1. Who is responsible?
Kook & Ko is the name of Demo 2 by Webglobe Webdesign & Development, enterprise number BE 1023.233.303, established in Landen (3400 Neerwinden), Belgium. Webglobe is the provider and data controller. Contact and privacy requests: info@webglobe.be.
Mention ‘Kook & Ko / Demo 2’ in a request so we handle the correct account. A Demo 2 request does not automatically change a separate Demo 1 account.
2. Data, purposes and legal bases
We receive account information from you, technical information with your requests and test payment statuses from Mollie. The account and test payment flow does not require a date of birth, identity card or real payment card details. A test order does store the delivery address you enter and the selected delivery method. The order address remains a snapshot even if you later edit your profile. Do not use another person’s address for a fictional delivery. Section 11 covers a separately requested PostNL sandbox label.
- Account: name, username, email, country, postcode, city, location check status and time, password hash, account status and sign-in times to provide and secure the requested account. Basis: performance of the service agreement (GDPR Article 6(1)(b)); separate abuse prevention uses legitimate interests (6(1)(f)). An optional phone number is used only if you request telephone contact.
- Verification and recovery: limited records of email confirmation, MFA and password recovery, including times, expiry and protected token/code values. If you choose to remember your own browser profile after email MFA, we store a derived device hash, your account ID and account security version, plus verification, expiry, last use and creation times in UTC. The purpose is to establish email control, recognise your chosen browser profile and prevent unauthorised access, on the same bases as the account. This device trust is not used for tracking or advertising.
- Return requests for test orders: order and account IDs, selected items and quantities, reason, reference, status and timestamps. These requests remain after logout for the requested demo feature and follow-up by authorised managers. The standalone return example remains in the session only. Managers can edit Kook & Ko profile details and demo shipping and return statuses; changes and management access are logged on a limited basis for accountability. Return data follows the same retention assessment and rights procedure as its test order and is included in access and reviewed erasure.
- Test orders: internal customer and order IDs, products and variants, quantities, fictional prices, delivery address, delivery method, language, test payment ID, status and evidence of your demo acknowledgement. The purposes are requested checkout, history and error handling (6(1)(b)), and preventing duplicate or incorrect processing (6(1)(f)). An internal ID is pseudonymous, not anonymous.
- Terms: accepted version, language and time to document the service agreement (6(1)(b)) and limited evidence for a dispute (6(1)(f)). This is not marketing consent.
- Security: IP address, browser information, route, time, session/device binding and limited risk signals or counters to protect accounts and the service from abuse (6(1)(f)). The interests are preventing account takeover, fraudulent requests and disruption.
- Questions and rights requests: contact details, content and necessary follow-up to respond (6(1)(b) or 6(1)(f)). Mandatory privacy requests are handled to comply with a legal obligation (6(1)(c)). Do not send sensitive information unnecessary for your request.
3. Required and voluntary data
Required registration fields and verification steps are needed to provide a secure account. Without an email address, username, name, country, postcode (where applicable), city, password and email verification, we cannot provide a usable account. A phone number is voluntary; omitting it does not prevent demo use.
Viewing the catalogue, terms and privacy notice does not require a customer account. If the demo is temporarily protected by an access password, that access restriction also applies to the demo. Registration does not give consent to additional purposes.
4. Recipients
Access is limited to authorised administration and parties needed to provide the service within their role. We do not sell personal data or give customer profiles to advertising networks. Section 11 covers the separate optional PostNL test service and its data.
- Level27 provides hosting and infrastructure for the application, database, cache and any hosting backups, processing hosted data on Webglobe's instructions.
- Brevo delivers transactional account and security emails. It receives the address, an optional greeting name, necessary message content and delivery information. Your own mail provider processes received messages under its own arrangements.
- Mollie processes the test payment. We send the fictional amount, language, order and internal user IDs, the demo designation and return/webhook information, not your password. Opening Mollie also transmits information directly from your browser. Mollie describes its own processing as an independent controller in its privacy notice.
- Competent authorities or professional advisers may receive information only for a concrete legal obligation or where necessary for a legal claim.
5. International processing
A European supplier does not automatically mean all support or subcontractors operate exclusively in the European Economic Area. Processing outside the EEA requires an applicable transfer mechanism, such as an adequacy decision or EU Standard Contractual Clauses with supplementary safeguards where needed.
