Last updated: 31 August 2026

Data controller

The controller of your personal data is Chauffitherm SRL, a company incorporated under Belgian law and registered with the Crossroads Bank for Enterprises under number 0669.686.812 (VAT number: BE 0669.686.812), with its registered office at Rue Kasterlinden 65, 1082 Berchem-Sainte-Agathe, Belgium.
Represented by its managing director, Abdelmajid El Makhoukhi.
Phone: 0488 02 77 07
Email: info@chauffitherm.be

Chauffitherm SRL processes your data in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

Data collected

We only collect the data you voluntarily send us through our quote request or contact forms, together with the technical data strictly necessary for the operation and security of the site.

Identification and contact data: first name, surname, phone number, email address (optional).
Data about your request: service required, how urgent it is, municipality or service area, and the free-text message you write.
Technical data: IP address, date and time of the request, browser type, security logs generated automatically by our host.

We collect no banking data through this site and we process no special categories of data (health data, opinions, beliefs and so on). The site uses no advertising or analytics cookies — see our cookie policy.

Purposes and legal bases

Each processing operation rests on a legal basis set out in Article 6 GDPR:

Handling your quote or callout request and getting back to you — legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Performing and following up the work ordered (scheduling, the visit, after-sales service) — legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Meeting our accounting and tax obligations (invoicing, retention of supporting documents) — legal basis: legal obligation (Art. 6(1)(c) GDPR).
Keeping the site secure and preventing abuse (technical logs, anti-spam protection) — legal basis: the legitimate interest of Chauffitherm SRL in protecting its infrastructure (Art. 6(1)(f) GDPR).
Displaying the Google Maps map — legal basis: your consent, given by an explicit click on the button that displays the map (Art. 6(1)(a) GDPR).

Your data is neither sold, rented nor passed to third parties for commercial purposes.

Recipients and processors

Your data is accessible to the managing director and to the Chauffitherm SRL engineers who need it to handle your request. We also use the following processors, which act on our instructions and under a processing agreement compliant with Article 28 GDPR:

Vercel Inc. (United States) — site hosting and technical logs.
Resend (United States) — delivery of the notification emails triggered by your requests.
Supabase (European Union) — the database in which your contact and quote requests are stored, in addition to the email, so that they can be followed up.
Google Ireland Ltd / Google LLC — display of the Google Maps map, only if you choose to load it.

Your data may also be shared with our accountant or with a public authority where Belgian law requires it.

Transfers outside the European Union

Vercel Inc. and Resend are established in the United States: processing your data therefore involves a transfer outside the European Economic Area. These transfers are governed by the mechanisms set out in Chapter V GDPR, namely the standard contractual clauses adopted by the European Commission and, where the provider is certified under it, the EU-U.S. Data Privacy Framework. Voluntarily displaying the Google Maps map may also result in a transfer to Google LLC in the United States, governed by the same mechanisms. A copy of the applicable safeguards can be obtained on request at info@chauffitherm.be.

Retention periods

We keep your data only for as long as necessary for the purposes described above:

Quote request not followed by any work: 3 years from our last contact with you.
Customer data (jobs, invoices, accounting records): 10 years from the close of the financial year, in line with the retention obligation set out in the Belgian Code of Economic Law.
Technical and security logs: 12 months.
Emails exchanged with you: 3 years from the last exchange, except where they constitute a supporting document subject to the 10-year retention period.

Once these periods expire, your data is deleted or irreversibly anonymised.

Your rights

Under Articles 15 to 22 GDPR, you have the following rights at any time:

Right of access: to obtain confirmation that your data is being processed and to receive a copy of it.
Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure: to ask for your data to be deleted, where no legal obligation requires us to keep it.
Right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interest.
Right to portability: to receive the data you have provided to us in a structured, machine-readable format, or to ask for it to be transmitted to another controller.
Right to restriction of processing: to ask for the use of your data to be temporarily frozen, in particular while its accuracy is being checked.
Right to withdraw your consent: where processing rests on your consent (displaying the Google Maps map), you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to us at info@chauffitherm.be or by post to Chauffitherm SRL, Rue Kasterlinden 65, 1082 Berchem-Sainte-Agathe. We reply within one month. We may ask you for proof of identity where there is reasonable doubt as to the identity of the person making the request.

Complaint to the supervisory authority

If you consider that the processing of your data does not comply with the rules, you have the right to lodge a complaint with the Belgian supervisory authority:
Data Protection Authority (DPA)
Rue de la Presse 35, 1000 Brussels
Phone: +32 2 274 48 00
Email: contact@apd-gba.be
www.dataprotectionauthority.be

Cookies

The site uses no advertising or analytics cookies. The only cookies that may be set are Google's, when you choose to display the Maps map. The details are in our cookie policy.

Security

We put appropriate technical and organisational measures in place to protect your data: encryption of exchanges (HTTPS), access restricted to authorised people, hosting with professional providers and anti-spam protection on the forms. No banking data is collected through this site.

Changes to this policy

This policy may be adapted to reflect legal or technical developments. The version that applies is the one published on this page, with the date it was last updated shown at the top. See also our legal notice.

Privacy policy