Who is responsible?
Sani-Doc is responsible for the data you give us through this website. For questions about your data, contact us via sos.sanidoc@gmail.com.
Legal
Privacy policy
In short
We only use your data to arrange your request and appointment. We don't sell or share anything for advertising, and you can always have your data removed.
What data do we process?
Data you fill in yourself with a request: name, contact details, details about your appliance or the problem, the address of the appointment (street, number, box, postcode, municipality and country), any notes and photos. If you subscribe to the newsletter or write a review, also what you fill in there (see below).
What do we use it for?
Only to handle your request, plan your appointment and contact you. We don't sell or share your data with third parties for marketing.
On what legal basis?
We process your request and your appointment to prepare and carry out a contract with you, and on the basis of the consent you give in the form. We only send the newsletter with your consent, which you confirm through the link in your mailbox; a review is yours to write or not. We keep invoices and accounting records because the law requires it. The anonymous visitor figures, the backups and the security of the website rest on our legitimate interest. You can withdraw your consent at any time.
Who receives your data?
Only we do, and the service providers that run the website for us and process your data only on our instructions: Vercel (hosting, and the protected storage of the encrypted backups), Neon (database), Resend or our own mailbox (e-mail, the newsletter too) and our web developer nealvdv.be for maintenance. An address in Belgium is looked up in the address register of the Flemish government (Digitaal Vlaanderen) to avoid typos; only the address is sent. Some of these companies are American; data that leaves the EU is covered by the EU-US Data Privacy Framework or the EU's standard contractual clauses. We keep the e-mails we send you about your appointment with that appointment.
Your request in our admin
Every request through the website (an appointment, a request for advice or a call-out through My home) reaches us by e-mail and is also kept in the website's admin, so it isn't lost when an e-mail goes astray. When we answer you from the admin, we keep that answer with your request. Photos you send stay in the e-mail only. Only we and our web developer, for maintenance, can open the admin.
Visitor statistics
We count anonymously how many people visit the website and which pages they view. We use no cookies for this and don't keep your IP address: the figures can't be traced back to you.
Reviews
After an appointment we may ask you for a review with a single e-mail, with a link of your own. If you write one, we keep your score, your text, your first name and the first letter of your surname, and the e-mail address we sent the request to. The website only shows the score, the text and your first name with that one letter, and only after we have checked the review. You can always have your review changed or removed through sos.sanidoc@gmail.com. The day after your appointment we may also ask you to write a review on Google; what you write there falls under Google's privacy policy.
Newsletter
If you subscribe to the newsletter, we keep your e-mail address, the language you chose and when you subscribed and confirmed. You are only on the list once you confirm through the link in your inbox; if you don’t confirm within 30 days, we delete your address. We send the newsletter ourselves, through our mail service, and give your address to nobody else. At the bottom of every newsletter you unsubscribe with one click; if you ask us to erase your data, we remove your address completely.
Security and backups
Every night we make an encrypted backup of the database, so nothing is lost after a failure or a mistake. The backups are kept in closed, non-public storage at Vercel, can only be opened with a separate key and are deleted after twelve months at most: we keep the latest fourteen and the first of each month. Whatever is deleted from the database is therefore gone from the backups after twelve months at the latest. To protect the website we count break-in attempts: only the address that was tried and the day and, to count the senders, an irreversible code derived from the IP address, deleted after two months.
How long do we keep it?
As long as needed for your appointment and our accounts: up to seven years after your last appointment. After that we erase your name, contact details and address. Only the date, the service and the amount remain, without any link to you. A request in our admin is erased a year after it was handled (what is in the trash after 30 days), your newsletter address when you unsubscribe and ask us to, and the backups after twelve months at most.
Your rights
You can always ask to see, correct or erase your data via sos.sanidoc@gmail.com. We then send you an overview of what we keep, or confirm that your data has been erased.
A complaint?
Do you disagree with how we handle your data? Please tell us first via sos.sanidoc@gmail.com. You can also always lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels (dataprotectionauthority.be).