Contact info@webglobe.be for the locations, subprocessors and safeguards applicable to Webglobe's service providers and how to obtain a copy. Mollie's own processing is also covered by its own privacy information and contact channels. The optional PostNL connection requires its specific locations, subprocessors and transfer safeguards to be established before activation; see section 11. Acceptance of terms does not give general consent to international transfers.
6. Retention and deletion
The validity of a session or security code is different from the retention of a limited evidence record. An expired code cannot be reused even if a related record still exists for security.
Archiving orders or returns is not deletion and does not extend retention periods. Section 5a of the terms explains the demo deadlines and archive rules. An expired return remains recorded as Expired without simulated receipt or reimbursement. Open returns remain available for follow-up, including when a shipping deadline passes while they are already in transit. Access and reviewed erasure also cover the archive. The separate PostNL label retention period and rules for email copies remain unchanged.
- Accounts and test orders: while the account is provided and the data is needed for requested history and completing or investigating a test payment. On account closure or an erasure request, we assess what can be erased or anonymised. Any further retention is limited to a demonstrable incident, concrete obligation or legal claim; fictional orders do not automatically constitute real tax records.
- Active sessions: 'This is my own device: keep me signed in' is selected by default and allows up to 7 days from completed sign-in. Turn it off on a shared device: the limits are then 30 minutes of inactivity and 8 hours from completed sign-in. Use does not extend the absolute session limit. Signing out, revocation or an account security change can end validity earlier.
- Remembered browser profiles: after successful email MFA, with keep me signed in enabled, this browser profile can be trusted for 30 days. That fixed period is separate from the session of up to 7 days; a subsequent valid password sign-in may then skip the email code. Use does not automatically renew the trust. Revoke it under Account > Sessions; sign out an existing session separately. Password and other account security changes also revoke the trust. The existing periodic cleanup job removes expired records in bounded batches; they stop authorising access as soon as they expire.
- Confirmation links and email MFA are short-lived as specified in the email; the standard email verification window is 10 minutes. Recovery codes follow the short window in the recovery message. Reuse or invalid verification is rejected.
- Under the general security policy, security logs are normally retained for no more than 90 days. A limited relevant portion may be needed longer for a demonstrable incident. Short-lived rate-limit data expires according to its security window.
- The cart, favourites and local recovery marker are stored in the browser tab session. Signed-in selections also synchronise with your account, as explained in section 16. The browser may reopen a tab session during recovery. Clear local data through browser settings and remove account selections through the shop.
- Backups are not an active user environment. Erasure from active storage does not necessarily immediately remove every existing backup copy. The applicable backup cycle and any preservation for incident investigation must be considered when handling an erasure request; previous erasures must be respected after restoration.
8. Your privacy rights
You can request access and a copy, correction, erasure, restriction and portability where its conditions apply. You can object to processing based on legitimate interests because of your particular situation. Any consent for optional processing can be withdrawn without affecting the lawfulness of processing before withdrawal.
Email info@webglobe.be and mention Demo 2. You can also request account correction or closure through this contact channel. Preferably use your account email. We seek proportionate additional identification only when necessary; do not send a complete identity card unsolicited.
We normally inform you about action taken within one month of receipt. Where necessary, this may be extended by up to two further months, with reasons given within the first month. If we cannot fully fulfil a request, we explain why and how to complain. Rights are normally exercised free of charge, subject to statutory exceptions.
You may complain directly to the Belgian Data Protection Authority or the competent authority in your usual place of residence or work. You do not need to reach agreement with us first.
9. Security and human review
The public website uses HTTPS. Accounts use password hashing, email verification, protected sessions, form checks, rate limits and access controls. Demo 2 account data and sessions are stored separately from Demo 1. Shared payment handling checks order ownership for every customer access.
Automated security may slow suspicious or excessive requests or require further verification. It is not used for credit scoring, commercial profiling or solely automated decisions with legal or similarly significant effects. Ask for human review if a measure wrongly prevents access.
Absolute security cannot be guaranteed. Report a suspected data breach or account compromise at info@webglobe.be. Any notification to individuals or the regulator follows the applicable legal thresholds and deadlines.
10. Changes and further information
This notice is available separately from the terms and can be saved as text. Changes to purposes, recipients or other substantial processing must be clearly communicated before the new processing begins; separate consent is requested where necessary.
The Data Protection Authority explains the statutory information duty. This notice does not remove your legal rights.
