Privacy Policy

Last updated: January 4, 2026

1. Privacy Policy

B-OPS BV ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website b-ops.be (the "Website"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Website.

2. Data Controller

B-OPS BV
VAT ID: BE1005531395
Email: info@b-ops.be
Phone: +32 2 393 02 68
Rue de Pavie 21, 1000 Brussels, Belgium

3. Information We Collect

3.1 Automatically Collected Information

When you visit our Website, we may automatically collect certain information about your device, primarily through cookies and similar tracking technologies (see Section 6 for more details). This information includes:

  • IP address
  • Browser type and version
  • Operating system
  • Pages you visit on our Website
  • Time and date of your visit
  • Referring website addresses
3.2 Information You Provide

We may collect information that you voluntarily provide to us, including:

  • Name and contact information (email address, phone number) when you contact us
  • Information provided in contact forms or inquiry forms
  • Any other information you choose to provide

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our Website
  • To respond to your inquiries, comments, or questions
  • To send you marketing communications (only with your consent)
  • To analyze and monitor Website usage and trends
  • To detect, prevent, and address technical issues
  • To comply with legal obligations

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR) and the ePrivacy Directive, we process your personal data based on the following legal grounds:

  • Consent: For Google Analytics and other non-essential cookies (you can withdraw consent at any time via our cookie banner). For marketing communications (you can withdraw consent at any time)
  • Legitimate interests: For website security, server logs, and technical maintenance necessary for the operation of our Website
  • Contract: To fulfill our obligations when you engage our services
  • Legal obligation: To comply with applicable laws and regulations

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Website. We use Google Analytics to analyze website traffic.

Important: Non-essential cookies (including Google Analytics) will only be set after you have provided your consent via our cookie banner. You can accept or decline these cookies when you first visit our Website.

If you have previously accepted cookies but wish to opt-out of Google Analytics, you can:

For detailed information about our use of cookies, please refer to our Cookie Policy.

7. Third-Party Services

We may share your information with third-party service providers who perform services on our behalf, including:

  • Google Analytics (Google LLC) for website analytics (data is anonymized with IP anonymization enabled)
  • Web3Forms for processing contact form submissions. Web3Forms acts as a data processor on our behalf, transmitting your form submissions securely to our designated email address via HTTPS encryption. Web3Forms does not store your data beyond the time necessary to process the submission. Web3Forms may process your data outside the European Economic Area (EEA), including in the United States. We rely on Web3Forms' compliance with applicable data protection laws and their use of Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the European Commission to ensure adequate protection of your data. For more information, please refer to Web3Forms' Privacy Policy.
  • Email service providers for communication purposes

These third parties are contractually obligated to protect your information and use it only for the purposes we specify. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place as described in Section 11.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Website analytics data: 26 months (Google Analytics default retention period, as configured in our GA settings)
  • Contact inquiries (including data submitted via our Web3Forms contact form): 3 years from last contact
  • Cookie consent preferences: 1 year

9. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

  • Right to access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data under certain circumstances
  • Right to restrict processing: Request limitation of how we process your data
  • Right to data portability: Request transfer of your data to another service provider
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent for marketing communications at any time

To exercise these rights, please contact us at info@b-ops.be.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

11. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. Specifically:

  • Google Analytics (Google LLC) is based in the United States
  • Web3Forms processes contact form data and may transfer data outside the EEA, including to the United States

When we transfer your personal data outside the EEA, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements. These safeguards include:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission (where applicable)
  • Other equivalent legal mechanisms as recognized by applicable data protection laws

These safeguards ensure that your personal data receives an adequate level of protection and that your rights are enforceable and effective legal remedies are available.

12. Children's Privacy

Our Website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically.

14. Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to file a complaint with the Belgian Data Protection Authority:

Belgian Data Protection Authority (Autorité de protection des données)
Rue de la Presse 35, 1000 Brussels, Belgium
Website: www.gegevensbeschermingsautoriteit.be
E-mail: contact@apd-gba.be

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

B-OPS BV
Email: info@b-ops.be
Phone: +32 2 393 02 68
Website: b-ops.be

Our Mission

We help organisations understand how attackers really move through their environment and what that means for their security. Our work is grounded in real techniques, clear communication and a focus on improvements that actually matter, not checkbox exercises.

Info & Legal
Language
FROM THE BLOG