Privacy Policy
Last updated: 10/10/2026
Dunetrails BV ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and secure your data in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy legislation.
1. Who we are
Dunetrails BV
Schauwegemstraat 37
9090 Merelbeke-Melle
Belgium
VAT: BE1032145326
For any privacy-related questions, you can contact us at:
📧 hello@dunetrails.com
We act as controller for the personal data collected through our website and services.
2. What data we collect
We may collect and process the following categories of personal data:
- Identification data: name, company name, job title, company size (via forms)
- Contact data: email address, phone number
- Professional context: interest in a service tier, project details shared via forms
- Technical data: IP address, browser type, pages visited (via cookies and analytics)
- Communication data: messages and requests via our forms or scheduled calls
We do not knowingly collect special categories of personal data (such as health, religion or political beliefs).
3. How we collect data
- When you fill in a form on our website (e.g. "Request your audit", "Book a call")
- When you contact us by email or phone
- When you interact with our forms or scheduling tools
- Through cookies and analytics tools when you visit our website
4. Why we process your data (legal bases)
- Contractual necessity: to deliver requested services or respond to enquiries
- Legal obligation: to comply with Belgian and EU legislation
- Legitimate interest: to improve our services, ensure security, maintain communication with clients
- Consent: for marketing communication, newsletter subscriptions or non-essential cookies
5. How we use your data
- To respond to questions and schedule calls
- To deliver and improve our managed security services (Essential Shield, Pro Guard, Ultimate Fortress)
- To prepare security audits and recommendations
- To send newsletters and updates (with your consent)
- To comply with legal and accounting obligations
- To safeguard website security and performance
6. Sharing of data
We do not sell your personal data. We may share data with trusted service providers who process data on our behalf, including:
- HubSpot (CRM, forms, scheduling, marketing automation)
- Google Analytics (website analytics, anonymised IPs)
- Amazon Web Services (AWS) (website hosting and storage)
All third parties are bound by Data Processing Agreements (DPAs) to ensure GDPR compliance.
7. International data transfers
If personal data is transferred outside the European Economic Area (EEA) by HubSpot, Google or AWS, we ensure appropriate safeguards, such as EU Standard Contractual Clauses (SCCs).
8. Retention periods
- Client relationship and accounting data: 7 years (legal obligation)
- Marketing and CRM data: according to the platform's standard settings (6–24 months), unless you withdraw consent earlier
- Website analytics data: anonymised data is typically retained for up to 24 months
9. Your rights
You have the following rights under the GDPR:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interest
- Right to withdraw consent (e.g. for newsletters or cookies)
To exercise these rights, contact us at:
📧 hello@dunetrails.com
10. Security
We take technical and organisational measures to protect your personal data, including secure hosting via Amazon Web Services (AWS), access control and encryption where appropriate.
11. Cookies
We use cookies to improve the functionality of the website and analyse visitor behaviour. Non-essential cookies (such as analytics, HubSpot) are only used with your consent. See our Cookie Policy for full details.
12. Contact & Complaints
Do you have questions or concerns about how we process your data? Contact us at:
📧 hello@dunetrails.com
You also have the right to lodge a complaint with the Belgian Data Protection Authority:
🔗 https://www.dataprotectionauthority.be
13. Changes to this policy
We may update this privacy policy to reflect changes in our practices, technology or legal obligations. Updates are published on this page with a new "last updated" date.
