- Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in responding to you (Art. 6(1)(f) GDPR).
- Retention: if no project follows, we delete your request within 12 months of our last contact. If we work together, project and invoicing data are kept for as long as Belgian accounting and tax law requires.
Fields marked with * are required to reply to you. Please do not include sensitive personal data (e.g. health information) in your message or files.
Interactive map
The “Based in” section can show an interactive map. Its map tiles are loaded from the servers of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom), which receives your IP address when the map loads.
- The map only loads if you allow “External media” in the cookie settings or click “Show map”.
- Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via “Cookie settings”.
- The United Kingdom benefits from an EU adequacy decision. See the OSMF privacy policy.
The “Get directions” button opens Google Maps in a new tab; the Instagram link opens Instagram. Both only happen when you click, and from then on the privacy policies of Google and Meta apply.
Cookies and local storage
We do not set cookies. We store one entry in your browser’s local storage to remember your privacy choice. This is strictly necessary and needs no consent. Details are in our Cookie policy.
Who receives your data
We do not sell your data. We share it only with service providers who process it on our behalf under a data processing agreement (Art. 28 GDPR):
- website hosting: [provider name];
- form handling and email: [e.g. form backend / email provider].
If a provider is located outside the European Economic Area, we only use it where an adequacy decision applies (e.g. the EU-US Data Privacy Framework) or with the European Commission’s Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict processing;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, without affecting processing carried out before the withdrawal.
To exercise these rights, email us. We reply within one month.
You also have the right to lodge a complaint with the Belgian supervisory authority: Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, dataprotectionauthority.be.
Security and automated decisions
The website is served only over an encrypted connection (HTTPS). Access to your requests is limited to the people at Mendel & Co who need it to answer you.
We do not use automated decision-making or profiling.
Changes to this policy
We may update this policy when our website or the law changes. The current version is always available on this page, with its date at the top.