Legal

Privacy notice

Effective 25 September 2026

Controller

Ulavad Consulting CommV, VAT BE 1026.641.268, Ruggeveldlaan 810 box 202, 2100 Antwerp, Belgium. Send privacy requests through the website contact form.

Data and purpose

When you use the contact form, Ulavad receives your name, email address, optional company, and message. This data is used to answer your enquiry, prepare a quote, take steps requested before a contract, and administer any resulting work.

Private library invitations and accounts

The library owner supplies an invitee's email address to send a one-use invitation and choose whether mature-content access is allowed. If you accept, Google sign-in provides your email address, display name, and account identifier. The private library stores your favourites, account and access records, and any print-request message and contact details you choose to provide. Ulavad uses these details to manage private access, remember your selections, protect the library, and handle requests. If you do not expect an invitation, you may ignore it or use the contact form to request deletion of the invite record.

Legal basis

Ulavad's legitimate interest in managing access to a private library covers invitations, accounts, and necessary security records. Processing contact and print-request details is necessary to respond to your request and, where applicable, to prepare or perform a contract. Optional analytics, including account-linked library activity, use your consent. Limited records may also be retained to meet legal obligations or establish, exercise, or defend legal claims.

Delivery and recipients

Contact-form messages are delivered to Ulavad by email and to a private Telegram chat. Private-library invitations are sent through the hosting provider's mail service; Google provides account sign-in, and print requests are sent to Ulavad through a private Telegram chat. Hosting, email, Google, and Telegram act as service providers under their own applicable terms and privacy safeguards. Please use the form for enquiries and privacy requests.

Security and retention

The form rate limiter stores only a keyed hash derived from the source IP address and timestamps; entries older than one hour are deleted automatically. The private library uses short-lived IP-based rate limits, removed after expiry on later activity. Private-library invitation links expire after 48 hours, and sign-in sessions expire after 12 hours. Enquiry, invitation, account, favourite, and request records are kept while needed to administer access, handle a request or contract, meet accounting duties, or address legal claims; they are then deleted or anonymised. You may request access removal or deletion through the contact form.

Cookies and analytics

With your prior permission, Ulavad uses self-hosted Matomo across ulavad.eu, Print, Slicy, GamutPicker, and the private AssetPicker. It records visits, pages, clicks, outbound links such as LinkedIn, downloads such as the CV, and in AssetPicker model opens, favourites, and print requests. Analytics includes your full IP address and an approximate country, region, and city inferred from it, browser and device details, time, and referring page. Location can be inaccurate. Matomo stores analytics cookies on your device. The owner can review visitor-level activity; if you separately allow account-linked library analytics, model events are associated with your member ID. Analytics is off until you opt in. You can reject it without losing access, and change or withdraw your choice through the Privacy settings button on any site. Consent is remembered across Ulavad subdomains for six months. The private library also uses a necessary sign-in cookie and stores your filter preferences in your browser. External services reached through links may apply their own policies.

Cookie details: ulavad_analytics remembers your choice for six months, including a refusal. If you allow analytics, Matomo may set _pk_id.* to recognise a returning visitor for 90 days, _pk_ref.* to remember the referral source for 90 days, and _pk_ses.* to link actions in a visit for 30 minutes. These are first-party cookies on Ulavad subdomains, with path /. A temporary _pk_testcookie may check browser support. Withdrawing consent stops tracking and deletes Matomo tracking cookies.

Analytics retention

Ulavad keeps identifiable Matomo visit records, including IP addresses and any consented member IDs, for up to 90 days, then deletes them. Aggregated reports may be kept longer. Analytics data is hosted on Ulavad's own web hosting and is not sold or used for advertising.

Your rights

Subject to the GDPR and applicable limits, you may request access, correction, deletion, restriction, portability, or object to processing. You may also lodge a complaint with the Belgian Data Protection Authority. Contact Ulavad through the form above so the request can be handled promptly.