Privacy Policy

I am Femi Godpower, a self-employed web designer and developer in Belgium. I build websites for local businesses, and femigodpower.be is my own website.

For everything described on this page, I am the controller of your personal data:

• Femi Godpower, sole proprietorship trading as Femi Godpower
• Registered address: [TEMP]
• Company number: [TEMP]
• VAT number: [TEMP]
• Email: info@femigodpower.be

I am too small to need a data protection officer. Every question about this policy goes to the email address above, and I answer it myself.

This policy covers femigodpower.be and the contact you have with me through it. It follows the GDPR (Regulation (EU) 2016/679) and Belgian privacy law.

It does not cover the websites I build for clients. On those, my client decides which data is collected and their own privacy policy applies; I act as a processor for them under a separate agreement.

It also does not cover other companies' websites that I link to, such as LinkedIn or Instagram.

You can read every page of this website without telling me who you are. There is no account, no login and no form you have to fill in first.

To be able to send you the pages at all, the server that hosts femigodpower.be writes standard log files. They contain your IP address, the date and time, which page you asked for, whether it worked, and which browser and operating system you use. My hosting provider ([TEMP]) creates those logs and deletes them automatically after a limited period.

• Why: to keep the website online, to find errors and to spot abuse or attacks.
• Legal basis: my legitimate interest in a working, secure website (Article 6(1)(f) GDPR).

These logs are separate from the measurement described below. They are not used to build a profile of you, and I do not look at them unless something is broken.

If you send me an email, or a message through the contact form on this website, I receive what you send: your name, your email address, your phone number if you give it, and the content of your message.

• Why: to answer you, to make you a quote and, if we end up working together, to run the project.
• Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and my legitimate interest in answering the people who contact me (Article 6(1)(f)).
• How it reaches me: a message from the contact form is handled by the Ominity CMS that runs this website and then lands in my mailbox. An email goes straight to my mailbox.

I only use what you send me to reply and to do the work. I do not add you to a mailing list, and I do not pass your message on to anyone else.

Please do not send sensitive information (health data, identity documents, passwords) by email or through a web form. If I need something like that, we will agree on a safer way.

A cookie is a small file a website stores in your browser. This website uses a few.

Necessary cookies are set straight away, because the website cannot work properly without them. Every other cookie waits until you click Accept in the cookie banner. Before anything else loads, this website tells Google's tools that consent is denied for everything, so nothing measurement-related runs until you say yes.

If you accept, I measure which pages are visited, how long a visit lasts, roughly which country or region visitors come from and which kind of device they use. I use Google Analytics 4 for this, loaded through Google Tag Manager. The measurement data first goes to my own subdomain sst.femigodpower.be, a tagging server run by Onetagger on Belgian servers, which then forwards it to Google.

• Why: to see which pages actually work and to make the website better.
• Legal basis: your consent (Article 6(1)(a) GDPR and Article 129 of the Belgian Electronic Communications Act).
• I never see who you are. Analytics shows me numbers about visits, not names.

In Google Analytics, data is kept for 2 months for events and 14 months for user data, after which Google deletes it.

You can change or withdraw your consent at any time on the cookie policy page (/en/cookie-policy). Withdrawing does not undo what was measured before, but it stops everything from that moment on. You can also delete cookies yourself in your browser settings.

Necessary, set without asking:

• CookieConsent (Cookiebot, about 12 months) - remembers your answer to the cookie banner, so you are not asked on every page.
• ominity_locale (this website, 1 year) - remembers whether you chose English or Dutch.

Measurement, only after you click Accept:

• FPID (sst.femigodpower.be, 13 months) - recognises a returning visitor.
• FPLC (sst.femigodpower.be, about 20 hours) - links your browser to FPID.
• _ga and _ga_EW18E188S2 (Google Analytics, up to 2 years) - recognise a returning visitor and the current visit.