11. Shipping for your test order (PostNL)
Optional address check: when the separate PostNL address service is enabled, you can explicitly start a check in My details for Belgium, the Netherlands or Luxembourg. Only then do we send the entered country, street, house number, addition, postcode and city to the PostNL sandbox. Name, email and phone are not sent. Authorised administration can similarly check the saved order address. We do not retain address suggestions in the database, session, logs or server cache. A suggestion is copied into the form only when you choose it; you must then save your profile yourself. Existing orders, labels and return addresses are not changed. The result does not prove actual delivery or guarantee delivery. The existing postcode helper remains a separate postcode and locality check. Local deletion does not automatically remove data already received by PostNL.
You view shipping and tracking from your order. Only authorised administration can create a PostNL test label for an outgoing shipment and change demo shipping status. Kook & Ko reviews the return you register. Once approval is recorded, the webshop automatically requests the PostNL sandbox return label or reuses the available label for that exact return. The approval email includes the available PDF labels as attachments. You can also download them under My purchases. Registering a return alone creates no label; a label does not mean the return has been shipped. Status changes appear in your dashboard, by email and by push if enabled.
Local shipment simulation and a PostNL sandbox test are different features. Local simulation keeps submitted data with Webglobe and our hosting provider. A sandbox label request actually sends label data to PostNL, including the automatic request after your return is approved. Authorised administration or you for your own approved return can also start a request. ‘Sandbox’ does not automatically make personal data fictional or anonymous. There is no physical delivery. Use only agreed fictional test data for demonstrations, not a private address or another person’s details.
A complete customer address is saved with new orders. Later profile changes do not change this snapshot. For an older order without a snapshot, the completed profile is captured once with the first explicit label request. Label requests cannot supply an arbitrary replacement address. The sandbox supports configured test products for Belgium and the Netherlands. The configured Kook & Ko sender address for outgoing shipments remains fictional. A return uses your saved order address as its sender. The fixed receiver is Kook & Ko, Demokeukenstraat 12, 3400 Landen, Belgium: a fictional return address that must not receive real parcels. Older labels with example addresses are not automatically reused.
The automatic return email uses only the existing order address; this mail step does not fill a missing address snapshot from your profile. If the correct PDF label is missing, fails or has an uncertain outcome, the approval email is not sent without its attachment. The approved return remains registered and may require management review. An existing printerless return label is not silently replaced with a new PDF label.
- The free postcode lookup sends only the selected country and entered postcode through our server to Zippopotam.us. Names, streets, house numbers, account data and the visitor's browser data are not forwarded. For the Netherlands, we use only the four digits. Place names come from GeoNames; this does not validate streets, house numbers or Dutch postcode letters. Public postcode results are reused for up to 24 hours from a bounded in-memory cache without an account link. A standalone preview does not change your order or address. A missing result does not prove an address is invalid.
- Data and source: name, street, house number, optional addition, postcode, city and country (Belgium or the Netherlands) from the customer profile and order address snapshot, as the recipient of an outgoing shipment or sender of a return; the link to your Demo 2 account, test order and any registered return, outgoing or return shipment, shipping product, weight, any fictional insured value, label layout and timestamps. We store the barcode, PDF labels or the digital PNG return barcode, any error and warning codes and retrieved shipment statuses, events and expected delivery date. A label can contain the full address. Even with a fictional address, the local link to your account remains personal data.
- Purpose and basis: performing an explicitly requested shipment or return demonstration and showing its result (GDPR Article 6(1)(b), insofar as necessary). Limited fault investigation and preventing duplicate or incorrect requests rely on the legitimate interest of keeping the demo reliable and secure (6(1)(f)). A real private destination is unnecessary for a fictional delivery. Registration, accepting terms and a cookie choice do not give blanket consent to extra address processing or PostNL marketing.
- Recipients: Webglobe and Level27 store local records and labels. A label request, including an automatic request after return approval, sends PostNL's Send & Track test service the recipient address, configured sender/return address, connection customer details, barcode, a separate shipment reference, shipping product, weight and any fictional insured value. For a return, PostNL receives your saved order address as the sender and the fixed fictional Kook & Ko address in Landen as the receiver. The integration does not send a customer password or payment card details; only the separately selected printerless return also sends your verified account email and the mobile number entered for this purpose; the separate shipment reference does not contain your account or order number.
