1. Who is responsible for your data
The data controller is Yenikapi BV (YK Technologies), with registered office in Ghent, Belgium, company and VAT number BE 0462.048.315.
For any question about this statement or about your personal data, you can reach us at berkan@yktechnologies.eu or on +32 486 96 11 88. We are not required to appoint a data protection officer (DPO) and have not done so. You can bring all your privacy questions directly to us.
2. Which personal data we process
We only process the data you provide yourself or that is technically needed to deliver the site.
- Contact form and email: your name, email address, organisation (optional), the subject and the content of your message. Your message is delivered to the founder by email. Please do not send us any sensitive data through the form (such as health or government identification data).
- Analytics data (only with your consent): through Google Analytics 4 we measure pseudonymous usage data, such as pages visited, estimated region, device and browser type, referring page and interactions. The IP address is only used temporarily by Google Analytics and is not stored by us.
- Technical data: our hosting partner processes technical data such as your IP address, timestamp, requested page and browser details to deliver the site securely and correctly.
We use no trackers other than Google Analytics, and the fonts are hosted on our own server, so no data is sent to third parties for them.
3. For what purpose and on what legal basis
Every processing activity has a purpose and a legal basis under Article 6 GDPR.
- Answering and following up on your question: the legal basis is the performance of or steps prior to a contract (Article 6.1.b) and our legitimate interest in responding to business enquiries (Article 6.1.f).
- Measuring and improving the site through Google Analytics: solely on the basis of your consent (Article 6.1.a). Without consent, no analytics cookies are placed.
- Securing the site and keeping it working correctly: our legitimate interest in network security and preventing misuse (Article 6.1.f).
- Complying with legal obligations, for example accounting retention duties: Article 6.1.c.
4. Cookies and consent
We place no non-essential cookies without your prior consent. That is the rule under Belgian electronic communications law and the GDPR.
- Strictly necessary: local storage that makes the site work and that remembers your cookie choice. No consent is required for this.
- Analytics (Google Analytics 4): loaded only after you click Accept on the cookie banner. The _ga and _ga_ cookies have a lifetime of up to 2 years.
There are no marketing or advertising cookies. You can withdraw or change your consent at any time, just as easily, through the Cookie settings link at the bottom of every page (Article 7.3 GDPR). Withdrawing consent does not affect processing that took place before it.
5. With whom we share data
We do not sell your data. We only share it with processors that work on our instructions and under a data processing agreement (Article 28 GDPR).
- Google (Google Analytics 4), with Google Ireland Limited as the European entity, for website statistics. See Google's privacy policy (opens in a new tab).
- Amazon Web Services (AWS): hosting of the website in EU regions, and handling of the contact form through Amazon SES, AWS Lambda and API Gateway. We use no third-party form service.
In addition, we may disclose data where legally required, for example at the request of a competent authority.
6. Transfers outside the European Economic Area
By default your data is hosted and processed within the EU. The website and the contact handling run on AWS infrastructure in an EU region.
For Google Analytics, processing may take place outside the EEA, in the United States. This happens with appropriate safeguards: the EU-US Data Privacy Framework (adequacy decision, Article 45 GDPR), for which Google is certified, and additionally the European Commission's standard contractual clauses (Article 46 GDPR). You can request a copy of these safeguards from us.
7. How long we keep data
- Contact and correspondence: for as long as needed to handle your question and any collaboration. For enquiries that do not lead to a collaboration, we keep them in principle for up to 24 months after the last contact. Where a legal or accounting retention duty applies, we adhere to that period (for invoices, usually 7 years).
- Analytics data: Google keeps this in line with the retention period we set (by default up to 14 months) and the lifetime of the cookies.
- Technical data: only briefly, for the delivery and security of the site.
We never keep data longer than needed for the purposes above or than legally required.
8. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Right of access (Article 15): to know which data we process about you.
- Right to rectification (Article 16): to have inaccurate data corrected.
- Right to erasure (Article 17): to have your data deleted.
- Right to restriction (Article 18) and right to object (Article 21), in particular against processing based on legitimate interest.
- Right to portability (Article 20) of data you provided yourself.
- Right to withdraw your consent (Article 7.3), without affecting the earlier processing.
9. How to exercise your rights
Send an email to berkan@yktechnologies.eu. We respond in principle within one month (Article 12 GDPR). Exercising your rights is free of charge. We may ask you to confirm your identity where this is necessary to protect your data.
10. Complaint to the supervisory authority
If you are not satisfied with how we handle your data, we would prefer to hear about it from you first. You also always have the right to lodge a complaint with the Belgian Data Protection Authority (Article 77 GDPR).
Data Protection Authority, Drukpersstraat 35, 1000 Brussels, +32 (0)2 274 48 00, contact@apd-gba.be, gegevensbeschermingsautoriteit.be (opens in a new tab).
11. Automated decision-making and profiling
We make no automated decisions with legal or similar effects, and we do not carry out profiling. The statistics from Google Analytics are aggregated analysis, not an individual assessment.
12. Security
We take appropriate technical and organisational measures (Article 32 GDPR). The site runs entirely over HTTPS, on AWS infrastructure in EU regions, with strict security headers and a Content-Security-Policy. Access to messages is limited to the founder, and our processors are contractually bound to an equivalent level.
13. Minors
This site is aimed at organisations and professionals and not at children. We do not knowingly collect personal data from minors.
14. Changes to this statement
We may amend this privacy statement when our way of working or the regulations change. The current version is always on this page, with the date of the last change at the top. See also our terms and conditions.