Privacy policy

OPPY is the trade name of NOFI OS VOF, enterprise number BE1012948135, with its registered office at Halensebaan 119a, 3390 Tielt-Winge, Belgium. NOFI OS VOF is the controller of the personal data processed through oppy.group.

If you have any question about your data, email us at hello@oppy.group.

This policy covers the website oppy.group. The client portal at portal.oppy.group is a separate application with its own terms and is not covered here.

This site has no accounts, no forms and no newsletter. So we only process the following data:

• Technical data that every visitor's browser sends, such as your IP address, browser, operating system and the page you request. We need it to show the site and keep it secure.
• Your cookie choice and, if you pick a language other than your browser's, your language preference. Our cookie policy has the details.
• The details you enter when you book a call through Calendly (see below).
• Usage statistics through Google Analytics, only if you consent to it (see below).
• The contents of your email, if you write to us: your name, your email address and your message.

We only use your data for the purpose you give it to us for, in line with the General Data Protection Regulation (GDPR):

• Showing the site, keeping it secure and remembering your cookie and language choices. Legal basis: our legitimate interest in running a working, secure website.
• Preparing and holding the call you booked through Calendly, and following up on your request. Legal basis: steps you ask us to take before a possible contract, and our legitimate interest in answering your request.
• Answering your emails. Legal basis: the same as above.
• Measuring how the site is used so we can improve it. Legal basis: your consent, which you can withdraw at any time.

We don't sell your data, we don't use it for advertising and we don't make decisions about you by fully automated means.

Calls are booked through Calendly, an external scheduling service. The Calendly calendar only loads on our pages after you accept functional cookies. If you'd rather not, you can open the calendar directly on calendly.com or email us instead.

When you book a call, Calendly collects the details you enter: your name, your email address, your answers to the questions in the booking form and the time slot you choose. Calendly also processes technical data, such as your IP address, browser and time zone. We receive these booking details so we can hold the call, together with the page of our site you booked from.

For the booking itself, Calendly acts as an independent controller and applies its own privacy policy.

If you accept statistics cookies, we use Google Analytics 4 to measure which pages are visited and how visitors use the site. Without your consent, Google Analytics does not load.

We use Google Consent Mode v2: advertising features are always off, and only statistics measurement follows your choice. For this, Google Analytics sets the cookies _ga and _ga_<container-id>. If you book a call through Calendly after giving consent, we also record that a booking was made, with the language and the page, but without your name or email address.

Google processes this data on our behalf as a processor. You can read more in Google's privacy policy. If you withdraw your consent, the Google Analytics cookies are deleted straight away.

We keep your data no longer than we need it for the purpose we collected it for:

• Your cookie choice: 182 days. After that, we ask for your choice again.
• Your language preference: until you close your browser.
• Booking details and emails: as long as we need them to follow up on your request. If the call leads to an assignment, for as long as we work together and as long as the law requires, for example for our accounts.
• Google Analytics statistics cookies: up to 2 years, or less if you withdraw your consent.
• What Calendly keeps is up to Calendly, under its own privacy policy.

We only share your data with service providers we need to run the site and our calls:

• Railway, which hosts the site on servers in its EU West region, in the Netherlands.
• Calendly, for booking calls (as an independent controller, see above).
• Google, for Google Analytics, only if you consent to it.

We manage the site's text and images in Sanity. Sanity receives no data about visitors. Fonts are served from our own server, not from Google.

Calendly and Google are US companies, so your data may be transferred to the United States. Such transfers rely on the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Under the GDPR, you have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• have the processing restricted;
• object to processing based on our legitimate interest;
• receive your data in a common format or have it sent to someone else;
• withdraw your consent at any time, which doesn't affect the lawfulness of processing before that.

You can change your cookie consent through Cookie settings at the bottom of every page. For your other rights, email hello@oppy.group. We reply within one month. If we can't be sure the request comes from you, we may ask you to confirm your identity.

If you have a question, or you're not happy with how we handle your data, email us at hello@oppy.group and we'll look for a solution with you.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données): www.gegevensbeschermingsautoriteit.be or www.autoriteprotectiondonnees.be.

We update this policy when the site or the law changes. The date at the top of this page shows when it was last updated. If we add a new service that sets cookies, we'll ask for your consent again.