- PostNL delivery emails: sharing your account email address is off by default. If administration enables this separate test feature, the valid email address from your Kook & Ko account is sent to PostNL when requesting a new outbound label for home delivery or a selected PostNL pickup point, for delivery notifications. A suitable account email is required for a PostNL pickup label; that pickup option cannot be used without it. Ordinary PDF return labels, standalone example labels and fictional collection orders do not use this delivery-email setting. Printerless returns have their own mandatory contact sharing, as explained below. PostNL accepts at most 50 characters for this field; an unsuitable address is neither shortened nor forwarded.
- With the saved label, we keep only a derived check value for the submitted address and its timestamp, not another readable copy of your email address. This check value remains personal data and is deleted with the label. Submitting an address does not prove that PostNL sends or delivers an email. Section 14 explains how webshop and PostNL messages are divided.
- Printerless returns (Smart Returns): this separate sandbox feature is off by default. If available and selected, we send the verified email from your account and the mobile number with country code that you enter to PostNL, together with your saved order address. PostNL requires these contact details for this return service. Your phone number is not added to your profile, stored as a separate label field or logged; the provider image may contain personal data. We store the selected return method, the PNG barcode supplied by PostNL and the time when it may be displayed. The barcode appears only after at least ten minutes. It is a test result and must not be used to hand over a real parcel. The label retention and rights below also apply to it; the 35-day period in the provider request does not extend our retention period.
- Delivery signature: authorised administration can request an available signature from PostNL for a saved sandbox shipment, for shipment follow-up or customer service. Only the stored shipment barcode is sent; customers cannot request other recipients' signatures. The image and any date supplied by PostNL are displayed only in the protected response. We do not retain them in the database, session, logs or server cache, and instruct the browser not to store the response. The limited access log records the manager, local shipment reference and whether a signature was available, not the image or signatory name. Any management download follows the existing test retention; local deletion does not remove what PostNL retains. This request changes no order or delivery status and performs no automatic signature comparison. The sandbox does not supply a signature for every test label.
- Retention: the profile address and order snapshot follow the account and order retention periods in section 6. Separate local label and tracking records are deleted once the agreed test and any necessary fault investigation have finished. Keeping an account open does not justify indefinite retention. The end date is no later than 30 days after creation; earlier erasure remains possible. Saved test exports and downloaded labels have the same deadline. An automatic PostNL cleanup job removes complete local records and labels from day 29. Expired records are no longer accessible through the demo from day 30. Backups follow the separate handling in section 6. Local erasure does not automatically remove data already received by PostNL.
- Access, correction, erasure or restriction: email info@webglobe.be mentioning ‘Demo 2 / PostNL’. This includes address records, outgoing and return labels, barcodes and tracking history, regardless of whether the feature is currently enabled. After proportionate identity checks, Webglobe handles these records separately within your Demo 2 request; a Demo 1 account download does not include them. If data was sent to PostNL, we include the necessary follow-up with PostNL and inform you of the outcome. Section 8's response deadlines and complaint options still apply.
- Activation condition: the applicable PostNL service and contracting entity, privacy roles and agreements, PostNL retention periods, any subprocessors, processing locations and transfer safeguards must first be established. PostNL's general privacy statement describes it as controller for processing within that statement; this does not establish the arrangements for this sandbox connection. Before a request, the feature explains the test mode and use of the saved order address, with a link to this retention information. A working sandbox connection does not by itself establish the arrangements and retention periods at PostNL. A real shipping service is outside this demo and requires a new assessment.
12. Country, postcode and city in your account
New Demo 2 accounts require country, postcode and city to demonstrate location checking. These details and their check status are stored with your account under the account retention period in section 6. You can change them under My details; changes use the same checks. They are included in account access and erasure.
The country list includes ISO countries and territories. For countries with postcode data, we check the selected place through Zippopotam.us. Only country and postcode are sent through our server; your name, city, account ID, email and browser headers are not forwarded. In some countries, including the Netherlands, Canada and the United Kingdom, the dataset contains postal areas only. A match does not confirm a complete residential or delivery address. The source is Zippopotam.us / GeoNames (ODbL).
For countries without postcode data, enter the city and postcode, if any, manually. The location is saved as unchecked. Existing customer accounts without a location receive Belgium, 1000 Bruxelles as a clearly marked example, with demo status. This does not claim that you live there. You can replace the example in your dashboard.
The temporary postcode cache holds at most 128 public postcode results without account links; matches are reused for at most 24 hours, missing results for at most 5 minutes. The cache disappears on restart. Your saved account location is separate. Your country and postal code determine fictional pickup suggestions locally. Only if you use the separate PostNL options button is the profile address sent to PostNL for that lookup, as described in section 13. A separate PostNL sandbox test started by administration, or by you for your own registered return, uses the customer address saved with the order, as explained in section 11.
