Privacy policy

Last updated: 2026-10-29

Who is responsible for processing

The controller of your personal data is DRWAL (Kacper Tomasz Mikolajczyk, sole trader (natural person)), registered office Boulevard Industriel 9, 1070 Anderlecht, Belgium, company number 1042.875.407. The business is run by Kacper Tomasz Mikolajczyk.

For any question about your data, write to hello@drwal.be.

In short

  • We do not sell your data. This website uses no advertising, no audience measurement tool and no tracking cookies.
  • If you write to us, we use your contact details and your message to reply.
  • The fonts and the 3D animation library are hosted with the website: your browser does not contact any third-party service to load them.

Data we process

  • Your messages: your email address, your name and the content of your message, when you write to us. When you use the contact form, your name, email, chosen topic and message are sent to us by email through the FormSubmit service. The website itself does not store this information.
  • Your questions to Bendzi: when you write to Bendzi, your question and the current conversation are sent to Anthropic to generate the answer. DRWAL does not record these conversations; they disappear when you close or reload the page. To limit abuse, the server keeps, for at most 24 hours, a question counter tied to a hashed fingerprint of your IP address, never the address itself. Do not type sensitive data into Bendzi.
  • Information you choose to give us in your messages: company, address, phone number, description of a project or a building.
  • Server technical data: IP address, date and time of the visit, page requested, browser type. Our host records these to run and secure the website.

Why we use it, and on which legal basis

  • Answering your request (information, quote, first contact): steps taken at your request before a contract (GDPR article 6.1.b) and, otherwise, our legitimate interest in replying to people who write to us (article 6.1.f).
  • Performing a contract, invoicing and accounting if you become a client: performance of the contract (article 6.1.b) and legal accounting and tax obligations (article 6.1.c).
  • Running and securing the website (host technical logs): our legitimate interest in keeping the website working and secure (article 6.1.f).

We do not use your data for profiling or automated decision-making.

Third-party services and recipients

We do not pass your data on to third parties, except to the following providers, who process it on our behalf or under their own policies:

  • Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Chypre — www.hostinger.com: website hosting and server technical logs.
  • FormSubmit (formsubmit.co): forwards contact form messages to our inbox.
  • Anthropic (anthropic.com, Claude model): generates the answers of Bendzi, the site's chat assistant. Only the questions you type into Bendzi and the current conversation are sent to it, to produce the answer.
  • Our email provider, which hosts the emails we receive.

We do not sell or rent your data.

Transfers outside the European Economic Area

If our host or our email provider is established outside the European Economic Area, or stores data there, those transfers are covered by the mechanisms in Chapter V of the GDPR, for example the EU-US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses.

How long we keep it

  • Your messages: as long as needed to handle your request, then deleted or anonymised, unless a contract or a legal obligation requires us to keep them longer.
  • Client file, contract and invoices: for the duration of the relationship, then the Belgian accounting and tax retention periods (in principle seven years for accounting records) and applicable limitation periods.
  • Host technical logs: the period set by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Chypre — www.hostinger.com, limited to what is needed to run and secure the website.

Your rights

Under the GDPR, you may at any time:

  • access your data and obtain a copy (article 15);
  • have inaccurate or incomplete data corrected (article 16);
  • obtain erasure of your data, in the cases provided by law (article 17);
  • obtain restriction of processing (article 18);
  • receive the data you gave us in a structured, machine-readable format, where processing is based on contract or consent (article 20);
  • object to processing based on our legitimate interest (article 21);
  • withdraw consent where processing relies on it (article 7), without affecting past processing.

To exercise these rights, write to hello@drwal.be. We may ask you to confirm your identity, in a proportionate way. We reply within one month. This can be extended by two further months if the request is complex or numerous; we will tell you within the first month if so.

Complaint to the supervisory authority

If you believe your rights are not respected, you may lodge a complaint with the Belgian Data Protection Authority (APD, in Dutch Gegevensbeschermingsautoriteit, GBA): rue de la Presse 35, 1000 Brussels, autoriteprotectiondonnees.be. You are also welcome to write to us first so we can try to solve the problem.

Security

Only the person running the business accesses personal data, and only as far as the providers above require. No transmission over the Internet is fully secure, so we cannot guarantee absolute security.

Email is not a fully secure channel: please do not send sensitive data by email (health information, passwords, full bank details).

Minors

This website is not aimed specifically at minors. If you believe a minor has sent us personal data, write to us and we will delete it.

Changes

We may update this policy, for example if our providers change or if we add a contact form. The date of the last update is shown on this page.