This page sets out which data we keep about you, why, for how long and who we share it with. Without legal jargon where possible, because you should be able to read this without a lawyer.
Version of 7 October 2026. This English translation is provided for convenience; in case of any discrepancy, the Dutch version prevails.
Miguel Cruz, Nonnenbos 28, 2381 Weelde, Belgium
Company number BE 0667.499.065
info@miguelcruz.eu, +32 484 57 52 70
Miguel Cruz, with registered office at Nonnenbos 28, 2381 Weelde, Belgium, company number BE 0667.499.065, is the controller of the data collected through this website and through our services. You can reach us at info@miguelcruz.eu or +32 484 57 52 70.
When we work on a client's website, mailing list or automation on that client's behalf, we are the processor of that data and our client is the controller. This statement covers our own processing.
If you fill in the contact form: your name, the name of your business, your email address, your phone number, what you are interested in, the budget range you select and whatever you write in the message yourself.
If you email, call or message us on WhatsApp: your contact details and the content of your message.
If you become a client: your billing details, company number, the agreements and quotes, the reports and correspondence related to the assignment, and the login details you give us. We store login details in a password vault, not in ordinary email.
If you visit the website: technical data such as your IP address, your browser, your device, the pages you view and the page you came from. We only collect statistics if you give consent through the cookie banner. We always keep security logs, because otherwise a website cannot be protected.
We never ask for data about your health, your beliefs or other special categories, and we do not want to receive them through the contact form.
To answer your question and prepare a quote. Legal basis: steps prior to entering into a contract, at your request.
To carry out and invoice the assignment. Legal basis: performance of our contract.
To keep our accounts and meet our legal obligations. Legal basis: a legal obligation.
To keep the website secure and working and to prevent abuse. Legal basis: our legitimate interest in a secure service.
To measure how the website is used and to measure advertising. Legal basis: your consent through the cookie banner. You can withdraw it at any time.
To inform existing clients about similar work. Legal basis: our legitimate interest, with an unsubscribe link in every message. If you email us that you no longer want to receive anything, it stops immediately.
Enquiries that do not lead to an assignment are kept for no more than two years after the last contact, so that we can pick up where we left off if you come back later.
Client files are kept for up to seven years after the end of the collaboration. Invoices and accounting records are kept for ten years, because the law requires it.
We delete login details and passwords as soon as the assignment is completed or as soon as you change them yourself.
Security logs are kept for no more than twelve months. Statistics are kept for no more than fourteen months.
We do not sell your data. We pass it on to parties we need in order to work, and only for that purpose. Currently these are:
In addition, we may have to provide data to a government authority or a court when the law requires us to.
Some of these parties are American or have American parent companies. Transfers then take place on the basis of the adequacy decision for the EU-US Data Privacy Framework, or on the basis of the European Commission's standard contractual clauses, supplemented by additional measures. Where possible we choose European servers.
We use AI tools for writing, design, programming and analysis. We would rather be clear about that than vague.
When we build an AI application for a client, we agree in advance which data goes into it, where it ends up and how long it stays there. A chatbot we build always says that it is a chatbot.
We do not take decisions about you based solely on automated processing that have legal effects for you or similarly significantly affect you. There is always a human involved.
This website uses cookies. Exactly which ones, what they are for and how long they remain is set out in our cookie policy. We only place statistics and marketing cookies after you give consent. You can change your choice at any time using the button in the cookie banner.
We take reasonable technical and organisational measures: encrypted connections, two-factor authentication where possible, a password vault, restricted access, automatic backups and a firewall on the website. No measure is watertight. If you notice anything suspicious, let us know at info@miguelcruz.eu and we will look into it the same day.
If a breach nevertheless occurs that poses a risk to your rights, we will report it to the Belgian Data Protection Authority within 72 hours and inform you if the risk is high.
You have the right to access your data, have it corrected or erased, or have its processing restricted. You can object to processing based on our legitimate interest, and you can request your data in a readable file to take it with you. You can always withdraw consent you have given, without affecting what happened before.
Send any question or request to info@miguelcruz.eu. We reply within one month. We may ask for proof of identity if we are unsure who is making the request.
If you are not happy with how we handle your data, please tell us first; we would much rather resolve it ourselves. You can also lodge a complaint at any time with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.
If anything changes in the way we work or in the parties we work with, we update this statement. The date of the latest version is always shown at the top.
