Legal
Privacy Policy
This Privacy Policy explains how Endogenius™ (“we”, “us”) processes personal data when you visit endogenius.ai (or any preview/staging host of this static site), in line with the EU General Data Protection Regulation (GDPR) and the ePrivacy rules that apply to cookies and similar technologies.
1. Data controller
The controller for personal data processed via this website is Endogenius™.
- Privacy contact: serge.vanthemsche@endogenius.ai
- Registered office / company number: to be completed once the operating entity details are finalised for public disclosure.
If you contact us about a partnership or product engagement, the controller for that correspondence is the same, unless a written agreement says otherwise.
2. What this site does (and does not do)
This site is a static corporate brochure. In its default configuration:
- We do not run advertising trackers.
- We do not run third-party analytics until you opt in.
- We do not operate account login or online payment forms.
- Fonts and assets are served from this site (self-hosted), so visiting pages does not call Google Fonts or similar third-party font CDNs.
-
Contact is by email (
mailto:). Your mail provider, not this site, processes the message you send.
3. Categories of data we may process
3.1 Technical data from hosting
When you load the site, our hosting provider (for example Cloudflare Pages or a similar static host) may process standard server logs such as IP address, timestamp, requested URL, user agent, and approximate location derived from IP. This is typical for delivering and securing a website.
Purpose: security, abuse prevention, availability,
debugging.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR)
in operating a secure website.
Retention: as set by the host’s log retention (often
days to a few months); we do not keep separate marketing profiles from
these logs.
3.2 Cookie / consent preference
We store your cookie choices in your browser
(localStorage), so we can remember Accept / Reject /
Preferences. That record is strictly necessary for compliance.
Legal basis: legal obligation / necessity for
electronic communications consent (ePrivacy) and Art. 6(1)(c)/(f)
GDPR as applicable.
Retention: until you clear site data or change
preferences (we also version the consent record).
3.3 Optional analytics or marketing technologies
If we later enable measurement or marketing tags, they will load only after you consent via the cookie banner (or Cookie settings). Until then, those categories stay off.
Legal basis when enabled: consent (Art. 6(1)(a)
GDPR).
You can withdraw consent at any time via Cookie settings in the
footer.
3.4 Email and business correspondence
If you email us, we process the content you send, your email address, and related metadata needed to reply.
Purpose: respond to enquiries; explore partnerships;
keep business records where needed.
Legal basis: steps prior to a contract / contract
(Art. 6(1)(b)), legitimate interests in running our business
(Art. 6(1)(f)), or consent where required.
Retention: for the time needed to handle the request
and for ordinary business / legal retention afterwards (typically up
to the applicable limitation periods for commercial correspondence).
4. Recipients and international transfers
Hosting, email, and (if enabled with consent) analytics providers may process data as processors or independent controllers. Where a provider is outside the EEA/UK, we rely on an adequacy decision or appropriate safeguards (such as Standard Contractual Clauses), plus any supplementary measures the provider documents.
5. Your rights
Where GDPR applies, you may have the right to:
- access your personal data;
- rectify inaccurate data;
- erase data (in certain cases);
- restrict processing (in certain cases);
- data portability (in certain cases);
- object to processing based on legitimate interests;
- withdraw consent at any time (without affecting prior lawful processing);
- lodge a complaint with a supervisory authority.
In Belgium, the supervisory authority is the Autorité de protection des données / Gegevensbeschermingsautoriteit. You may also contact the authority in your place of residence or work.
To exercise rights related to this website, email serge.vanthemsche@endogenius.ai with “Privacy request” in the subject. We may need to verify your identity before acting.
6. Children
This site is aimed at professional audiences. We do not knowingly collect personal data from children through this brochure site.
7. Security
We use HTTPS, minimise what we collect on the site itself, and prefer privacy-preserving defaults (no non-essential tags before consent; self-hosted fonts). No method of transmission or storage is perfectly secure; please use judgement when emailing sensitive information.
8. Changes
We may update this Policy when our site, tools, or legal requirements change. The “Last updated” date at the top will change accordingly.