Privacy notice

Who is responsible

MCHLBLLN BV, company number BE0772.728.625, Gulden Bodem 45/302, 3800 Sint-Truiden is responsible for the data this site collects. Questions about it can be sent to michiel@michielbellen.be.

The waiting list

Anyone who signs up for the waiting list provides an email address. With it we keep the sentences that were shown, in the language in which they were shown, whether the box for personal contact was ticked, when that happened and when the sign-up was confirmed.

Who mails: Busy Book, sent by MCHLBLLN BV. What: first, one email to confirm the sign-up. For that email we keep the recorded time at which sending starts. If an address that has not been confirmed yet is filled in again, it normally gets nothing new. Only an interrupted send is sent again: the same email, if sending has not been completed 5 minutes after that time. Beyond that, at most one reminder to confirm a sign-up that has not been confirmed yet. Until the link in one of those emails has been clicked, we send nothing else. After that, a message when the beta of Busy Book opens and when Busy Book goes live. Only those who ticked the box for personal contact can also be contacted personally about Busy Book. How often: after the confirmation no more often than those two moments, plus an occasional personal message for those who allowed it. Unsubscribing: through the link at the bottom of every message, where you choose between no more personal contact or nothing at all any more.

The legal basis is consent. That consent can always be withdrawn through the link in every message. An email address is needed to get on the waiting list; without an email address, no sign-up.

After unsubscribing, nothing more is sent; the address is kept as proof of that unsubscription and is deleted entirely on request. The same applies to a sign-up that was never confirmed: it too stays until it is deleted on request. The network address of whoever signs up is cleared, after 2 hours, at the next attempt, to limit abuse of the sign-up form.

Signing in

To sign in, a code is sent to an email address. What is kept is that email address, a hash of the code (from which the code itself cannot be recovered), and the network address from which the code was requested or entered. The legal basis is giving access to an account at the request of whoever signs in, and the legitimate interest in keeping that access secure. An email address is needed to sign in; without an email address, no code and no sign-in.

A code stays valid for 15 minutes. A sign-in attempt is cleared, after 2 hours, at the next attempt, so that it can be seen how often that went wrong. Whoever is signed in stays signed in for 14 days. The email address and the code are kept as proof of who signed in when, and are deleted on request.

For an account on this site, the email address and the name chosen for its own subdomain are kept for as long as the account exists.

Whoever checks whether a name for their own subdomain is still free leaves behind the network address the question came from, and, if signed in, also the account with which the question was asked. That is cleared, after 2 minutes, at the next check. It serves only to limit how often one network address or one account may ask, so that nobody can freely read off which names are in use. The legal basis is the legitimate interest in protecting those names, and those who use them.

The owner's team

The owner of this site can invite others to sign in and work along. Whom they invite, they decide themselves. For whoever has been invited, the email address to which the invitation was sent is kept, together with who invited them, when, and when they first signed in. That serves to be able to sign in, and to keep track of who did what, for example who approved an order. The legal basis is the owner's legitimate interest in running their business together with others and knowing who decided what.

That stays so as long as the owner does not remove someone from the team. Whoever is removed from the team can no longer sign in from that moment on, but the email address is kept, so that what was decided earlier still says who did it. It is deleted on request, insofar as it is no longer needed to account for those earlier decisions.

Who deletes or downloads other people's data

When whoever runs this site deletes or downloads other people's data, such as an email address or a list of email addresses, and the site keeps track of that, it keeps only who did it (the email address they were signed in with), what happened, how many addresses or items of data were involved, and when. The deleted or downloaded addresses themselves are never kept with it. That serves to be able to show afterwards who did what with personal data. The legal basis is the legitimate interest in being able to show that. It is kept for as long as it is needed to account for those actions, and is deleted on request insofar as that is no longer needed.

Counting visits

This site counts its visits itself, on its own server: which page, which site you came from, which country your browser gives as its language and whether it is a computer, tablet or phone — without cookies, without third-party scripts and without keeping personal data, because your network address is only used to count you once that day and is never stored.

The help chat

Whoever is signed in sees the help chat. A message sent there goes to MCHLBLLN's help desk, which keeps it in order to answer.

If you ask for an appointment in the help chat, your name, your email address, the chosen time and what the appointment is about go into MCHLBLLN's calendar at Google LLC (United States), and you get an invitation with a Google Meet link. That serves to be able to hold the appointment; the legal basis is that it happens at your request.

Who else sees it

These processors work for this site, each only on instructions and only for what is stated next to it:

• MCHLBLLN BV — builds, hosts and maintains this site, Belgium
• Hetzner Online GmbH — hosting and database, Germany
• Postmark (ActiveCampaign LLC) — sending email, United States
• Anthropic PBC — the help chat, United States
• Google LLC — an appointment booked through the help chat: name, email address, time and subject, in Google Calendar with a Google Meet link, United States
• Hostinger (Hostinger Global S.à r.l., Luxembourg, and Hostinger operations UAB, Lithuania) — this site's mailbox, European Union

Transfers outside the EEA only take place with an appropriate safeguard: the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

Data is never sold.

Your rights

You have the right of access, rectification, erasure, restriction and objection, the right to take your data with you, and the right to withdraw consent where that is the legal basis.

To exercise one of those rights: email michiel@michielbellen.be.

Complaint

You can also lodge a complaint with Gegevensbeschermingsautoriteit (Autorité de protection des données).

More

See also the cookie policy and the terms of use.