Website Privacy Policy

This policy explains how Replasia BV processes personal data when you visit or interact with our public websites and online pages available at https://replasia.com and any subdomains that link to this notice. It applies to site browsing, contact forms, aggregate visitor statistics, and related website operations only.

It does not apply to clinical, research, imaging, usability testing, or AI-related processing of health data. Those activities are covered by the Replasia Privacy Policy for Clinical, Research, and AI Data Processing.

Contact: Miguel Azevedo (Qity BV)
Email: dpo@qity.be

We collect only what we need to operate and improve the site and to provide content you request.

• Technical and usage data: IP address, date and time, pages viewed, referrer URL, browser and device information, operating system, and similar log data.
• Analytics data: aggregate statistics generated by our hosting provider, Lovable: page views, number of visitors, visit duration, bounce rate, traffic source, device type, and country-level location. These statistics are collected without cookies and are not used to build a profile of you or to identify you individually.
• Communication data: details you submit via contact forms or email, such as your name, email address, company, message content, and preferences.

We do not ask for special category data on the website. Please do not include health information or other sensitive data in web forms. If such information is received inadvertently, we will delete or redact it unless a lawful reason requires retention.

We process website personal data for the following purposes, using the legal bases set out in Articles 6 and 7 GDPR.

• Site operation and security: to deliver pages, maintain availability, prevent abuse, and detect incidents. Legal basis: our legitimate interests (Art. 6(1)(f)).
• Analytics and performance: to understand site usage and improve content using cookie-free, aggregate measurement. Legal basis: our legitimate interests in maintaining and improving the site (Art. 6(1)(f)).
• Responding to enquiries: to answer questions and manage follow-up. Legal basis: pre-contractual steps or legitimate interests (Art. 6(1)(b) or 6(1)(f)).
• Compliance: to meet legal obligations and handle rights requests. Legal basis: legal obligation (Art. 6(1)(c)).

You may object at any time to processing based on our legitimate interests by contacting us using the details in this policy.

This website does not set cookies and does not use local storage, tracking pixels, or similar technologies for advertising, profiling, or cross-site tracking. Because no non-essential cookies are used, no cookie consent banner is displayed.

If we introduce analytics, marketing, or other non-essential cookies in the future, we will update this policy and ask for your consent before those technologies are placed on your device.

Our website is hosted and published by Lovable, which provides built-in, cookie-free visitor analytics acting as our processor. It reports aggregate metrics only — page views, visitor counts, visit duration, bounce rate, traffic sources, device types, and country-level location. It does not use cookies, does not track you across websites, and is not used for advertising or profiling.

We do not use any third-party advertising, marketing, or social-media tracking tools on this website.

Personal data are shared only as needed with trusted service providers acting under contract to host the site, deliver emails, provide aggregate visitor statistics, and secure our infrastructure. We require processors to follow Article 28 GDPR and implement appropriate technical and organisational measures.

If personal data are transferred outside the EEA, we use recognised safeguards such as European Commission adequacy decisions or Standard Contractual Clauses, and we assess any additional measures needed to protect the data.

• Server logs: typically up to 12 months, shorter where feasible.
• Analytics: retained by our hosting provider in aggregate form only; the statistics do not identify individual visitors.
• Contact enquiries: for as long as needed to handle your request and for a limited period thereafter for audit and compliance.

We delete or anonymise data when retention ends, keeping minimal records where required by law.

You have the rights of access, rectification, erasure, restriction, objection, and data portability. You also have the right to lodge a complaint with your supervisory authority. In Belgium, this is the Gegevensbeschermingsautoriteit / Autorité de protection des données (GBA/APD), http://www.dataprotectionauthority.be/ .

To exercise your rights, contact us at info@replasia.com or the postal address above. We will respond within one month, extendable where permitted for complexity.

Our website is not directed to children.

We do not knowingly collect children’s personal data through the site.

We protect personal data using appropriate technical and organisational measures, including TLS encryption, access controls, logging, vulnerability management, and processor due diligence. Internet transmission is never entirely risk-free, so if you prefer, you may contact us by telephone or post.

We do not use the website to carry out decisions based solely on automated processing that produce legal or similarly significant effects.

We may update this policy from time to time to reflect changes in law, services, or providers. Material changes will be highlighted on the site. The effective date above shows when this version took effect.

This website policy covers visitors, cookie-free visitor statistics, and online forms. It is not intended for processing of medical images, clinical records, or other special category data. If you interact with Replasia in a clinical, research, usability, or AI context, please refer to the Replasia Privacy Policy for Clinical, Research, and AI Data Processing, which addresses Article 9 GDPR safeguards, retention, and participant rights for those activities.