Privacy policy
How A&MZ BV handles your personal data (GDPR).
Last updated: 26 October 2026
1. Who is responsible?
The data controller is A&MZ BV, Coppelaan 8, 9111 Sint-Niklaas, Belgium, company number BE 1011.161.355. Privacy contact: info@a-mz.be · +32 498 12 91 57. We have not appointed a data protection officer, as this is not mandatory for us.
2. What data and why?
Contact form, email, phone or WhatsApp: name, email address, phone number (optional), chosen service and your message. We use these only to answer your request, prepare a quote and carry out the work. Legal basis: steps taken at your request before entering into a contract and performance of that contract (Art. 6(1)(b) GDPR).
Customers: identity, address and invoicing data, to perform the contract (Art. 6(1)(b)) and meet our accounting and tax obligations (Art. 6(1)(c)).
Technical data: on every visit our hosting provider processes technical data (IP address, date and time, requested page, browser) in server logs to keep the website secure and working. The contact form temporarily stores an irreversibly hashed version of your IP address (at most 1 hour) to limit abuse and spam. Legal basis: our legitimate interest in a secure website (Art. 6(1)(f)).
We use no analytics, advertising or tracking tools and make no automated decisions or profiling.
3. Who receives your data?
We never sell or rent your data. It is shared only with processors that help us, under a data processing agreement:
• Hostinger (Hostinger International Ltd., Cyprus, EU), website hosting, server logs and sending the contact form;
• Microsoft (Microsoft Ireland Operations Ltd.), Microsoft 365 for our mailbox info@a-mz.be;
• our accountant and public authorities, only where the law requires it.
If you contact us via WhatsApp, WhatsApp (Meta) processes that data under its own terms.
4. Transfers outside the EU
Our suppliers in principle store data in the EU. Some (e.g. Microsoft or Hostinger's content delivery network) may also process data outside the European Economic Area, only with appropriate safeguards such as an adequacy decision (EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.
5. How long do we keep your data?
• Requests that do not lead to a job: at most 12 months after our last contact.
• Customer and invoicing data: for the statutory accounting and tax retention periods (in principle 10 years).
• Hashed IP addresses for spam protection: at most 1 hour.
• Server logs: for the limited period our hosting provider applies for security.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on our legitimate interest. Send your request to info@a-mz.be; we reply within one month. We may ask you to confirm your identity.
7. Complaints
If you are not satisfied, please tell us first. You can also lodge a complaint at any time with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be).
8. Security and changes
The website only works over an encrypted connection (HTTPS) and access to your data is limited to those who need it. We may update this policy; the date at the top shows the latest version.