The always up to date list, scanned automatically, is on the cookie policy page (/en/cookie-policy). If I ever add a tool, that list updates and this page follows.

I do not sell your data, I do not rent it out, and I do not share it for anyone else's advertising.

A few companies process data on my behalf. They are processors: they may only do what I ask them to, under a written data processing agreement.

• [TEMP] - hosts this website (server logs, files, database).
• Ominity - the content management system this website runs on, including the contact form.
• Google Ireland Limited - Google Analytics and Google Tag Manager.
• Onetagger - the tagging server at sst.femigodpower.be, on Belgian servers.
• Usercentrics A/S (Cookiebot), Denmark - the cookie banner and the cookie list.

Beyond that I only pass data on when the law obliges me to, for example to the tax authorities or a court.

I keep your data inside the European Economic Area wherever I can. The website, the CMS and the tagging server all run in Europe, the last one in Belgium.

Google Analytics is provided by Google Ireland Limited, but Google may pass data on to Google LLC in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection, and Google's standard contractual clauses apply on top of that.

Sending the measurement data through my own server in Belgium first means less of it leaves Europe, and what does leave is sent from a European server rather than straight from your browser.

• Server logs: created by my hosting provider and deleted automatically after a limited period.
• Emails and contact form messages that do not lead to work: up to 2 years after our last contact, so I can pick the conversation back up if you return.
• Emails and documents that belong to a project we did together: as long as the law requires me to keep them. For invoices and accounting records in Belgium that is 7 years.
• Measurement data in Google Analytics: 2 months for events, 14 months for user data.
• Cookies: until they expire, at the latest after the lifetimes listed above, or until you delete them.

When a period ends, the data is deleted or anonymised.

Under the GDPR you can ask me at any time to:

• tell you which personal data I hold about you and give you a copy (access);
• correct it if something is wrong or out of date (rectification);
• delete it (erasure);
• limit what I do with it while we sort something out (restriction);
• hand it to you in a common, machine-readable format, or send it to someone else (portability);
• stop processing that is based on my legitimate interest (objection).

You can also withdraw the consent you gave for cookies and measurement at any time. That is as easy as giving it: the cookie policy page (/en/cookie-policy) has the button. Withdrawing consent does not make what happened before it unlawful.

Email info@femigodpower.be and say what you want. I answer within one month. If your request is complicated I may take up to two months longer, and I will tell you that within the first month, with the reason. I may ask you to prove who you are first, so I do not hand your data to a stranger. Using your rights is free, unless a request is clearly unfounded or excessive.

If you think I handle your data the wrong way, tell me first. Most things are sorted out with one email to info@femigodpower.be.

You always have the right to complain to the supervisory authority:

• Gegevensbeschermingsautoriteit (Belgian Data Protection Authority)
• Drukpersstraat 35, 1000 Brussels, Belgium
• contact@apd-gba.be
• www.gegevensbeschermingsautoriteit.be

If you live or work in another EU country, you can also complain to the supervisory authority there.

This website is served over an encrypted connection (HTTPS), so what you send travels protected.

Access to the hosting, the CMS and the analytics accounts is limited to me, with strong and unique passwords and two-factor authentication where the tool offers it. I keep the website and its software up to date.

No website is perfectly safe. If something goes wrong and your data is at real risk, I report it to the Data Protection Authority within 72 hours and I tell you as well when the law requires it.

I do not make automated decisions about you, and I do not build profiles. Nothing on this website judges, scores or sorts you. Measurement tells me that a page was visited, not who visited it.

This website is aimed at businesses, not at children. I do not knowingly collect personal data about children under 16. If you are a parent or guardian and you think I did, email me and I will delete it.

I may update this policy, for example when I start using a new tool or when the rules change. The current version is always on this page, with the date it was last changed right under the title.

If a change matters to you, I will say so clearly. For anything that needs your consent, I will ask you again instead of assuming the old answer still counts.