How we handle your information

Success Catalyst VOF is the controller for everything described on this page. The people who handle your information are the two of us — André Stellmacher and Els van der Velden. Nobody else has an account on our systems.

Any question about your data can go to the address below. There is no form to fill in and no reference number to quote.

Success Catalyst

Success Catalyst VOF
Stationsstraat 389
1770 Liedekerke

Company no.

BE 1019.420.312

Email

info@successcatalyst.solutions

Belgium

+32 488 26 70 90

Netherlands

+31 6 42 72 14 59

The contact form gives us your name, your email address, the subject and the message — and your phone number and company if you fill those in.

A little technical information is stored with it: the IP address the message came from, your browser’s user-agent, the page you sent it from, the language the site was in, and the result of our spam check, which includes how quickly the form was completed. A form filled in under a second is a robot, not a person.

We do this to answer you — which is what you asked us to do — and to keep the form usable, which is our own legitimate interest. The technical part is stripped after 90 days; the message itself stays as correspondence.

Booking a first conversation stores your name, your email address, the time you chose, the timezone your browser was in, and anything you write in the notes field.

The appointment also goes into our Google calendar, with your name and the time, because that is the diary we work from. Cancelling or moving it from the link in your confirmation email changes it there too.

We do this to prepare and hold the appointment you asked for.

A client file holds what the work needs: the agreement, the sessions and steps, our own notes, the answers you give in an intake questionnaire, and the documents you send us.

An intake questionnaire opens from a private link in your email. That link is the key to it — anyone holding it can open and fill in that questionnaire, so treat it like a password and do not forward it.

When we work with a team, what the employer hears is the progress being made, not the content of individual conversations.

The basis for this is our agreement, and for invoices and the accounts, the law.

The contact form has a tick-box for occasional updates by email. If you tick it, we record that you agreed and when. We are not sending anything yet. You can withdraw it at any time by writing to us.

This site sets two cookies, both functional: one keeps your session, one stops a form being submitted from somewhere else. There is no analytics, no advertising and no tracking of any kind — which is why there is no cookie banner to click away. Your language choice is in the address bar, not in a cookie.

We use a small number of suppliers, each bound to use your data only for the job we give them:

• Hetzner (Germany) — the server this site runs on.
• Supabase (Ireland) — the database behind it.
• Brevo (France) — sends our email; a delivered message sits in their logs for a while.
• Google (Ireland) — our calendar. It holds your name and the time of your appointment. Google may process data outside the EU, under the European Commission’s standard contractual clauses and its adequacy decision for the EU–US Data Privacy Framework.
• Our accountant, and the tax authorities where the law requires it, for invoices.

We do not sell anything to anybody, and we do not use your information to profile you or to advertise to you.

• A message through the contact form: kept as correspondence. The technical data attached to it is stripped after 90 days.
• A message our spam check rejected: 30 days, then deleted entirely.
• A contact we delete by hand: 90 days in a recoverable state, then erased for good.
• A client file — agreement, projects, questionnaire answers, documents: seven years after the work ends, which is the period Belgian bookkeeping law sets for the commercial record. Notes and questionnaire answers can go sooner if you ask.

An erasure request is not held to any of this. When you ask, we remove your data — from the database and from the calendar — rather than wait for a period to run out.

The site and the database are on servers in the European Union, reached only over encrypted connections. Documents are stored outside the public web root and are served only to us, signed in. Only the two of us have accounts; customers have none at all, which is why your appointment link and your questionnaire link are long random tokens rather than a password you would have to remember.

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete it;
• stop using it for a while, or object to a particular use;
• hand it over in a form another system can read;
• withdraw a consent you gave — which does not undo what was done while it stood.

Write to us and say what you want. We answer within a month. A copy comes as a structured file another system can read; an erasure removes the data rather than hiding it. We will not ask you to prove who you are beyond what it takes to be sure we are not handing your data to somebody else.

Tell us first — we would rather fix it than have you go elsewhere with it. You can also complain to the supervisory authority:

• Belgium: Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels — contact@apd-gba.be, +32 2 274 48 00.
• Netherlands: Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ The Hague — 070 888 85 00.

If what we do changes, this page changes with it and the date at the top changes too. What is written here is what we do.