Privacy policy

Last updated: 14 September 2026

1. Data controller

Data sent through this website is processed by Mathis Bouvy and Tom Herzet, who run the Tomaweb activity within Smart, through Productions Associées asbl (Rue Coenraets 72, 1060 Brussels — CBE 0896.755.397). Tomaweb is not a separate company.

For any question about your data: contact@tomaweb.be

2. Data collected

Through the contact form: your name, your email address and the content of your message.

Technical data: your IP address is used temporarily to protect the form against abuse (limiting the number of submissions). Our hosting provider may also keep connection logs for security purposes.

We do not collect any sensitive data and do not use any analytics or advertising tools.

3. Purposes and legal bases

Replying to your request and, where applicable, preparing a quote: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Securing the website and preventing spam: Tomaweb's legitimate interest (Article 6(1)(f) GDPR).

4. Recipients

Your data is intended exclusively for the Tomaweb team. It is never sold or transferred to third parties.

It may pass through our technical providers acting on our behalf: the website host (OVH SAS, France) and the email provider (OVH SAS, France).

5. Retention period

Messages received through the form are kept for 3 years from our last exchange, unless a contract is concluded, in which case the legal accounting retention periods apply.

6. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data.

To exercise these rights, write to us at contact@tomaweb.be. We will reply within one month.

If you believe your rights are not being respected, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be.

7. Cookies

This website only uses cookies that are strictly necessary for it to work (for example remembering the selected language). No analytics, advertising or social media cookies are set, so no consent is required.

Should such tools be added, a consent banner will be put in place and this policy will be updated.

8. Security

The website is only available over HTTPS and we apply appropriate technical and organisational measures to protect your data against unauthorised access.