13. Pickup locations and expected delivery times in the test checkout
The ordinary demo choice contains fictional example points. We generate these locally using the country and postcode in your profile; the shops and addresses are not real PostNL locations. This does not calculate distances or send information to an external service. The saved fictional point code stays the same after a profile change. That code is not sent to Mollie or PostNL; its sandbox label uses the customer address saved with the order and collection steps are simulated locally.
If administration enables the separate PostNL sandbox checkout, you can also use the PostNL options button to request pickup points, parcel lockers and expected delivery times. Only when you use that button does our server send the country, postcode, street, house number, any addition and city from your checked Kook & Ko profile to PostNL. We do not use GPS or your browser's location data. No API key is sent to your browser. Results come from PostNL's test environment; availability and information may differ from the real situation. No physical parcel is shipped.
Expected delivery times are estimates assuming handover to PostNL tomorrow, not a selected or guaranteed appointment. Pickup availability for the displayed test date is checked again before payment. A temporary signed choice lasts at most ten minutes and is bound to your account, checkout and address details. We keep no location or address cache for this in server memory. If a choice expires or your address changes, request the options again.
For a selected PostNL point, we save an immutable snapshot of its location code, point or locker type, name, address, opening times, any supplied distance, test date and retrieval time with your order. Your customer address remains separate for purposes including returns. Profile changes do not alter this selected location. Its location code is sent to PostNL with the related sandbox label. A suitable email address from your checked account is also required for this pickup label and is sent to PostNL with the label request as explained in section 11. Webshop emails remain active for these pickup orders, including when home-delivery emails are separately handled by PostNL.
We process the choice to provide the requested demo (6(1)(b)). Fictional choice codes and PostNL snapshots follow the test order retention review in section 6 and are cleared during reviewed account erasure or pseudonymization. The shipment copy follows the maximum 30-day period in section 11. Both are included in access and erasure.
14. Order confirmation and shipping emails
After a successful test payment, we send your order confirmation. Authorised admins and powerusers receive a notice to process the order. By default, each shipping status change queues a customer email; shipping includes the confirmed PostNL sandbox barcode when a label is available, otherwise a clearly identified demo reference, and a link to your secure dashboard. No physical parcels are shipped.
PostNL may provide separate delivery emails. The webshop continues sending its own until operation for this connection has been confirmed. Only after administration has checked that operation may PostNL take over emails for In transit and Delivered based on valid PostNL scans. This applies only to home delivery and when your current account email was submitted with that label. Pickup orders continue receiving webshop emails. Manually simulated status changes and messages about shipment dispatch, orders, payments, stock and returns continue through the webshop. A saved label or barcode alone does not prove email delivery; messages already sent cannot be recalled.
For fictional restocking we store the items, quantities, expected arrival date and receipt status. Your dashboard shows this progress and Brevo delivers functional updates. Authorised managers can also keep an internal reminder note for your order. This note is excluded from your dashboard, customer emails and provider requests. These order records follow the test order retention review in section 6; archiving does not delete them. They are included in reviewed access and erasure, with protection of third-party data.
For webshop emails, Brevo receives the email address, order number, ordered items, fictional amounts, delivery choice, status and any sandbox barcode or demo reference. These are functional messages for the requested demo, not a newsletter. The mail queue retains the recipient address, account reference, status and limited delivery information for up to 30 days; the existing cron job removes expired records. These records are included in access and reviewed account erasure. Brevo acceptance does not prove inbox delivery.
On return approval, we send the official PostNL sandbox PDF labels through Brevo to the verified email address of your Kook & Ko account. The attachments include details such as name, address and barcode. The webshop uses the existing label storage and keeps no additional PDF copy in the mail queue or technical logs. Labels follow the retention period in section 11; attaching them does not extend it. Copies held by Brevo, your email provider and your mailbox are not erased by local account or label deletion. Approval emails already accepted for delivery are not automatically resent to add an attachment.
15. Separate Kook & Ko newsletter
You can subscribe separately to the Kook & Ko newsletter. Your optional name, email address, language and request and confirmation dates belong only to this list. We first send a confirmation link; campaigns start only after you confirm. An account or order never subscribes you automatically. Freq Forge has its own list and consent.
