Privacy statement.

Who is responsible

Max De Vos GCV is the controller for the personal data described on this page. When this page says "I", that's me, Max De Vos.

Max De Vos GCV
Brabantdam 3, 9000 Gent, Belgium
VAT BE 0621.976.454
max@maxdevos.be

Visiting this site

• No cookies, no analytics, no tracking.
• One small preference is stored in your browser — which homepage tagline you saw — so you see the same one next time. You can clear it in your browser's site-data settings.
• Like any website, the server keeps short-lived technical logs (IP address, time, page requested) for security and troubleshooting. Legal basis: my legitimate interest in a secure, working site (GDPR art. 6(1)(f)).

The contact form

• What I receive: your name, email address, company (optional) and message, plus the time it was sent, your browser type and which homepage tagline you saw.
• Why: to answer your question and, if you want, to prepare a proposal — at your request before a possible contract (GDPR art. 6(1)(b)) and in my legitimate interest in answering business enquiries (art. 6(1)(f)).
• Who receives it: me. The email services that deliver and store it act on my behalf. I don't add you to a mailing list or share your details for anyone else's marketing.
• How long: as long as needed to handle your request and any follow-up. If it leads to an assignment, as long as the law requires for business records.

Google user data

For client reporting I use an app of my own, called Max De Vos on Google's sign-in screen, that connects to Google APIs.

• What it accesses: data from Google Ads, Google Analytics and Google Search Console — only for accounts a client has given me access to.
• What it's used for: reading that data to prepare analyses and reports for the client who owns the account. I use it only to read; it changes nothing in those accounts.
• How long: for the duration of the engagement, until the client and I agree the data can be deleted.
• Sharing: I don't sell Google user data, I don't use it for advertising, retargeting or profiling, and I don't transfer it except as needed to deliver the client's own reports.
• Ending access: a client can remove my access to their accounts at any time.

Max De Vos’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Data outside the EU

Some of the service providers I rely on may process data outside the European Economic Area. They do so under safeguards the GDPR recognises, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

Under the GDPR you can ask me to access, correct or delete your personal data, to restrict or object to how I use it, and to receive it in a portable format. Mail max@maxdevos.be — I answer within one month.

Complaints

If you think I've handled your data wrongly, tell me — I'd like to put it right. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels · contact@apd-gba.be · dataprotectionauthority.be.

Changes

When something changes, I update this page and the date at the top.