Privacy and cookie information

Controller

Infium BV is responsible for the company website and contact enquiries.

Registered office: Sint-Jorisstraat 11, 2450 Meerhout, Belgium. Enterprise number 0783.541.551. VAT number BE 0783.541.551.

Contact form

The form asks for your name, work email address, optional company, and project or problem summary. Infium uses that information to respond to your enquiry.

The form submits to a same-origin PHP endpoint on Infium's Combell hosting and delivers through Infium's Google Workspace SMTP relay to contact@infium.be. Infium does not use an external form provider or enquiry database. Combell hosts the endpoint; Google Workspace transports and receives the email.

The lawful basis is GDPR Article 6(1)(b) for responding to your requested pre-contract enquiry. Proportionate endpoint security and abuse controls use Article 6(1)(f).

Spam is deleted immediately. Pseudonymized throttle and duplicate-protection keys are kept only for their implemented short windows, delivery-result metadata for no more than 7 days, non-converting enquiry correspondence for 6 months after the last meaningful contact, and active commercial discussions for no more than 24 months after the last contact unless a separate documented legal or accounting record applies.

Form data is never used for marketing or analytics.

The self-hosted CAPTCHA uses a first-party cookie, infium_contact_captcha, lasting 10 minutes to verify your answer. It contains a random challenge identifier, expiry-related timestamp and signature, without your enquiry details. Challenge attempts and replay protection expire after 10 minutes and are removed by regular cleanup. No external CAPTCHA service receives data.

Analytics and cookies

Google Analytics is optional and strictly opt-in on infium.be. The configured GA4 measurement ID is G-XHQ3FERF9X. Google Ireland Limited provides Google Analytics and processes analytics data for Infium under Google's data-processing terms. The separate portfolio site remains analytics-free.

Before you accept, Infium does not load the Google tag, contact Google, place analytics cookies, or send consent or cookieless analytics pings. After acceptance, Infium sends only a sanitized page view for one of the four approved English or Dutch company routes and a contact_intent event when you choose a marked contact@infium.be email link. That event contains only the controlled language, placement, and email-method values. Form interaction, validation, delivery results, and submitted values are never sent to analytics.

Google Analytics also creates unavoidable post-consent lifecycle and technical data needed for its service, such as session_start, first_visit and user_engagement events and browser, device, approximate location, network and cookie identifiers. Infium has disabled Enhanced Measurement, advertising features, Google Signals, user-provided data and Ads personalization. The _ga and stream-specific _ga_* cookies have a maximum lifetime of 180 days and are not refreshed on each page load. GA4 user and event retention is set to 2 months, and reset on new activity is disabled.

You can accept or reject in the privacy choices panel and later change or withdraw your choice through Cookie settings. Global Privacy Control or Do Not Track keeps analytics off. Withdrawal stops future collection, removes accessible GA cookies and prevents Google resources after reload; it does not erase data already transmitted to Google.

Google and approved subprocessors may process analytics data outside the European Economic Area. Google states that it uses applicable transfer safeguards, including adequacy decisions and standard contractual clauses where required. You may exercise the rights described below, including asking Infium to handle an applicable analytics deletion request, through contact@infium.be.

Hosting and security logs

Combell may generate technical request and security metadata needed to deliver the site, keep it available, prevent abuse, and troubleshoot incidents. Infium treats IP addresses and similar online identifiers as personal data where present.

Configurable raw hosting logs are currently retained for 3 days and AWStats is disabled. The logs are not used for audience analytics.

Your rights

You can ask to access, correct, erase, restrict, or receive a copy of your personal data, or object where processing relies on legitimate interests. Some rights depend on the legal basis and context.

Use the Infium email route on this page for privacy questions and data-subject requests. You also have the right to complain to the Belgian Data Protection Authority.

Current data flows