Last updated: 04/11/20251. Data Controller
BV The Flow Group Nieuwlandlaan 131, 3200 Aarschot, Flemish Brabant, Belgium
Company number (KBO): 1005.257.025
VAT number: BE 1005.257.025
Website:
https://theflowgroup.eu Email:
info@theflowgroup.eu The Flow Group (hereinafter “we”) respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR) and Belgian data protection law.
2. What personal data do we process?
- Identification and contact details you provide yourself (name, email, phone number, company name) through forms, emails or phone calls.
- Website usage data (IP address, device information, pages visited, cookie IDs) collected via cookies and similar technologies.
We do not request or process any special categories of personal data.
3. Purposes and legal bases
| Purpose | Examples | Legal basis |
|---|
| Responding to contact requests and quotations | contact form, email communication | Contractual necessity or legitimate interest |
| Website security and basic functionality | page loading, language preference, cookie settings | Legitimate interest and/or necessary for the performance of a service |
| Statistics & performance | anonymous or aggregated analysis of traffic and usage | Consent (via CookieFirst) |
| Marketing & advertising measurement | conversion tracking, advertising experiments | Consent (via CookieFirst) |
| Legal obligations | fiscal/accounting retention requirements | Legal obligation |
You can give, change, or withdraw your consent for non-essential cookies at any time through the cookie settings (the CookieFirst banner or icon on the website).
4. Cookies
We use CookieFirst to manage consent. Below we explain the categories and list the cookies currently used on our website.
4.1 Categories
- Necessary cookies Required for basic functions such as security, language preferences, and remembering your cookie choices. These cannot be disabled through the tool.
- Functional cookies Improve the user experience, for example by remembering interface preferences or page builder state.
- Performance/analytical cookies Help us understand how visitors use the site (e.g., which pages are most visited). We use this information to improve our website.
- Advertising/marketing cookies Measure campaigns and support advertising features such as conversion tracking and testing.
4.2 Cookies in use (overview)
| Name | Category | Purpose | Lifetime | Provider | Domain |
|---|
| cookiefirst-consent | Necessary | Stores your cookie preferences | 12 months (cookie) / persistent (local storage) | CookieFirst | theflowgroup.eu |
| cookiefirst-id | Necessary | Unique ID to recognize visitors/preferences | Persistent (local storage) | CookieFirst | theflowgroup.eu |
| pll_language | Necessary | Saves your chosen website language | ± 12 months | Polylang | theflowgroup.eu |
| elementor | Functional | Supports the WordPress Page Builder | Persistent (local storage) | WordPress | theflowgroup.eu |
| _ga | Performance | Unique ID for statistics (Google Analytics) | ± 13 months | Google LLC | .theflowgroup.eu |
| ga****** | Performance | Tracks sessions/usage for statistics (GA4) | ± 13 months | Google LLC | .theflowgroup.eu |
| _gcl_au | Advertising | Google AdSense/Ads experiments and measurement | ± 3 months | Google LLC | .theflowgroup.eu |
| _gcl_ls | Advertising | Conversion tracking via Google Ads/Tag Manager | Persistent (local storage) | Google LLC | theflowgroup.eu |
International data transfer: some cookies are managed by Google LLC (USA). Google is certified under the EU–US Data Privacy Framework, ensuring adequate protection of your personal data. You can manage your settings through CookieFirst and allow or deny the placement of performance and marketing cookies.
5. Retention periods
- Contact and customer data: retained as long as necessary for the intended purpose and relationship; for accounting, according to legal retention periods (usually 7 or 10 years).
- Marketing/newsletter subscriptions: until you unsubscribe or withdraw your consent.
- Cookie/log data: according to the durations listed above, or as short as necessary for security and functionality.
6. Recipients and (sub)processors
We do not share your data with third parties, except:
- with our service providers/processors (e.g., hosting, IT support, CookieFirst, analytics and advertising partners) who process your data solely on our behalf and are contractually bound to confidentiality and security;
- when required by law or necessary to protect our rights.
If data is processed outside the EEA, we ensure adequate safeguards (e.g., Data Privacy Framework certification or Standard Contractual Clauses).
7. Security
We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, and disclosure (including access control, encryption where appropriate, logging, least-privilege principles, and backup/update policies).
8. Your rights
You have the following rights:
- Right of access to your personal data;
- Right to rectification of inaccurate or incomplete data;
- Right to erasure (“right to be forgotten”) within the limits of the law;
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing based on legitimate interest;
- Right to withdraw consent (without affecting the lawfulness of processing prior to withdrawal).
You can exercise your rights by sending an email to
info@theflowgroup.eu. We may request proof of identity to prevent misuse. We will respond to your request free of charge within one month (extendable under GDPR for complex or multiple requests).
9. Manage or withdraw your consent
Click on “Cookie settings” in the CookieFirst banner or icon visible on the site to change or withdraw your consent. You can also manage cookies through your browser settings. Note: blocking certain cookies may affect the site’s functionality.
10. Complaints
If you are not satisfied with how we handle your data, please contact us via
info@theflowgroup.eu. You also have the right to lodge a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels –
www.dataprotectionauthority.be –
contact@apd-gba.be.
11. Changes to this statement
We may update this privacy statement. The latest version is always available on this page. In case of significant changes, we will inform you via the website and/or, where appropriate, by email.
12. Contact
Questions about this statement or about your personal data?
BV The Flow Group – Nieuwlandlaan 131, 3200 Aarschot, Belgium
Email:
info@theflowgroup.eu Website:
https://theflowgroup.eu