Privacy policy
Last updated: 4 August 2026
1. Who we are
Energetic NV, trading as Energetic Machinery, is the controller of the personal data described in this policy.
Energetic NV
Kleistraat 1
9190 Stekene
Belgium
VAT BE 0632 954 593
Telephone +32 (0)3 779 64 77
Email info@energeticmachinery.com
For any question about this policy or about your personal data, contact us at info@energeticmachinery.com.
2. What data we process
Data you give us through the contact form. Your name, company, email address, telephone number, the subject you select, your message, the language you were browsing in and the page you submitted from.
Data we receive automatically. Your IP address, browser and device information, and the pages you visit. Your IP address is not stored in readable form for the contact form. We store only an irreversible hash of it, used to limit abuse of the form.
Data from cookies and similar technologies. Only after you consent. See our cookie policy for the full list.
Company identification. With your consent for marketing cookies, we use Leadinfo to recognise which company a visitor belongs to, based on the IP address. This tells us that an organisation visited our site and which pages were viewed. It does not tell us who you are as an individual.
We do not knowingly collect special categories of personal data, and we do not ask for them.
3. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing a possible quotation or contract | Necessary for steps taken at your request before entering into a contract, Article 6(1)(b) GDPR |
| Keeping a record of enquiries so we can follow up and refer back to earlier correspondence | Our legitimate interest in managing our commercial relationships, Article 6(1)(f) GDPR |
| Preventing abuse of the contact form, using a hashed IP address | Our legitimate interest in the security and availability of our website, Article 6(1)(f) GDPR |
| Measuring how our website is used | Your consent, Article 6(1)(a) GDPR |
| Advertising, remarketing and identifying visiting companies | Your consent, Article 6(1)(a) GDPR |
| Complying with our accounting and legal obligations once a commercial relationship exists | Compliance with a legal obligation, Article 6(1)(c) GDPR |
Where we rely on your consent, you can withdraw it at any time. Use the "Cookie settings" link in the footer of any page, or contact us. Withdrawing consent does not affect processing that already took place.
4. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not lead to a commercial relationship | 24 months from the last contact. Our equipment maintenance cycles run over several years, so an enquiry can legitimately be picked up again long after it was made. |
| Enquiries that lead to a project | Transferred to the project file and kept under our normal commercial retention. Accounting records are kept for 7 years as required by Belgian law. Data needed to defend against contractual claims is kept for up to 10 years. |
| Technical log of sent notification emails | 12 months |
| Records of blocked or rejected form submissions, containing only a hashed IP address, the reason, the page and the language | 90 days |
| Records used for the hourly submission limit, containing only a hashed IP address | 24 hours |
| Cookie consent choice | Stored in your own browser. You can delete it at any time by clearing your browser storage. |
5. Who else processes your data
We use the following service providers. They act on our instructions and are bound by a data processing agreement.
| Provider | Role | Location of processing |
|---|---|---|
| Lovable | Hosting of the website and of the managed database in which contact form submissions are stored | European Union |
| Mailgun | Delivery of the notification emails our website sends | European Union |
| Microsoft | Our own email environment, Microsoft 365, in which your message arrives | European Union |
| Google Tag Manager, Google Analytics and Google Ads, only after your consent | United States and other countries | |
| Leadinfo B.V., Netherlands | Identification of visiting companies and website visit analytics, only after your consent | European Union. Leadinfo's approved sub-processor for hosting and infrastructure is Amazon Web Services EMEA SARL in Luxembourg. |
We do not sell your personal data and we do not share it for anyone else's purposes.
Transfers outside the European Economic Area. Where a provider processes data outside the EEA, this takes place on the basis of the European Commission's standard contractual clauses or another lawful transfer mechanism.
For Google this concerns Google Tag Manager, Google Analytics and Google Ads, and only after you have consented. Google relies on the standard contractual clauses and is certified under the EU-US Data Privacy Framework.
For Leadinfo no transfer outside the EEA takes place. Their processing agreement names Amazon Web Services EMEA SARL in Luxembourg as the sole approved sub-processor for hosting and infrastructure, and provides that the European Commission's standard contractual clauses apply to any transfer to a sub-processor in a country without an adequacy decision.
6. Your rights
Under the GDPR you have the right to:
- ask what personal data we hold about you and receive a copy
- have inaccurate data corrected
- have your data erased where there is no longer a valid reason to keep it
- ask us to restrict processing
- object to processing based on our legitimate interest
- receive your data in a portable format
- withdraw your consent at any time
To exercise any of these rights, write to info@energeticmachinery.com. We will respond within one month. We may ask you to confirm your identity so that we do not disclose data to the wrong person.
If you are not satisfied with how we handle your request, you can lodge a complaint with the Belgian supervisory authority:
Gegevensbeschermingsautoriteit
Drukpersstraat 35
1000 Brussels
Belgium
contact@apd-gba.be
7. Automated decision-making
We do not use automated decision-making or profiling that produces legal effects for you.
8. Security
We protect your data with technical and organisational measures appropriate to the risk. Access to contact form submissions inside our organisation is limited to the people who need it to answer your enquiry. Our website is served over an encrypted connection.
9. Changes to this policy
We will update this page when our processing changes. The date at the top shows when it was last revised.
The English version of this policy is the authoritative version in case of any discrepancy between translations.