Legal information

Privacy & cookie policy

Last updated:

Cubix Advertising takes the protection of your personal data seriously. This policy explains, in accordance with Regulation (EU) 2016/679 ("GDPR") and the Belgian law of 30 July 2018, which data we process when you visit the Site, contact us or work with us, and what your rights are.

Data controller

  • Cubix Advertising — Dylan Rampelberg, sole proprietorship (natural person)
  • Rond-point Robert Schuman 6, 1040 Brussels, Belgium
  • Company number 1001.070.385
  • Email: contact@cubix-advertising.com — Phone: +32 493 93 27 37

No data protection officer (DPO) has been appointed, as this is not mandatory given the size and nature of our activities. Any request about your data is handled directly by the controller at the address above.

Which data we process

  • Contact through the Site: the contact form stores nothing on our servers. It composes a message (name, business, sector, requested services, free text) that you then choose to send yourself via WhatsApp or your email client. The data only reaches us if you send that message.
  • Direct exchanges: when you write to us by email, WhatsApp, phone or through our social networks, we process your contact details and the content of your messages.
  • Contractual relationship: for our clients, we process the data needed for quotes, contracts, invoicing and delivery of services (identity, contact details, company number, billing data, technical access entrusted to us, content provided).
  • Technical data: our host Cloudflare automatically processes connection data (IP address, browser, pages visited, timestamp) for security, attack mitigation and network operation.
  • Shoots and content: as part of our services we may capture the image and voice of people (clients, employees, extras) on the basis of their written consent or a contract.
  • We do not collect sensitive data (health, opinions, origin, etc.) and the Site is not intended for children under 16.

Why, and on which legal basis

  • Answering your requests and preparing a quote: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
  • Delivering our services, managing the client relationship and invoicing: performance of the contract (Art. 6(1)(b)) and legal obligations, in particular accounting and tax (Art. 6(1)(c)).
  • Securing the Site and our systems, preventing fraud: legitimate interest (Art. 6(1)(f)).
  • Informing you about our services (existing clients and professional contacts): legitimate interest (Art. 6(1)(f)), with the right to object at any time.
  • Meta pixel, Google Maps, sending a newsletter, using your image in our portfolio: your consent (Art. 6(1)(a)), which you may withdraw at any time.

Who we share your data with

Your data is never sold. It may be processed by service providers (processors) acting on our instructions and bound by contractual safeguards:

  • Cloudflare, Inc. (USA): Site hosting, content delivery network, security.
  • Google Ireland Ltd (Ireland) / Google LLC (USA): Google Workspace business email, Google Maps embedded on the Site, Google Business Profile.
  • Meta Platforms Ireland Ltd (Ireland): WhatsApp Business, Instagram and Facebook when you contact or interact with us through these services; Meta pixel on the Site if you accept it.
  • TikTok Technology Ltd (Ireland): when you interact with our TikTok account.
  • Metricool (Spain): scheduling and analytics of social posts on behalf of our clients.
  • Hetzner Online GmbH (Germany): hosting of our internal automation tools (n8n).
  • Invoicing providers, accountant, bank: for administration and legal obligations.
  • Artificial-intelligence tools: we may use AI assistants to draft, translate or organise our work. We do not submit sensitive data to them and only enter your identifying data when necessary for the service.
  • Public authorities: where the law requires it.

Some of these providers are established outside the European Union (notably in the United States). In that case the transfer relies on an adequacy decision (EU-US Data Privacy Framework for certified companies such as Cloudflare and Google) or on the European Commission’s standard contractual clauses.

How long we keep your data

  • Enquiries that do not lead to a contract: 12 months after the last exchange.
  • Clients: for the duration of the relationship, then 10 years for accounting and tax documents (legal obligation) and 5 years for other contractual documents (limitation period).
  • Host technical logs: a few days to a few weeks, depending on Cloudflare’s security settings.
  • Produced content (photos, videos, footage): duration of the contract and professional archiving, unless removal is requested.
  • Cookie preferences: 6 months.

Your rights

You have the following rights over your data: access, rectification, erasure, restriction of processing, objection (in particular to marketing), portability, and withdrawal of your consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, write to contact@cubix-advertising.com describing your request; proof of identity may be requested in case of reasonable doubt. We reply within one month, extendable by two months for complex requests.

If you believe your rights are not respected, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — www.dataprotectionauthority.be.

Security

We implement appropriate technical and organisational measures: HTTPS encryption of the whole Site, Cloudflare network protection, strong authentication on our tools, access limited to those who need it, and team awareness. No transmission over the Internet is entirely secure, however; in the event of a data breach likely to result in a high risk to you, we will inform you as required by law.

Cookies and trackers

A cookie is a small file placed on your device when you visit a website. Under Article 5(3) of Directive 2002/58/EC, the Belgian law of 13 June 2005 on electronic communications and the guidance of the Belgian Data Protection Authority, only strictly necessary cookies may be placed without your agreement; all others require your prior, free and informed consent.

On your first visit a banner lets you accept, refuse or configure each category with equal ease. Nothing is enabled until you make a choice. Your choice is kept for 6 months in your browser (local storage, never transmitted) and can be changed at any time through the "Manage cookies" link in the footer. These are the cookies and trackers used:

  • Strictly necessary (Cloudflare — __cf_bm, cf_clearance, __cfruid): distinguish human visitors from bots, protect the Site against attacks and balance load. Lifetime: session to about 30 minutes. Exempt from consent.
  • Preferences (Site — cubix-consent): remember your cookie choices. Lifetime: 6 months. Exempt from consent.
  • Statistics: no audience-measurement tool is active at the moment. If we enable one, it only loads with your agreement.
  • Marketing — Meta pixel (Meta Platforms Ireland Ltd): loaded only if you accept the "Marketing" category. It lets us measure the effectiveness of our Facebook and Instagram ads and show relevant ads to visitors of the Site (retargeting). Cookies set: _fbp (90 days) and, if you are logged in to Facebook, _fbc and Meta’s cookies. Data (pages viewed, browser identifier, IP address) is sent to Meta, which processes it as joint controller under its policy (www.facebook.com/privacy/policy). You can also manage these ads from your Facebook and Instagram settings.
  • External content — Google Maps: the maps embedded on the Services and Contact pages are provided by Google, which may set its own cookies (e.g. NID, CONSENT) and collect your IP address under its own policy (policies.google.com/privacy). They only load with your agreement or when you click "Show the map".
  • Social networks and YouTube: the Site contains no embedded buttons or players from these platforms, only links. No cookie is set by these services until you click.

If we add a new service that places non-essential cookies (audience measurement, newsletter, chat assistant), this policy is updated and the banner asks for your agreement again.

You can delete or block cookies at any time through your browser settings (Chrome, Safari, Firefox, Edge). Blocking strictly necessary cookies may affect how the Site works.

Changes

We may adapt this policy to reflect changes in our services or in regulation. The applicable version is the one published on the Site with its update date. In the event of a substantial change, we will inform our clients by email.

Contact

For any question about your personal data: contact@cubix-advertising.com — Rond-point Robert Schuman 6, 1040 Brussels, Belgium.