Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages)
The content of this website (texts, logo, design) belongs to blamIT. Reuse is only allowed with written permission. We do our best to keep the information correct and up to date, but cannot guarantee it is always complete or error-free. Quotes and prices only apply after written confirmation. This website and any disputes are governed by Belgian law. Our services are subject to our terms and conditions.
Privacy policy (GDPR)
1. Who is the controller?
blamIT (see legal notice) is the data controller under the General Data Protection Regulation (GDPR). For any privacy question: info@blamit.eu.
2. What data do we process and why?
When you visit this website. The website itself has no forms, no accounts and no analytics or advertising tools. Each visit does involve technical data needed to show and secure the page:
Hosting and security (Cloudflare): IP address, browser, time and requested page are processed by our hosting partner Cloudflare, Inc. to deliver the site and protect it against attacks (e.g. DDoS). Based on the country of your IP address, Cloudflare sends you to the right language version on your first visit; we do not store this. Fonts and all other files come from our own server - the site loads nothing from third parties. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) - a secure, working website.
When you contact us (phone, email or remote support): your name, contact details, the content of your question and the information about your IT environment we need to help you. Legal basis: steps prior to or performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering your request.
Clients. For quotes, invoicing and service delivery we process the necessary identification, contact and billing data. Legal basis: contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)), such as accounting and tax law.
Remote support (TeamViewer). A session only starts when you open the program yourself and give us your ID and code. We only see your screen while the session runs. TeamViewer processes connection data under its own privacy policy.
3. Our clients' data in their IT environment
For management, support, backup, migration or security work we may have access to personal data in our clients' systems. In that case we act as a processor on the client's behalf, only on their instructions, with confidentiality and appropriate security. Where needed we sign a data processing agreement (Art. 28 GDPR). Penetration tests and vulnerability scans are only carried out with prior written consent.
4. Who do we share data with?
We never sell or rent personal data. We only share it with service providers we need (such as hosting, email and the software we use to deliver our services, for example Microsoft 365, Xopero, ESET or 1Password), with our accountant, or when the law requires it. These parties only process data on our instructions.
5. Transfers outside the EU
Cloudflare, Inc. is based in the United States and is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission. If a provider processes data outside the European Economic Area, this only happens with appropriate safeguards, such as an adequacy decision (e.g. the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.
6. How long do we keep data?
Contact requests are kept as long as needed to handle them and then for at most 2 years, unless they lead to a client relationship. Client and invoice data are kept for the duration of the contract and afterwards for as long as Belgian accounting and tax law requires. Technical logs are kept by Cloudflare according to their own short retention periods.
7. Security
As an IT and security business, we apply what we advise: MFA, encryption, restricted access, secured backups and up-to-date systems.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent you gave. Send your request to info@blamit.eu. We reply within one month and may ask you to confirm your identity.
9. Complaints
If you are not happy with how we handle your data, please tell us first. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.gegevensbeschermingsautoriteit.be.
10. Changes
We may update this policy. The latest version is always on this page, with the date of the last change.
Cookie policy
Cookies are small files a website stores on your device. Similar techniques, such as local storage, fall under the same rules.
What does this website use?
This website uses no analytics, tracking or advertising cookies and no social media cookies. We only use what is strictly necessary, which under Belgian rules and the GDPR does not require consent:
Name
Provider
Purpose
Retention
Type
blamit-consent
blamIT
Remembers your choice in the cookie notice
12 months
Local storage, strictly necessary
__cf_bm / cf_clearance
Cloudflare
Only during a security check: tells visitors apart from bots and blocks attacks
30 minutes to a few hours
Cookie, strictly necessary (security)
If you click an external link, such as TeamViewer, that website's cookie rules apply.
Your choice
On your first visit we show a notice where you can accept or decline. Declining does not affect how the site works. Should we ever use non-essential cookies, we will only do so with your consent and will update this policy. You can change your choice at any time:
You can also delete or block cookies and local storage in your browser settings.
