Data controller

The data controller is Plomberie Van Molder, Prinsenbos 45 bt2, 1502 Lembeek, Belgium (enterprise number 1004.731.938, VAT BE 1004.731.938). For any question or request about your data: [email protected] or 0470 868 853.

We are not required to appoint a data protection officer; requests are handled directly by our team at the address above.

Data subjects and source of the data

This policy covers visitors to the site, people who contact us (phone, email, WhatsApp, form) and our customers. Data is collected directly from you, or automatically by your browser when you use the site (technical data, cookies if you accept them).

Data processed, purposes and legal bases

We only process the data needed for each purpose:

  • Contact requests (phone, email, form, WhatsApp): name, phone, email, town, description of the problem, attached photos and the content of your messages. Purpose: answer your request, agree a time slot and prepare the visit. Legal basis: pre-contractual steps at your request and legitimate interest in answering enquiries.
  • Carrying out and following up a job: contact details, job address, equipment information, work history, invoicing and payment. Legal basis: performance of the contract and legal obligations (accounting, VAT).
  • Handling complaints and disputes: relevant exchanges and documents. Legal basis: legitimate interest in defending our rights and, where applicable, legal obligation.
  • Site security and prevention of spam and abuse (form): IP address, anti-bot field, rate limiting, technical logs. Legal basis: legitimate interest in protecting the site and its users.
  • Analytics and advertising (Google Analytics, Google Ads, Meta pixel, only if enabled): cookie identifiers, pages viewed, device, interactions (click on phone or WhatsApp), conversions. Legal basis: your consent, which you can withdraw at any time.
  • Technical preferences (language, cookie choice, display mode) stored on your device. Legal basis: legitimate interest and technical necessity of the service requested.

Fields marked as required are needed to process your request; without them we cannot follow it up. We make no decision based solely on automated processing that has legal effects on you.

Photos and content you send us

The photos and messages you attach to your request (for example a leak, a boiler display, damage) are used only to understand and prepare the visit. Do not include third parties’ faces, identity documents, health data or other sensitive data. If a photo unintentionally contains such data, write to us to have it deleted.

Recipients and processors

Your data is accessible to our team and, where necessary, to providers acting on our behalf or in their own name. They are bound by confidentiality and may use your data only to provide their service:

  • Website host: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (vercel.com).
  • Email / SMTP provider used to receive form messages.
  • Google (Analytics, Ads, Maps, Google reviews) if those services are enabled or displayed; Meta (WhatsApp, pixel) when you use those channels or if the pixel is enabled; Cloudflare (Turnstile) if the anti-bot protection is enabled.
  • OpenStreetMap (base map of the service-area map): your IP address is sent to load the map tiles.
  • Our accountant, our legal advisers and, where the law requires it, the competent authorities.

We do not sell your data and do not use it for third-party commercial prospecting.

Transfers outside the European Union

Some providers (hosting, Google, Meta) may process data in the United States or other countries outside the European Economic Area. These transfers rely on an adequacy decision (EU–US Data Privacy Framework) or on the European Commission’s standard contractual clauses, with the safeguards required by the GDPR. You can ask us for more information about this.

Retention periods

  • Contact requests with no follow-up: as long as needed to answer them, then 24 months at most.
  • Customer data and job history: during the business relationship, then as long as needed for warranty, claims and legal obligations.
  • Accounting records: 7 years, as required by Belgian law.
  • Cookies and measurement identifiers: see the cookie policy (from 90 days to 2 years depending on the cookie); your cookie choice is kept for 12 months.
  • Host technical logs: according to its policy, for a limited time.

When these periods end, data is deleted or anonymised.

Your rights

Under the conditions of the GDPR you have the following rights: access, rectification, erasure, restriction of processing, objection (in particular where processing relies on our legitimate interest), portability of the data you provided to us, and withdrawal of your consent at any time without affecting the lawfulness of earlier processing.

To exercise your rights, write to [email protected] stating your request. If there is reasonable doubt we may ask you to prove your identity. We reply within one month, extendable by two months for complex requests, in which case we will tell you. Exercising your rights is in principle free of charge.

Cookie consent and marketing

Analytics and advertising cookies are set only with your consent; you can give, refuse or change it at any time from “Cookie settings” in the footer. We do not send unsolicited commercial messages; if you contact us, we use your details only to answer your request.

Children

This site is aimed at adults and is not intended for children. We do not knowingly collect data from children under 13; if you think a child has sent us data, contact us so that it can be deleted.

Security and data breaches

We take reasonable technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access, rate limiting and anti-bot protection on the form, regular updates. In the event of a data breach likely to put your rights at risk, we will notify the Data Protection Authority within the legal deadlines and, where necessary, you.

WhatsApp, phone and email

If you contact us on WhatsApp, your messages pass through Meta’s service, which is subject to its own privacy policy. Messages sent by email or through the form pass through our email provider. Avoid including banking or sensitive information in them.

Google services

When Google services are enabled (Analytics, Ads, Maps, reviews), Google processes data under its own policy and may act as a separate controller. To learn how Google uses information from sites that use its services: policies.google.com/technologies/partner-sites. You can manage your ad preferences at adssettings.google.com and prevent collection by Google Analytics with the opt-out add-on Google provides.

Cookies

The cookies and trackers used on the site, their purpose and their duration are detailed in the cookie policy.

Complaints

If you believe your rights are not respected, you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, [email protected], www.dataprotectionauthority.be, without prejudice to any court action. We invite you to contact us first so that we can resolve the issue.

Changes to this policy

We may update this policy, in particular if we add a service or change a processing activity. The online version prevails. Last updated: 3 October 2026.