Privacy

Who is responsible?

RCA & Solutions SRL is the data controller for the personal data it processes for this website and business enquiries. Our registered office is Avenue Franz Guillaume 76/3.5, 1140 Evere, Belgium. Our Belgian enterprise number is 1011.076.134 and our VAT number is BE1011076134.

For privacy questions or requests, email [email protected] or write to our registered office.

A minimal website

We provide information about our consulting services and educational articles. This website has no contact forms, accounts, newsletter sign-ups or advertising pixels. We do not use Google Analytics or add browser-based audience analytics. Fonts and illustrations are served locally or supplied by your device. The tutorial animation is hosted on this website.

RCA & Solutions does not use advertising cookies, behavioural tracking or non-essential analytics cookies. Limited technical mechanisms may be used where necessary for the secure operation and delivery of the website. Cloudflare security features can use technical cookies when needed; this is not a claim that every visit will be entirely cookie-free. We do not use these mechanisms to build visitor profiles.

Technical information when you visit

Our server and Cloudflare must process technical request information to deliver pages and protect the connection. This can include your IP address, browser/device information, requested URL, request timestamp and technical or security information. Our server and tunnel also produce operational logs for diagnostics; a separate website access log is not enabled in our current server configuration.

This information supports website delivery, availability, protection against malicious traffic, diagnostics and technical operation. We rely on our legitimate interests in providing a functioning, secure business website (Article 6(1)(f) GDPR). Technical data is not used by RCA for marketing profiles.

When you contact us

The email link opens your own email application; it does not submit a form. If you email or telephone us, we process the details you provide, such as your name, contact details and message, to respond and discuss your enquiry.

For steps you request before entering a contract with us, the legal basis is Article 6(1)(b) GDPR. For other business correspondence, including contact on behalf of an organisation, we rely on our legitimate interests in responding to enquiries and managing business relationships (Article 6(1)(f)). You choose what to share. Without relevant contact or project information, we may be unable to respond usefully.

The website does not perform automated individual decision-making or profiling, and does not enrol you in marketing communications.

Providers and external links

The website is hosted on our own server and delivered through Cloudflare. Our business email is supplied through GoDaddy. These providers process data needed to provide their respective services; authorised service providers and their subprocessors may therefore receive relevant technical or correspondence data.

Providers may process data outside the European Economic Area; we do not represent that all processing stays in the EEA. Where required, international transfers must be supported by a legally recognised mechanism, such as an adequacy decision or appropriate contractual safeguards, including standard contractual clauses. The provider information below describes their arrangements. You may contact RCA for information about the safeguards applicable to your data.

• Cloudflare customer data processing terms
• Cloudflare privacy information
• GoDaddy privacy information

Cloudflare also supplies a small script, served through our domain, that restores public email addresses and email links after anti-scraping obfuscation. It is not used for advertising or audience measurement.

LinkedIn and documentation links lead to external websites. Their own privacy notices apply when you visit them; we do not embed LinkedIn tracking widgets.

How long information is kept

We retain business correspondence as reasonably necessary to handle enquiries, manage the business relationship, comply with applicable legal obligations and protect legitimate business interests. For unsuccessful enquiries, our adopted policy is deletion 12 months after the last meaningful contact, unless there is a documented reason to keep them longer, such as an ongoing dispute or legal obligation. This is handled through manual review; automatic deletion has not been configured.

Client, contract and accounting records are treated separately according to the relationship and applicable legal obligations. Technical-log retention is determined by operational and security needs and the relevant provider retention settings. No fixed automatic deletion period is configured for our local operational logs. Provider-managed logs, recovery copies and backups have their own service-specific retention arrangements; deleting an email does not necessarily erase every recovery copy immediately.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction of processing or data portability. You may object to processing based on legitimate interests. Where consent is the basis, you may withdraw it without affecting earlier lawful processing.

Contact [email protected]. We may need proportionate information to verify your identity. We normally respond within one month; where the law permits an extension, we will explain it.

You may lodge a complaint with the Belgian Data Protection Authority, Autorité de protection des données / Gegevensbeschermingsautoriteit, or another competent supervisory authority.