Privacy Policy
Last updated October 16, 2026
This policy explains how semanu processes personal data when you use our website or contact us. The General Data Protection Regulation (GDPR) and the Belgian data protection legislation apply.
1. Controller
SEMANU BV (semanu), Kattendijkdok-Oostkaai 9, 2000 Antwerpen, Belgium. Company number 0828.291.116. Email: hello@semanu.eu. Phone: +32 496 04 56 06.
2. What data we process
Form data. Through the contact form we collect your name, email, company (optional), phone (optional), your message, the service you are interested in, your language, the page from which you sent the form, the campaign source (for example a click on a Google ad) and your consent. These data are sent to semanu's own customer management system (CRM) so that we can follow up on your enquiry.
Data collected automatically. Server and security logs (IP address, browser, timestamps, pages requested) at our hosting provider, for delivery, stability and abuse prevention.
Spam protection. A honeypot field and Cloudflare Turnstile protect our forms against spam and automated abuse. Turnstile checks technical signals from your browser (for example IP address and browser characteristics) to tell people apart from bots.
Cookies and analytics. A cookie stores your consent. Google Analytics 4 uses Google Consent Mode: without your consent no analytics cookies are set and only anonymous aggregated signals are processed without cookies. Only after your consent through the cookie banner are analytics cookies set and full measurement data collected. With the same consent we enable Google Ads for conversion measurement. Without your consent no advertising cookies are set.
3. Purposes and legal bases
- Answer enquiries, follow them up in our CRM and take pre-contract steps: contract or pre-contract measure (GDPR Art. 6(1)(b)).
- Provide, manage and bill our services: contract (Art. 6(1)(b)).
- Security, spam prevention and stable operation: legitimate interest (Art. 6(1)(f)).
- Analytics with Google Analytics 4: consent (Art. 6(1)(a)).
- Conversion measurement with Google Ads: consent (Art. 6(1)(a)).
- Bookkeeping and statutory retention: legal obligation (Art. 6(1)(c)).
4. Processors and third parties
We work with carefully selected providers. Where possible we choose a region within the European Union and we have a data processing agreement in place.
- Hetzner Online GmbH (Germany): hosting of the website on servers in the EU (Falkenstein, Nuremberg or Helsinki).
- Supabase: database of our customer management system, in which contact form submissions are stored (EU region).
- Cloudflare Turnstile: spam protection for our forms.
- Google Analytics 4: website analytics, only with consent.
- Google Ads: conversion measurement and advertising, only with consent.
We do not sell personal data.
5. International transfers
Google Analytics and Google Ads may transfer data to Google and Cloudflare Turnstile to Cloudflare, including to the USA. Such transfers are covered by appropriate safeguards (Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework).
6. Retention
- Enquiries: generally up to 24 months after the last contact, unless a contract follows.
- Contract and accounting records: the statutory period (in Belgium 10 years for accounting documents).
- Server and security logs: around 90 days.
- Analytics data: per the Google Analytics 4 setting (around 14 months).
7. Your rights
You have the right to access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time. To exercise these, contact hello@semanu.eu. You may also lodge a complaint with a supervisory authority, in Belgium the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels.
8. Cookies
We use necessary items (storing your consent, security) that need no consent, as well as analytics cookies (Google Analytics 4) and advertising cookies (Google Ads) that are set only with your consent. Through the banner you can accept all or keep only the necessary ones. You can change your choice at any time.
9. Security
We protect personal data with TLS (HTTPS), hosting on servers in the EU with a firewall, access controls and regular security updates.
10. Changes
We may adapt this policy. The current version is always available on this page with the date of the last update.