Seemy — Seemy

1. Data controller

The data controller for your personal data is:

MV Studio SRL
Registered office: Chaussée de Ruisbroek 76, 1180 Uccle, Belgium
Legal form: Private limited company (SRL/BV)
CBE number: 0628.815.564
VAT number: BE 0628.815.564
Commercial court: RLE Brussels, French-speaking division
Email: hello@seemy.be
Phone: +32 (0)2 319 44 73

SeeMy is a trademark of MV Studio SRL. No Data Protection Officer (DPO) has been appointed — this is not required given the nature and scale of the processing activities.

2. Dual role of MV Studio SRL

In the course of its activities, MV Studio SRL acts in two capacities:

Capacity	Data	Applicable document
Data controller for its own processing	Data of clients, prospects and visitors to seemy.be	This privacy policy
Processor (Art. 28 GDPR) for client websites	Personal data processed via our clients' websites (forms, accounts, statistics)	Annex 1 of the Terms and conditions

This privacy policy applies solely to processing activities for which MV Studio SRL acts as data controller.

3. Data collected

We collect only the data necessary for the purposes described below. The categories of data processed are:

Via the contact form

First name and last name
Email address
Phone number (optional)
Company name (optional)
Message content

Via the price simulator

Your choices in the simulator (plan, template, options, billing period)
Contact details (first name, last name, email, phone, sector, message)

Via the onboarding form

All fields completed by you (business information, content, logo, domain name)
Uploaded files (logo, images, documents)

Via analytics cookies (with consent)

Anonymised browsing data (pages visited, session duration)
Approximate geographic location (country, region)
Device and browser type

Technical log files (automatic)

IP address, timestamp, browser used (user agent)

We never collect sensitive data within the meaning of Article 9 GDPR (health, political opinions, etc.).

4. Purposes and legal bases

Purpose	Legal basis
Responding to your contact or quote request	Legitimate interest (Art. 6.1.f GDPR)
Client relationship management, project tracking, delivery	Performance of contract (Art. 6.1.b GDPR)
Billing and accounting	Performance of contract + legal obligation (Art. 6.1.b and 6.1.c GDPR)
Website audience measurement	Consent (Art. 6.1.a GDPR)
Technical security logs	Legitimate interest (Art. 6.1.f GDPR)
Form protection (anti-spam)	Legitimate interest (Art. 6.1.f GDPR)

We do not use your data for commercial prospecting without your prior consent. We never sell your data to third parties.

5. Retention periods

Category	Retention period
Contact data without order	12 months from the last contact
Simulations (without quote)	6 months
Quotes and pre-contractual documents	12 months
Contracts and annexes	10 years after expiry
Invoices	10 years (accounting obligation)
Security logs	12 months
Backups	90 days maximum

After these periods have elapsed, your data is permanently deleted or anonymised.

6. Recipients

Sub-processor	Role	Location
Amazon Web Services EMEA SARL	Hosting and backups	European Union
Email service provider (Mailjet)	Sending transactional emails	Mailjet
Accounting software	Billing and accounting	Belgium

All sub-processors are bound by a data processing agreement compliant with the GDPR. Your data is never sold to third parties for commercial purposes.

7. Transfers outside the European Union

Some service providers (particularly Google for analytics cookies) are based in the United States. These transfers are based on the EU–US Data Privacy Framework (adequacy decision of 10 July 2023) for certified providers, or on the European Commission's standard contractual clauses (SCCs).

Data hosted by AWS is stored exclusively in EU datacentres (eu-west region). No transfer outside the EU takes place for this data.

8. Security

MV Studio SRL implements appropriate technical and organisational measures to protect your data:

Encrypted connections (HTTPS / TLS 1.2+) across the entire website
Access to data restricted to authorised persons, bound by a confidentiality obligation
Daily encrypted backups
Regular security updates to the infrastructure

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we undertake to notify you within 48 hours of becoming aware of it, and to notify the Data Protection Authority within 72 hours.

9. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access — obtain a copy of the data we hold about you
Right to rectification — have inaccurate or incomplete data corrected
Right to erasure — request deletion of your data (within legal limits)
Right to restriction — temporarily restrict the processing of your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to certain processing based on our legitimate interest
Right to withdraw consent — withdraw your consent at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at hello@seemy.be specifying your request. We will respond within one month (extendable to three months for complex requests).

10. Complaints

If you believe your rights are not being respected, you may lodge a complaint with the Belgian supervisory authority:

Belgian Data Protection Authority (DPA)
Rue de la Presse 35 — 1000 Brussels
gegevensbeschermingsautoriteit.be

11. Changes

This privacy policy is updated whenever our processing activities change. The date of the last update is shown at the top of the page. In the event of significant changes, we will notify you via the website or by email if you are an active client.

12. Contact

For any question about this policy or to exercise your rights:

MV Studio SRL
Chaussée de Ruisbroek 76 — 1180 Uccle, Belgium
CBE / VAT: BE 0628.815.564
Email: hello@seemy.be
Phone: +32 (0)2 319 44 73