PRIVACY / FIRST VERSION
Clear about
your data.
This concept website is publicly accessible. Before commercial launch, the controller’s full identity, business contact address and final retention periods must be recorded. This page describes current technical processing and is not a final legal privacy notice.
Interest and contact
The enquiry form stores your contact details, requested service and notes in the protected CRM. Website Start receives an internal draft calculation; additional services are assessed separately first. Nothing is automatically sent to KERN for execution and no final quotation is sent. Your enquiry can only be linked to a measured session with your analytics consent.
Voluntary visitor measurement
Only after your consent do we measure a random browser ID and session ID, visited pages, active visible time on pages, the connection country where available, and traffic source/campaign. We do not store a full IP address, precise location or complete referring URL in our analytics database. Country identification can differ because of VPNs and networks. These measurements are pseudonymous and are not guaranteed to be anonymous.
Your preference is stored locally for up to six months. Measurement IDs are created only after consent. If you refuse, the enquiry function remains available. You can withdraw consent through Analytics preferences; local measurement IDs are then removed and new measurement stops. This does not automatically remove data already stored.
Purposes and legal bases
Handling enquiries and preparing quotations takes place for the requested business services and, where appropriate, on the basis of legitimate interests for business contacts. Analytics uses your prior consent. Access and audit information serve security and accountability. Mandatory administrative records are retained on the basis of applicable legal obligations. We do not automatically use enquiry data for marketing.
Retention periods
The target retention period for raw analytics is 90 days. When new measurements arrive, older records are cleared in limited batches. Without new measurements, manual cleanup is needed; this is not yet a guaranteed daily deletion timer. Enquiries that do not proceed are generally reviewed and removed no later than twelve months after the last relevant contact, unless a specific dispute or another valid reason requires longer retention. Contracts and administrative documents follow applicable statutory retention requirements. These latter procedures are manual: archiving is not automatic deletion. Final company and tax retention periods are established before public launch.
Access and infrastructure
CRM records and quotations are accessible only to the designated owner through sign-in. The application uses this Site's hosting and database infrastructure, including Cloudflare D1. Region, processor terms, transfers and final retention periods must be assessed and stated before public launch.
Your rights
Where legally applicable, you can request access, correction, deletion, restriction or portability, object to processing based on legitimate interests and withdraw measurement consent. Requests are generally handled within one month; statutory exceptions and necessary identity checks remain possible. You can submit a complaint to the competent supervisory authority, such as the Belgian Data Protection Authority or the Dutch Autoriteit Persoonsgegevens.
Request or correct your data
For privacy requests, temporarily use the existing contact channel with the owner. A direct privacy contact is still missing and must be added before commercial launch. The admin area can export and archive enquiries; archiving is not deletion. Correction or deletion requests must be handled separately by the owner.
What we do not measure
No advertising system, session recording, keystroke logging or fingerprinting is built in. Refused measurement, blocking and connection problems make visitor statistics incomplete. Measured conversion uses only measured sessions; total enquiries are shown separately.
Email and linked website visits
A personal email link may ask whether your website visit can be linked to the addressee’s relationship record. Only after your active choice do we store public page paths and sections, visit time and active viewing time. No form content, IP addresses or advertising profiles are stored for this measurement. The session exists only in this tab’s sessionStorage and expires after 30 minutes. All public content remains available without consent. The Stop visit linking button withdraws consent and deletes measurements for that email link. Older backups may retain copies until deleted. Live CRM reporting is limited to 90 days; older live measurements are removed in batches during processing. Merqhaven receives measurements in the protected CRM; hosting and processing use the website and CRM hosting service. No advertising networks or extra analytics suppliers are connected for this linking. A forwarded link does not prove visitor identity. An opening pixel is used only with separately recorded consent and is not proof of reading. You may request access or deletion through the enquiry form.
Which personal data belong on a simple business website?
Standard contact forms are limited to name, company, email, optional phone number and message. Only necessary technical data are processed for security. Do not send medical data, identity documents or payment card details through standard forms. Customer accounts, payments and wider data processing require separate assessment and agreements on security, access and retention. If Merqhaven processes personal data for the client, this is covered by a data processing agreement.