Privacy Policy

1. Data Controller

The controller responsible for the personal data collected on this website is:

Angelito Studio

If you have any questions about the processing of your personal data or wish to exercise your rights, you can contact us at: info@angelito.studio.

2. What personal data do we collect?

The data we collect depends on how you use our website.

2.1. When you use the contact form

When you contact us for information or to discuss a project, we may collect the information you provide, including:

  • Your first and last name.
  • Your email address.
  • Your phone number, if you provide it.
  • Your company name, if applicable.
  • The content of your message.
  • Information about your project.

This information is used to respond to your request, communicate with you and, where necessary, prepare a commercial proposal.

Please do not submit sensitive personal data through contact forms.

2.2. When you browse our website

Some technical information may be collected while you browse, including by the website host or the security mechanisms in use.

This information may include:

  • Your IP address.
  • Your device and browser type.
  • The date and time of your visit.
  • The pages you visit.
  • Connection logs.
  • Technical information required for the website’s security and proper operation.

The exact data collected depends on the tools enabled and their configuration.

2.3. When you subscribe to our newsletter

If you choose to subscribe to our newsletter, we may collect your email address and, where applicable, your name.

This data is used to send you news, tips, articles and information about our activities and digital-related topics.

Our newsletter may be managed by Brevo, our email communications service provider.

You can unsubscribe at any time using the link included in the emails you receive.

2.4. When you contact us by phone or email

If you contact us directly, we process the information you provide to respond to your request and follow up on our exchanges.

When these exchanges relate to a business project, the information may also be used to prepare a quote, make an offer or manage a commercial relationship.

3. Why do we process your personal data?

We process your personal data only when necessary for a specific purpose and on an appropriate legal basis.

Purpose Legal basis
Responding to a contact request Legitimate interest or pre-contractual steps, depending on the request
Preparing a quote or commercial proposal Pre-contractual steps taken at your request
Managing a contractual relationship with a client Performance of a contract
Meeting accounting and legal obligations Legal obligation
Ensuring website security and proper operation Legitimate interest, depending on the processing
Sending a newsletter Consent, where required
Managing cookie preferences Compliance with applicable consent requirements

We do not reuse your data for purposes incompatible with those for which it was collected.

4. How long do we keep your data?

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal obligations.

Retention periods are determined according to the nature of the data and how it is used.

Data category Retention period
Contact requests that do not lead to business Up to 12 months after the last exchange, depending on the nature of the request
Quote requests and pre-contractual exchanges For as long as needed to follow up on the request, then as required by applicable law
Client data For the duration of the contractual relationship, then as required by law and to defend our rights
Invoices and accounting documents As required by applicable statutory retention periods
Newsletter data Until you unsubscribe or withdraw consent, except for data needed to manage the unsubscribe request
Technical logs and security data According to the settings of the hosting and security tools used

When the applicable retention period expires, data is deleted or anonymised where possible and appropriate.

Some information may be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

5. Who can access your data?

Your personal data is accessible only to people and service providers who need it for the purposes described in this policy.

Depending on the services used, recipients may include:

  • People responsible for managing Angelito Studio’s enquiries and customer relationships.
  • The website hosting provider.
  • Technical providers responsible for website maintenance and security.
  • Brevo, for newsletter management and email communications.
  • Competent authorities where required by law.

Service providers processing personal data on our behalf must comply with applicable data protection obligations.

We do not sell your personal data to third parties.

6. Website hosting

The website https://angelito.studio is hosted by OVHcloud.

Hosting provider: OVH SAS

The hosting provider supplies the technical services required to make the website available.

As part of its services, certain technical data may be processed, including IP addresses, connection logs and information required for the infrastructure’s security and proper operation.

Processing arrangements depend on the services subscribed to and the applicable contractual terms.

7. Use of Brevo

Angelito Studio uses Brevo to manage its newsletter and, depending on the features enabled, its email communications.

When you subscribe to our newsletter, the data you provide may be sent to Brevo to manage your subscription and send communications.

This data is used for purposes related to your subscription.

You can withdraw your consent at any time by clicking the unsubscribe link in our emails or by contacting us at info@angelito.studio.

For more information about this provider’s data processing, please visit its website: https://www.brevo.com/.

8. Cookies and consent management

Our website uses Complianz to manage cookie preferences and consent.

Cookies are small files stored on your device when you visit a website.

Depending on their purpose, they may support website functionality, remember preferences or enable certain features.

8.1. Necessary cookies

Some cookies are essential for the website to function or to provide a service explicitly requested by the user.

They may be used, for example, to maintain security or remember your consent preferences.

8.2. Non-essential cookies

Other cookies or similar technologies may be used for additional features, analytics or third-party services.

Where required by law, their use is subject to your prior consent.

8.3. Managing your preferences

You can manage your preferences using the consent mechanism available on the website.

You can also configure your browser to limit or block certain cookies. Blocking necessary cookies may affect some website features.

The exact list of cookies used, their purposes and retention periods depends on the services actually active on the website.

To change your choices, use the cookie management mechanism available on our website, where provided.

9. Your rights regarding your personal data

Under the GDPR, depending on the circumstances and subject to the conditions set out in the law, you have the following rights.

Right of access

You can ask whether we process personal data about you and obtain a copy of that data.

Right to rectification

You can ask us to correct inaccurate or incomplete data.

Right to erasure

You can request the deletion of your data where the legal conditions are met.

Right to restriction of processing

In certain situations, you can ask us to temporarily restrict the use of your data.

Right to data portability

Where this right applies, you can receive the data you provided to us in a structured, commonly used and machine-readable format.

Right to object

You can object to certain processing based on our legitimate interests. You also have the right to object to the processing of your data for direct marketing purposes.

Right to withdraw consent

Where processing is based on your consent, you can withdraw it at any time.

The exercise of these rights depends on the context and the conditions set out in the GDPR.

How can you exercise your rights?

To exercise your rights, you can email us at:

info@angelito.studio

To protect your data, we may ask for reasonable information to verify your identity where necessary.

We will respond within the time limits set by law, generally within one month of receiving your request. This period may be extended under the conditions set out in the GDPR.

10. Data security

We take appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, disclosure or unauthorised access.

These measures may include:

  • Restricting access to authorised persons.
  • Keeping the website and its components up to date.
  • Securing administrative access.
  • Protecting the hosting infrastructure.
  • Backups and recovery mechanisms, depending on the configuration.
  • Measures designed to prevent security incidents.

However, no transmission or storage of data over the internet can be guaranteed to be completely secure.

11. Transfers of data outside the European Economic Area

Some technical providers may process or host data outside the European Economic Area.

If such a transfer occurs, we ensure it relies on a mechanism permitted by applicable law, such as an adequacy decision or appropriate safeguards where required.

Any transfers depend on the providers actually used and their processing arrangements.

12. Links to third-party websites

Our website may contain links to external websites, including social networks or additional resources.

When you click these links, you leave our website. Third-party websites have their own privacy policies and cookie rules.

We recommend reading their privacy policies before providing them with personal data.

13. Changes to this Privacy Policy

We may update this policy to reflect legal, technical or organisational developments and changes to website features.

The version published on this page indicates the date of its last update.

We recommend reviewing it periodically.

14. Lodging a complaint with the supervisory authority

If you believe that the processing of your personal data does not comply with applicable law, you can contact us so we can review your concern.

You also have the right to lodge a complaint with the competent supervisory authority.

In Belgium, this is the Data Protection Authority (DPA).

You can visit its website for information on how to submit a complaint.