Privacy Policy
Who is responsible for your data?
In short: Overtis is a one-person business run by Owen Vromans in Belgium. He decides how your data is used.
Overtis is the trading name of Owen Vromans, a one-person business (eenmanszaak) based in Belgium. When this policy says "we", it means Owen Vromans trading as Overtis.
Here are the details that matter:
- Business: Owen Vromans, trading as Overtis
- Company number (ondernemingsnummer): 1005.936.025
- Email: hello@overtis.consulting
- Address: our full business address is available on request
We are the data controller. That means we decide what personal data is used and why.
What information do we collect?
In short: Only what you type into the contact form (your name, email and message) and your IP address.
We keep things to a minimum. The only personal data we handle is:
- What you send through the contact form: your name, your email address and your message. We use this only to read and answer you.
- Your IP address: a number your internet connection uses. We use it for a short moment to protect the form against spam (see the next question).
We do not ask for anything else, and we do not collect data about you from other sources.
What happens with my IP address?
In short: We use it briefly, in memory only, to stop spam. We do not store or log it.
When you send the form, our app looks at the IP address that our hosting proxy reports. It uses that number only as a key to count how many messages come from the same place in a short time (about one minute, with a maximum of five messages). This check happens in memory and is thrown away straight afterwards. We do not log it, store it or link it to your message.
To be fully honest: the proxy and server that run the website may keep their own standard access logs, and those logs can contain IP addresses for a while. That is normal for any website and is used only to keep the service running and secure.
Why do we use your data, and are we allowed to?
In short: To answer your message and keep the form safe. The law calls this pre-contractual steps and legitimate interest, not consent.
We use your data for two clear reasons:
- To answer you. When you contact us about possible work, replying is a first step towards a possible agreement. The law calls this pre-contractual steps. For other questions, we rely on our legitimate interest in answering people who reach out.
- To keep the form safe. Using the IP address against spam is also based on our legitimate interest in protecting the site.
We do not rely on consent for this, so there is nothing for you to "agree" to before we can read your message. The checkbox on the form simply confirms that you have read this policy.
Do you use cookies or track me?
In short: No tracking and no tracking cookies. The only cookie remembers your language, so we do not need a cookie banner.
We do not track you. To be specific, Overtis uses:
- no analytics
- no advertising
- no profiling
- no tracking cookies
- and we never sell your data
The only cookie we use is a functional one that remembers your chosen language for a year. Because it is not used for tracking, we do not need a cookie-consent banner. This is a positive choice: less clutter for you and less data for us.
We are careful not to claim that "we store nothing", because your message and the technical logs above do exist.
Who else can see your data?
In short: Only the two services we need to run the site: Resend for email and DigitalOcean for hosting, both with EU safeguards.
We share your data with only the two services we need to run the site:
- Resend sends our email. When you submit the form, Resend delivers the notification to us and a short confirmation to you. Resend is a US company, and we rely on the EU Standard Contractual Clauses to protect your data when it is handled.
- DigitalOcean hosts the website on servers in Amsterdam, inside the EU, so the data stays in Europe.
Both act as our processors: they handle data on our instructions and for no other purpose. We do not share your data with anyone else, and never for marketing.
How long do you keep it?
In short: General questions are deleted within 12 months. Client and invoicing records are kept for 10 years, as Belgian law requires.
How long we keep your data depends on why we have it:
- General questions and inquiries that do not lead to working together are deleted within 12 months.
- Client and invoicing records are kept for 10 years. Belgian accounting and tax law requires this, so we cannot delete them earlier.
What if we start working together?
In short: We then collect only the data we need to deliver the work and meet our legal and accounting duties.
If we agree to work together, we will collect a little more, but only what the job actually needs, for example the details required to deliver the service and to send a correct invoice. We collect this to do the work and to meet our legal and accounting duties. We do not gather extra information "just in case".
What are your rights?
In short: You can see, correct, delete, limit, object to or move your data, and you can complain to the Belgian authority.
You have clear rights over your personal data. You can ask us to:
- see the data we hold about you (access)
- correct anything that is wrong (rectification)
- delete your data (erasure)
- limit how we use it (restriction)
- object to us using it (objection)
- receive or move your data to someone else (portability)
To use any of these, just email us at hello@overtis.consulting and we will help.
If you think we have not handled your data properly, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, the GBA/APD) at gegevensbeschermingsautoriteit.be (opens in new tab).
Can this policy change?
In short: We may update it. The date at the bottom always shows the last change.
We may update this policy from time to time, for example if the tools we use change. When we do, we update this page, and the "Last updated" date below always shows the most recent change. There is no separate version to keep track of: the version you are reading is the one that applies.