Privacy policy

Last updated on 22 May 2026

On this page
  1. Who we are
  2. How we use and collect your personal data
  3. Retention of your personal data and erasure
  4. Your rights as an individual
  5. Providing your personal data to third parties
  6. Transfer of personal data

1Who we are

  1. “We”, “us” or “our” means Pebble, with its registered office in Kontich, Belgium and with company number (BE 0877.275.522). We shall be considered the data controller with regard to the personal data we collect in the context of your use of our website.
  2. This privacy policy is solely intended to provide you with information regarding the processing of personal data within the framework of our website. For our privacy practices regarding our services, we refer to the agreement you concluded with us or to the contact person designated below. Our website, https://pebble.digital/, is owned and managed by Pebble. The website is hosted by Cloudflare. For further information, we refer to Article 5 of this Privacy Policy.
  3. Your privacy is important to us. Therefore, we have developed this privacy policy to provide you with more information regarding the collection, disclosure, transfer, and use (“processing”) of the personal data you share with us, as well as to provide you with more information regarding your rights. We therefore request that you review this privacy policy.
  4. If you have any questions, comments, or complaints regarding this Privacy Policy or the processing of your personal data, or if you wish to submit a request in accordance with Article 4, please contact us via one of the following methods:
    1. By e-mail: steven@pebble.digital, for the attention of Steven Rymenans
    2. By post: Pebble, Veldkant 33A, 2550 Kontich

2How we use and collect your personal data

  1. Personal data is defined as any information relating to an identified or identifiable natural person. Identifiable refers to identifiers (such as name, identification number, location data, etc.) that can be used to directly or indirectly identify a natural person.
  2. The personal data we collect is collected for the following purposes:
    1. If you use forms on our website, we use your personal data to be able to respond to your request, either via e-mail or by telephone. