1. Controller

TheWebConnection, operated by BQNT B.V., is controller for data relating to the website, enquiries, customer accounts, orders, billing, support and administration. Correspondence address: Laatstraat 15C, 2200 Noorderwijk, Belgium. Send privacy questions to support@thewebconnection.eu.

2. Data we process

• name, organisation, address, email and telephone number;
• account, customer, order, invoice and payment-status data, but not full payment-card details;
• domain, DNS, hosting, mailbox and technical configuration data;
• tickets, forms, callback requests and Data-Sam conversations;
• IP address, device, login, security and usage logs;
• information needed for delivery, migration, support or statutory records.

For personal data that a customer places in a hosted website, mailbox or application, TheWebConnection generally acts as processor rather than controller.

3. Purposes and lawful bases

We use data to prepare and perform a contract, provide accounts and services, process payments and records, deliver support and security, and prevent abuse. Statutory records rely on a legal obligation. Security, quality improvement and reasonable business communications may rely on legitimate interests. We ask for consent for non-essential cookies or marketing where required.

4. Data-Sam and AI

Chat text may be sent to a contracted AI service to prepare a reply. Where technically available, model storage is disabled. Do not share passwords, payment details, medical data or other sensitive information. Data-Sam does not make decisions with legal effect without human review; quotations, payments, account actions and technical fixes are confirmed by rules or a member of staff.

5. Who receives data

Where necessary, we share data with processors and suppliers for hosting, DirectAdmin, WordPress/WooCommerce, email, support, security, Mollie payments, TransIP domains, telephony and AI. Professional advisers or competent authorities may also receive data where legally required. We do not sell personal data.

6. Transfers outside the EEA

We choose processing within the European Economic Area where possible. If a supplier processes outside the EEA, we use a recognised adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Retention

• enquiries and closed tickets: normally no more than 24 months after completion;
• account and service data: for the contract and afterwards while needed for aftercare or legal claims;
• invoices and relevant accounting records: 7 years from 1 January following the year of issue, or longer where required by law;
• security logs: normally no more than 12 months unless an incident investigation requires longer;
• backups: under a limited rotating backup cycle.

8. Cookies

The website uses necessary cookies for language choice, sessions, security, basket and account functions. Non-essential analytics or marketing cookies are placed only after consent if they are used. You may remove cookies in your browser; necessary functions may then work less well.

9. Security

We use appropriate technical and organisational measures, including encrypted connections, restricted access, separated accounts, logging, updates and backups. No system is completely risk-free. Report a suspected incident immediately to support@thewebconnection.eu.

10. Your rights

You may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent without affecting earlier lawful processing. We may verify identity and normally respond within one month. Some data must be retained for legal duties or claims.

11. Complaints and changes

Please contact support@thewebconnection.eu first. You may also complain to the Belgian Data Protection Authority or the authority in your country of residence. We update this notice when services or rules change and show the current date above.