Privacy statement

How we handle your data

Version 1.1 — 7 July 2026 · Applies to hiddenconnections.eu and all pages on it

In one sentence: we collect as little as possible. No tracking, no advertising cookies, no reselling of data — only cookieless, anonymised visitor statistics and what's strictly necessary to talk to you and schedule a meeting.

1. Who is responsible for your data?

F.M.O. BV, trading as Hidden Connections
Registered office: Puurs-Sint-Amands, Belgium
Company number (KBO/BCE): 1025.374.132 · VAT: BE 1025.374.132
Email: [email protected]

F.M.O. BV is the "data controller" within the meaning of the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). For any questions about this statement or about your data, you can reach us at the email address above.

2. What data do we process, why, and for how long?

What	Purpose	Legal basis (GDPR art. 6)	Retention period
Email correspondence (name, email address, content of your message)	Answering your question, starting a conversation	Pre-contractual measures (art. 6.1.b) or legitimate interest (art. 6.1.f)	Maximum 3 years after last contact; for an existing client relationship, as long as legally required (accounting: 7 years)
Appointment data via Calendly (name, email address, chosen time slot, any remarks)	Scheduling an introductory call	Pre-contractual measures (art. 6.1.b)	Maximum 1 year after the appointment
Visitor statistics via Cloudflare Web Analytics (pages viewed, referring site, browser type, country — no cookies, no fingerprinting, not traceable to individuals)	Understanding which content is read and improving the site	Legitimate interest (Art. 6(1)(f))	Stored in aggregate by Cloudflare; no individual visitor profiles
Technical log data (IP address, browser type, requested page)	Security, abuse prevention, and proper functioning of the site	Legitimate interest (art. 6.1.f)	Short-term, per the standard log policy of our hosting partner Cloudflare

The Organizational Brain Scan

The answers you enter in our Brain Scan are processed exclusively in your own browser. They are never sent to our servers or to third parties, never stored, and never linked to your identity. Close the window, and they're gone.

3. Cookies and local storage

We use no analytics cookies, no marketing cookies, and no advertiser cookies. Our visitor statistics (Cloudflare Web Analytics) work entirely without cookies or local storage — which is also why no cookie banner is needed. The complete list of what we do keep on your device:

Name	Type	Purpose	Duration
`hc_anim_seen`	Functional cookie	Remembers that you've already seen the intro animation, so it doesn't replay on every visit	5 days
`hc_lang`	Local storage (localStorage)	Remembers your language choice (NL/EN); never leaves your browser	Until you clear your browser data

Purely functional cookies like these don't require prior consent. That's why you won't see a cookie banner on this site — there's nothing to decline that touches your privacy. If you book a call via the embedded Calendly widget, Calendly may set its own functional cookies; that widget only loads once you click to open it yourself.

4. Who do we share data with?

We never sell or rent out data. We work with a limited number of service providers ("processors") needed to keep the site and our services running:

Cloudflare, Inc. (US/EU) — hosting and security for this website. Transfers outside the EEA are covered by the EU-US Data Privacy Framework and standard contractual clauses.
Calendly LLC (US) — scheduling appointments, only when you choose to use it. Also covered by the EU-US Data Privacy Framework. See also Calendly's privacy statement.
Google Fonts / cdnjs (Cloudflare) — when loading fonts and scripts, the CDN provider involved technically sees your IP address. We don't place any cookies or build any profiles through this.

Data may also be shared where a legal obligation compels us to do so.

5. Your rights

Under the GDPR you have the right to:

Access — know what data we hold about you (art. 15);
Rectification — have inaccurate data corrected (art. 16);
Erasure — have your data deleted ("the right to be forgotten", art. 17);
Restriction of processing (art. 18);
Portability — receive your data in a common format (art. 20);
Objection to processing based on legitimate interest (art. 21).

To exercise any of these, email [email protected]. We respond within one month. To prevent misuse, we may ask you to reasonably confirm your identity.

If you're not satisfied with how we handle your data or your request, you can file a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be.

6. What we don't do

No automated decision-making or profiling within the meaning of art. 22 GDPR;
No processing of special categories of data (health, beliefs, etc.);
No services or marketing targeted at minors;
No reselling, renting, or trading of personal data — to anyone, ever.

7. Security

All traffic to this website is encrypted (TLS/HTTPS). We apply data minimization: what we don't collect can't leak. Access to correspondence and appointment data is limited to the two partners of F.M.O. BV.

8. Changes

When how we operate changes, we'll update this statement before the change takes effect, with a new version date at the top. We'll clearly announce any substantial changes on the website.