Privacy policy.

Operanex SRL, Rue de Bordeaux 38, 1060 Brussels, Belgium, company number BE0817156506 (“Operanex”, “we”).

For any question about your data: info@operanex.com.

Controller: for the data of our own clients and prospects (contact details, contracts, invoices, support requests).

Processor: for the data that your website or application processes on behalf of your business (for example, your visitors’ form submissions). You remain the controller of that data and we only process it on your instructions, under a data processing agreement in line with Article 28 GDPR.

Each client is hosted in its own dedicated AWS account. Resources, storage and access rights are not shared between clients.

Access by our team is limited to what is needed to run the service, protected by multi-factor authentication and logged.

Contact and identification data: name, company, email address, phone number, VAT number, billing address.

Contract and billing data: subscribed services, invoices, payments. Card details are handled by our payment provider and never stored by us.

Support data: the content of your tickets and messages.

Technical data: server and security logs (IP address, date, requested page), kept for a limited period for security and troubleshooting.

To provide and bill the hosting service (performance of the contract).

To meet our accounting and tax obligations (legal obligation).

To secure our infrastructure and prevent abuse (legitimate interest).

To answer your questions and send you a quote (pre-contractual steps).

We never sell, rent or trade your data or your visitors’ data.

We do not use your data for advertising or profiling.

This website uses no advertising or tracking cookies.

Websites and their data are hosted in the European Union (AWS, Frankfurt region).

We work with a small number of subprocessors: Amazon Web Services (hosting), Stripe (payments), Odoo (accounting and invoicing) and, only if you subscribe to email, Purelymail (mailboxes). Where a provider is located outside the EU, the transfer is covered by the European Commission’s standard contractual clauses or an adequacy decision.

Account and contract data: for the duration of the contract.

Invoices and accounting records: 10 years, as required by Belgian law.

Hosted content: until the end of the contract and the retention period described in our terms, then deleted.

Encryption in transit (HTTPS/TLS) and at rest, isolated accounts per client, least-privilege access, short-lived deployment credentials, security updates and continuous monitoring.

You can ask to access, correct, delete or export your data, to restrict or object to its processing, by writing to info@operanex.com. We answer within one month.

You can also file a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).