Privacy policy

Who is responsible for your data

The controller of your personal data is EchoLab, Workways, Excelsiorlaan 44, 1930 Zaventem, Belgium.

For anything on this page, write to info@echolab.be or call +32 488 70 44 37. We answer privacy questions ourselves; we are not large enough to be required to appoint a Data Protection Officer.

What we collect

When you book a session. Your name, email address, phone number, the date you want, the place you want to film and any notes you add. That is the whole form — we ask for nothing else, and there is no account to create.

When you simply read the site. Anonymous usage statistics through Google Analytics: which pages were opened, roughly where in the world the visitor was, which device and browser. We do not use this to identify anyone.

Automatically, by the hosting. Standard server logs — IP address, time of request, page requested. This is how any web server works and is what lets us spot abuse.

We never ask for and never store payment card details on this site.

Why we are allowed to hold it

To do the job you asked for. Your booking details are processed so we can confirm the session, agree a time and place and actually film it. Without them there is no booking. (GDPR Art. 6(1)(b) — performance of a contract.)

To keep the site working and honest. Server logs and aggregate statistics rest on our legitimate interest in a site that stays up and is not abused. (Art. 6(1)(f).)

Where the law needs your say-so. Analytics and embedded video are only set once you have agreed to them, where that agreement is required. (Art. 6(1)(a).)

How long we keep it

Booking requests that became a job: as long as the working relationship lasts, then for the period Belgian bookkeeping law requires us to keep invoicing records — seven years.

Booking requests that came to nothing: two years, in case you come back to us.

Server logs: a matter of weeks, then they roll off.

Analytics: up to 14 months in aggregate form.

Who else sees it

We do not sell your data and we do not hand it to anyone for their own marketing. A short list of suppliers processes it on our behalf, under contract:

Google (Firebase / Google Cloud) — hosting the site and storing booking requests. Data sits in the European Union.

Google Analytics — anonymous usage statistics.

Vimeo and YouTube — only when you play one of the videos we embed. They then apply their own privacy terms.

If you contact us over WhatsApp or a social network because you followed a link from here, that conversation lives on that platform under its own rules, not ours.

Cookies and what they do

The site sets no advertising or profiling cookies. What exists is the Google Analytics measurement cookie (property G-BH9Q4CSN73), which counts visits, and a small amount of local storage that remembers which of the four languages you chose so the site does not reset every time.

A video only contacts Vimeo or YouTube once you press play on it — not while the page is merely open.

You can clear or block all of this in your browser settings at any time. The site keeps working without it.

What you can require of us

Under the GDPR you may ask us to: show you the data we hold about you; correct it if it is wrong; delete it; restrict what we do with it; hand it to you in a portable file; or object to processing that rests on our legitimate interest. Where you gave consent, you may withdraw it at any time — that does not undo what was lawful beforehand.

Write to info@echolab.be. We reply within one month.

If our answer does not satisfy you, you can complain to the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be).

Changes to this page

If what we do with data changes, this page changes with it and the date at the top moves. Nothing here applies retroactively to data already collected under an earlier version.