Privacy Policy
Preamble
Kodyo SRL (hereinafter “Kodyo”, “we”, “our” or “us”) attaches particular importance to the protection of your personal data and respect for your privacy.
The purpose of this privacy policy is to inform you clearly and transparently about how we collect, use, share and protect your personal data when you visit our website kodyo.studio (hereinafter “the Site”) or when you use our services.
This policy is established in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter “GDPR”), as well as the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
1. Data Controller
The data controller for your personal data is:
Kodyo SRL
Courbevoie 13, 1348 Louvain-la-Neuve, Belgium
Company number: BE 0102.890.008.1
Email: [email protected]
For any questions regarding the protection of your personal data, you can contact us at: [email protected]
2. Personal Data Collected
We collect and process the following categories of personal data:
2.1. Data you provide directly
When you fill out a contact form or quote request on our Site, we collect:
- Identification data: surname, first name
- Contact data: email address, phone number
- Professional data: company name, position
- Content of your message or request
2.2. Automatically collected data
When you browse the Site, we automatically collect certain technical data:
- Online identifiers: IP address (anonymized), user identifier
- Technical data: device type, operating system, screen resolution, browser type, language
- Geolocation data: country only
- Navigation data: pages visited, visit duration, traffic source, interactions with the Site
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis (Article 6 GDPR) |
|---|---|
| Responding to your contact or quote requests | Performance of pre-contractual measures (Art. 6.1.b) |
| Providing the requested services | Performance of a contract (Art. 6.1.b) |
| Improving our Site and services | Legitimate interest (Art. 6.1.f) |
| Conducting anonymized statistical analyses | Legitimate interest (Art. 6.1.f) |
| Understanding user behavior on our Site | Consent (Art. 6.1.a) |
| B2B commercial prospecting | Legitimate interest (Art. 6.1.f) |
| Complying with our legal obligations | Legal obligation (Art. 6.1.c) |
Regarding legitimate interest: Our legitimate interest consists of improving our services, understanding the needs of our visitors and developing our business activities. We ensure that this interest does not prejudice your fundamental rights and freedoms.
4. Cookies and Similar Technologies
Our Site uses cookies and similar technologies to collect information. We distinguish:
4.1. Strictly necessary cookies
These cookies are essential for the operation of the Site and cannot be disabled. They do not require your consent.
4.2. Analytical cookies
Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (“Google”).
Google Analytics uses cookies to help us analyze how visitors use the Site. The data generated by these cookies about your use of the Site is transmitted to and stored by Google on servers located in the United States.
Data collected: online identifiers, technical data (device type, browser, screen resolution), geolocation data (country), navigation data (pages visited, session duration, interactions).
Important note: Google Analytics 4 does not record or store complete IP addresses. IP addresses are anonymized.
Google may transfer this information to third parties if required by law or if third parties process this information on Google’s behalf.
Legal basis: Consent (Article 6.1.a GDPR)
Opt-out: You can refuse Google Analytics cookies via our cookie management banner or by installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
For more information: Google Privacy Policy
Umami Analytics
We also use Umami, a privacy-friendly web analytics solution.
Data collected: anonymized navigation data (pages visited, visit duration, traffic source), technical data (device type, browser, country).
Umami does not collect personally identifiable data and does not place tracking cookies.
Legal basis: Legitimate interest (Article 6.1.f GDPR)
4.3. Behavioral analysis cookies
Hotjar
We use Hotjar on our Site to better understand how our users interact with our services and to optimize our services and user experience.
To this end, Hotjar uses proprietary cookies and other technologies to collect data on the behavior of our users and their devices.
Data collected:
- Online identifiers (device IP address, user identifier)
- Technical data (device type, screen resolution, browser information)
- Geolocation data (country only)
- Behavioral data (interactions with the Site such as clicks, taps, scrolling)
Automatic deletion of sensitive data: By default, Hotjar automatically removes personally identifiable information entered in form fields (credit card numbers, phone numbers, etc.). This data never appears in recordings and is not transmitted to Hotjar servers.
Hotjar may reuse this personal data to develop and improve its tools and services for us and our users.
Legal basis: Consent (Article 6.1.a GDPR)
Opt-out: You can refuse Hotjar cookies via our cookie management banner or by enabling the “Do Not Track” option in your browser, or by visiting: https://www.hotjar.com/legal/compliance/opt-out/
For more information: Hotjar Privacy Policy and Hotjar Trust Portal
4.4. Managing your cookie preferences
On your first visit to the Site, a cookie management banner allows you to accept or refuse each category of non-essential cookies.
You can change your preferences at any time by clicking on the “Cookie Settings” link in the Site footer.
You can also configure your browser to refuse cookies or be alerted when a cookie is placed. However, some Site features may no longer be accessible.
5. Data Recipients
Your personal data may be shared with the following categories of recipients:
- Authorized Kodyo SRL personnel: members of our team who need access to your data as part of their duties
- Technical subcontractors: host (Cloudflare), analytics tools (Google, Hotjar, Umami), management tools (CRM)
- Competent authorities: in case of legal obligation
We never sell your personal data to third parties.
6. Data Transfers Outside the European Union
Some of our providers (including Google and Cloudflare) may process personal data outside the European Economic Area (EEA), particularly in the United States.
These transfers are governed by appropriate safeguards in accordance with the GDPR:
- Adequacy decisions from the European Commission (where applicable)
- Standard Contractual Clauses adopted by the European Commission
- EU-U.S. Data Privacy Framework for certified American companies
You can obtain a copy of the safeguards in place by contacting us at [email protected].
7. Retention Period
We retain your personal data only for as long as necessary for the purposes for which it was collected:
| Type of data | Retention period |
|---|---|
| Contact data (forms) | 3 years after last contact |
| Customer data (contract) | Duration of contractual relationship + 10 years (legal accounting and tax obligations) |
| Navigation data (analytical cookies) | 13 months maximum |
| Hotjar data | 365 days (Hotjar policy) |
At the end of these periods, your data is deleted or anonymized.
8. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right of access (Art. 15) | Obtain confirmation that data concerning you is being processed and receive a copy |
| Right to rectification (Art. 16) | Have inaccurate data corrected or incomplete data completed |
| Right to erasure (Art. 17) | Request deletion of your data under certain conditions |
| Right to restriction (Art. 18) | Request suspension of processing of your data in certain cases |
| Right to portability (Art. 20) | Receive your data in a structured, commonly used format |
| Right to object (Art. 21) | Object to processing of your data based on legitimate interest |
| Right to withdraw consent (Art. 7.3) | Withdraw previously given consent at any time |
How to exercise your rights?
You can exercise your rights by contacting us:
- By email: [email protected]
- By mail: Kodyo SRL – Data Protection – Courbevoie 13, 1348 Louvain-la-Neuve, Belgium
We commit to responding to your request within one month. This period may be extended by two additional months in case of complex or numerous requests, in which case we will inform you.
Complaint to the supervisory authority
If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the Data Protection Authority (DPA):
Data Protection Authority
Rue de la Presse 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
Website: www.autoriteprotectiondonnees.be
9. Data Security
We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data and protect it against unauthorized access, modification, disclosure or destruction.
These measures include:
- Encryption of communications (HTTPS/TLS)
- Access control to data
- Regular backups
- Staff awareness training
10. Modification of this Policy
We reserve the right to modify this privacy policy at any time to adapt it to legal, regulatory or technical developments.
The version in force is the one accessible on the Site. In case of substantial modification, we will inform you by a visible notice on the Site.
We invite you to consult this page regularly.
Last updated: January 2026