Privacy
Privacy statement
Effective 1 October 2026.
Nemerosa BV develops Yontrack and runs this website. This statement explains which personal data the website processes, why, and what your rights are. We act as data controller under the General Data Protection Regulation (EU 2016/679, "GDPR") and Belgian data protection law.
Who we are
Nemerosa BV, Stijn Streuvelslaan 11, 1560 Hoeilaart, Belgium. For anything about your personal data, write to [email protected].
What this website collects
- What you send us through the contact form: your name, your email address and your message.
- Visit statistics: the pages you visit, the page that brought you here, the links you follow to other websites, your browser, operating system, device type, screen size and language, and an approximate location (country, region and city) worked out from your IP address.
- Technical data: when you visit a page, our hosting provider processes your IP address and your browser's request to deliver the page and to keep the service secure.
We count visits with Umami, an open-source analytics tool that we run ourselves. It sets no cookies and doesn't store your IP address: it only uses it, with your browser's details, to work out your approximate location and an anonymous identifier that changes every day, so that no one can follow you from one day to the next. If your browser sends a Do Not Track signal, your visit isn't counted.
The website itself sets no cookies. Our hosting provider's network sets one strictly necessary security cookie, __cf_bm, for 30 minutes, to tell people from automated traffic; it isn't used for statistics.
There is no advertising, no tracking across websites and no newsletter. We do not knowingly collect data from children under 16.
Why we process it
- To answer your message, and to follow up on a pilot, a service or a question you asked about: our legitimate interest, or steps taken at your request before a contract.
- To deliver the website and keep it secure: our legitimate interest.
- To understand which pages are read and how visitors find us, so that we can improve the website: our legitimate interest.
- To meet legal obligations, where they apply.
We do not sell your data, and we do not use it for automated decision-making or profiling.
Who handles it for us
- DigitalOcean, which hosts the website, our visit statistics and the service that receives the contact form, in its Frankfurt (Germany) region.
- Cloudflare, which delivers the website on DigitalOcean's behalf, as its sub-processor, and sets the security cookie above.
- OVHcloud, which delivers the contact form's messages to our mailbox and hosts our email, in the European Union.
DigitalOcean and Cloudflare are companies based in the United States. Where data could be transferred outside the European Economic Area, it is covered by the Standard Contractual Clauses of DigitalOcean's data processing agreement. We may also share data with authorities when the law requires it.
How long we keep it
We keep contact form messages, and the emails that follow them, for up to 24 months after our last exchange. Then we delete them.
We keep visit statistics for 24 months, then delete them.
We don't keep the technical data ourselves: our hosting provider keeps it for a limited time, under its own policy.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of them, write to [email protected].
Visit statistics can't be linked to you, so we can't find yours to show or erase them. To be left out of them, turn on Do Not Track in your browser.
You also have the right to lodge a complaint with the Belgian Data Protection Authority: www.dataprotectionauthority.be.
Security
The website is served over encrypted connections only, and access to messages is limited to the people who answer them. No system is entirely free of risk: if you suspect any misuse, please tell us.