Privacy Policy

This privacy policy explains how ORPEM processes personal data in connection with the website orpem.eu, in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

1. Who is responsible for your data (the controller)

The data controller for orpem.eu is ORPEM, based in Brussels, Belgium.

• Legal entity name: TODO(owner): confirm the full registered legal entity name
• Company registration number: TODO(owner): confirm company registration number
• VAT number: TODO(owner): confirm VAT number
• Registered address: TODO(owner): confirm registered address (Brussels, Belgium)
• Email: info@orpem.eu
• Phone: +32 456 91 06 14

If you have any questions about this policy or about how your data is handled, contact us using the details above.

2. What personal data we process

orpem.eu is a static website. We do not currently operate a contact form on the site. We collect and process personal data in the following ways only:

• Email correspondence. If you email us at info@orpem.eu, we process the personal data you include in that email (such as your name, email address, and the contents of your message) in order to respond to you.
• Meeting bookings via Google Calendar. The "Book a meeting" link on our site takes you to a Google Calendar booking page (calendar.app.google). Any information you submit there (such as your name, email address, and meeting details) is collected and processed by Google as part of that booking. Please refer to Google's own privacy policy for how Google handles this data.
• Server logs from our hosting provider. Our website is hosted on Vercel. Like most hosting providers, Vercel automatically generates server logs when the site is accessed, which may include information such as IP address, browser type, and the pages requested. We use this only for the operation, security, and reliability of the website.

We do not use cookies or analytics tracking on this website. No cookie consent mechanism is required because no cookies or third-party trackers are set by orpem.eu itself.

3. Why we process your data (legal basis)

• Email correspondence is processed on the basis of our legitimate interest in responding to enquiries and, where the correspondence concerns a prospective service engagement, in taking steps towards a possible contract (GDPR Article 6(1)(b) and/or 6(1)(f)).
• Meeting bookings are processed by Google on the basis you agree to when using Google's booking service; on our side, we rely on our legitimate interest in scheduling and holding the meeting you requested.
• Server logs are processed on the basis of our legitimate interest, and that of our hosting provider, in operating, securing, and maintaining the website (GDPR Article 6(1)(f)).

4. How long we keep your data

• Email correspondence is kept for as long as necessary to handle your enquiry and, where relevant, for the duration of any resulting business relationship, after which it is deleted or archived in line with standard business record-keeping practice.
• Meeting booking data is retained by Google in accordance with Google's own retention practices; we retain calendar entries only for as long as needed to prepare for and hold the meeting.
• Server logs are retained by Vercel for a limited period as part of its standard hosting infrastructure, primarily for security and operational purposes.

5. Who we share your data with

We do not sell personal data. We share personal data only with the following processors, to the extent necessary to operate the services described above:

• Google — for meeting scheduling via Google Calendar (calendar.app.google), and for email if you contact us via a Google-hosted email address.
• Vercel — as the hosting provider for orpem.eu, which generates and stores server logs as part of standard hosting operations.

Where these processors are located outside the European Economic Area, they are required to provide appropriate safeguards for international data transfers under GDPR (such as Standard Contractual Clauses).

6. Your rights under the GDPR

If you are located in the European Economic Area, you have the following rights in relation to your personal data:

• The right to access the personal data we hold about you;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure of your data, in certain circumstances;
• The right to restrict or object to our processing of your data;
• The right to data portability, where applicable;
• The right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@orpem.eu or by phone at +32 456 91 06 14.

7. Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), or with the supervisory authority in your own EU member state.

8. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our data practices or for legal or regulatory reasons. Last updated: 18 July 2026.