Privacy policy
This page explains which personal data we collect on robinduweb.be, why we collect it and how you stay in control of it. We've written it so you don't need a lawyer to read it. This English version is provided for convenience; if it differs from the French version, the French version prevails.
Who is responsible for your data?
The data controller is MNH SA, Rue Véronèse 10, 1000 Brussels, enterprise number BE 0870.850.756. RobinDuWeb is a brand of MNH SA, and your contact for any question about your data is Gaspard Merten. Write to us through the website's form.
What data do we collect, and why?
-
The request form
When you ask for your designs or write to us, we receive your name, your email address, the language you'd like us to reply in, the kind of work you do, what bothers you about your website, your message if you write one and, if you have one, your current website address. We use this information to prepare your designs, send them to you and answer your questions. The legal basis is your request, that is, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
-
Preparing your designs
To prepare your three designs, we reuse the text and photos published on your current website, or the ones you send us. The designs can only be reached through a private link protected by a code. If you view them, we record the comments and corrections you leave there, and the design you choose.
-
The anti-bot check
Our form is protected by a check we built ourselves: a small game with two cards. To tell people from bots and to improve this check, we record your answers to the game and your pointer movements. We do not keep your IP address in readable form. The legal basis is our legitimate interest in protecting the form against automated submissions (Article 6(1)(f) GDPR).
-
Visitor statistics
We measure traffic to the site with our own tool, without cookies and without any third-party service. We count the number of page views per day for each page address, and we note which websites visits come from. To estimate the number of visitors, we compute an identifier each day from your IP address and browser, made unreadable by hashing it with a random value that changes every day, so it cannot link your visits from one day to the next. This identifier is deleted after 45 days. Visits by bots are not counted. The legal basis is our legitimate interest in understanding how our site is used and improving it (Article 6(1)(f) GDPR).
-
Email correspondence
If you write to us, or if we send you your designs by email, we keep that correspondence to follow up on your request and, if you become a client, to manage our relationship.
-
Designs we prepare on our own initiative
We sometimes prepare a proposal for a business or association that hasn't asked for one, based on its public website, and present it using the business contact details published on that site. The legal basis is our legitimate interest in making our service known. You can object to this at any time, and we will then stop contacting you.
Cookies
Who has access to your data?
Your data is never sold or rented out. Only Gaspard Merten and, where relevant, the people working with him on your request have access to it. We also use two processors, bound by a contract that complies with Article 28 GDPR.
- Google Cloud EMEA Limited, Dublin (Ireland), hosts the website and the data on servers located in the European Union, in Belgium.
- Mailjet SAS, Paris (France), sends our emails.
The anti-bot check and the visitor statistics run on our own tools, without any third-party service.
Does your data leave the European Union?
Our data is hosted in the European Union. In our set-up, neither our hosting provider nor our email provider is used to transfer your data outside the European Union.
How long do we keep your data?
We have not set an automatic retention period: your requests and the anti-bot check data are kept until we delete them. You can have them erased at any time, simply by asking through the form or at the email address above. We will do so as quickly as we can, unless the law requires us to keep certain data (our invoices, for example, for accounting purposes). The visitor identifiers used for statistics are deleted after 45 days.
What are your rights?
The GDPR gives you several rights over your data. At any time, you can:
- find out what data we hold about you and get a copy of it (right of access);
- have inaccurate data corrected (right to rectification);
- ask for it to be deleted (right to erasure);
- ask us to restrict how we use it (right to restriction);
- object to processing based on our legitimate interest, including prospecting (right to object);
- receive the data you gave us in a machine-readable format (right to data portability).
To exercise these rights, write to us through the website's form or at the email address above. We will reply within one month at the latest. If we have reasonable doubts about your identity, we may ask you to confirm it.
Want to make a complaint?
If you feel we are not respecting your rights, please talk to us first: we'll do our best to sort it out with you. You can also lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.
How do we protect your data?
Traffic to and from the website is encrypted with HTTPS, data is backed up every hour, and access to the management tools is protected by a password and a code sent by email.
Changes
We may update this policy, for example if we change processor. The date of the latest update is shown below.
Last updated: 23 October 2026