Brevo sends confirmations and newsletters. Every campaign includes an unsubscribe link. Our own personal open and click measurement requires separate optional consent, which you can withdraw independently. We explicitly pass no consent for personal provider open measurement per recipient to Brevo. Delivery diagnostics and any non-personal provider statistics remain separate; actual Brevo settings determine their implementation. Measurements are indicative and the existing cleanup job removes them after at most 180 days. Withdrawal or unsubscribing immediately removes personal counts and measurement dates; click details are deleted in bounded batches and the periodic cleanup completes any remainder. Unconfirmed guest requests without an account are removed after seven days. Account and order messages remain separate from these choices.
Request access or erasure through info@webglobe.be, including retained delivery history, measurements and any unsubscribe feedback. Subscription status remains stored until data is removed through the existing privacy process; unsubscribing does not immediately erase historical delivery records.
16. Saved cart and favourites
Without signing in, your cart and favourites are stored in the browser session. When you sign in, selected product and variant codes, quantities, favourites and update time are also stored with your Kook & Ko account so you can use them on another device. A revision number and temporary import marker prevent overlapping edits or reopened tabs from incorrectly overwriting your cart.
This is an account feature you request (GDPR Article 6(1)(b)), not permission for advertising or abandoned-cart emails. You can remove items and favourites yourself. Saved selections follow the account retention review in section 6 and are included in access and account erasure. Clearing browser data alone does not erase selections saved to your account.
17. One-time availability notification for a variant
A signed-in customer can request an availability notification for a particular colour, size or other variant. We store your account ID, product and variant code, request and update times and progress. Authorised managers can see which variants have been requested. This is not an order, stock reservation or newsletter subscription.
We use the request to provide the one-time service you asked for (6(1)(b)). When the variant becomes available, we send a message through Brevo to your account email and a push notification if you separately enabled that feature. You can follow and cancel the request in your dashboard. A message already handed to the delivery provider cannot be recalled.
Active requests remain while necessary to fulfil your instruction. The periodic cleanup removes cancelled and completed requests from 30 days after their last status change. A related delivery job still in progress can temporarily delay removal. Delivery jobs have their separate retention period of at most 30 days. Access and reviewed account erasure also cover these requests.
18. Optional notifications on your device
Installing an app does not automatically authorise push notifications. You enable them in the shop and your browser. We associate the browser profile’s push address, technical delivery keys and limited browser information with your own Kook & Ko account to deliver the requested order, shipping and availability updates. This choice does not subscribe you to marketing.
Webglobe sends notifications through your browser or operating system’s push service. Message content is encrypted before delivery. That service receives technical delivery information, including the push address; notifications may appear on a shared device’s lock screen. Your browser or device settings and privacy information also apply to that service.
You can withdraw consent for these optional notifications (6(1)(a)) through the notification button or browser settings. Disabling them in the shop removes the associated local subscription; permanently invalid addresses reported by the push service are also removed. Browser revocation is not always reported to our server immediately. A working subscription remains while the notification feature is enabled and is included in account access and erasure. The separate mail and push queue follows section 14’s retention period.
19. Voluntary testing survey at /onderzoek
Your Kook & Ko account lets you voluntarily review the main website and both demo shops. We associate your chosen name or alias, optional age group, selected websites, answers, scores and optional screenshots with captions with your account. Date and time are recorded automatically when you save or submit. We no longer request exact age. A previously supplied age is converted to an age group for use and display; saving again retains only that group.
A saved draft is accessible only through your account; after submission an authorised administrator can view answers and images to investigate faults and improvements. This serves our legitimate interest in improving the website and demo experience (6(1)(f)). Participation is voluntary and does not affect shop access. Object or request erasure through info@webglobe.be. Screenshots are optional: omit other people’s personal data, passwords and payment details. Images are re-encoded without the original file metadata.
Answers and screenshots are erased after 365 days without changes. An administrator reopening a submitted survey can lead to a later update date. Earlier erasure is available through the privacy procedure. Management reports do not publicly publish your answers.
For a separate research invitation, Webglobe retains the supplied address, name, message text and sending and delivery status through Brevo. This does not subscribe you to a newsletter. Personal opens are no longer processed in the research report. Invitation details are cleaned up after 365 days; a derived email code may remain to prevent repeat invitations. This code is pseudonymous. To object to invitations or request access or erasure, reply to the invitation or email info@webglobe.be. Brevo may additionally process its own delivery and measurement data; that service’s settings and arrangements are separate from our own measurement.