Privacy Policy

1. Who We Are (Data Controller)

For the purposes of data protection laws, including the General Data Protection Regulation (GDPR), the data controller is:

If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise your rights, please contact us at: contact@hantes.be.

2. The Information We Collect and How

We collect information in different ways: information you provide to us directly, information from third-party services when you use them to log in, and some information automatically for essential service functions.

a. Information You Provide Directly

Communication Data:When you contact us directly, for example via a contact form or email, we may collect your name, email address, and the content of your message.

b. Information from Third-Party Login Services

You may choose to register and log in to our Service using third-party authentication providers. By doing so, we may receive personal information from that provider, which may include:

• Your full name
• Your primary email address
• Your profile picture URL
• A unique identifier assigned by the provider

The information we receive depends on your privacy settings with that third-party service, and we do not receive or store your password for those services. Your interaction with these third-party services is governed by their respective privacy policies, not this one.

c. Information We Collect Automatically

Usage and Device Data:Like most websites, our servers may automatically record standard information, such as your IP address, browser type, and operating system. This information is used for legitimate security, system administration, fraud prevention purposes, and to ensure the proper functioning of our Service.

Client-Side Preferences:We use your browser's local storage to save your display preferences, such as your chosen theme (e.g., dark/light mode) and language. This information is stored only on your device and is never transmitted to our servers.

Our Stance on Cookies and Tracking:This site uses no tracking cookies for analytics, advertising, or profiling purposes. We are committed to providing a private browsing experience and do not use third-party services like Google Analytics to monitor your web behavior.

3. How and Why We Use Your Information

We use the information we collect for various purposes, and we ensure we have a legal basis for each processing activity under GDPR.

4. Data Sharing and Disclosure

We do not sell your personal information. We only share your information in the limited circumstances described below:

• Service Providers:We share information with third-party service providers who perform services for us or on our behalf. Specifically, we use Google Firebase for user authentication and database hosting. These providers only have access to your personal information to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal Compliance:We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• To Protect Our Rights:We may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person.

5. International Data Transfers

Your information, including personal data, is primarily stored and processed on servers located within the European Economic Area (EEA), specifically in the europe-west1 region for our Google Firebase services.

However, our primary service provider, Google Firebase, may be based outside your jurisdiction. As such, your data may be accessed from abroad for administrative or technical support purposes. Under GDPR, such access constitutes an international data transfer.

We rely on established legal mechanisms to lawfully transfer personal data across borders, such as the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs).

6. Security and Data Retention

Security:We use administrative, technical, and physical security measures (HTTPS encryption/at rest) to help protect your personal information.

Retention:We will only retain your personal information for as long as necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law.

7. Your Data Protection Rights

Depending on your location (GDPR), you may have the following rights:

• Right to Access:Request copies of your personal data.
• Right to Rectification:Correct inaccurate information.
• Right to Erasure:Request the deletion of your data.
• Right to Restrict Processing:Limit the use of your data.
• Right to Object:Object to processing based on legitimate interests.
• Right to Portability:Receive your data in a structured format.
• Withdraw Consent:Withdraw your consent at any time.
• Non-discrimination:No penalty for exercising your rights.

To exercise these rights, please contact us at: contact@hantes.be. You also have the right to lodge a complaint with a data protection authority.

8. California Residents (CCPA/CPRA)

This section applies to California residents.

Categories Collected:

Identifiers (Name, Email, IP) and Internet Activity (Browser).

• Identifiers
• Network Activity

Sale/Sharing:

We do not "sell" or "share" your personal information (as defined by CCPA).

Sensitive Data:

We do not collect sensitive personal information.

Shine the Light:

We do not disclose personal information to third parties for direct marketing purposes.

9. Children's Privacy

Our Service is not intended for children under 13 (or 16 in the EEA).

10. Changes

We may update this policy. Check the "Last updated" date.

11. Contact Us

If you have any questions: contact@hantes.be.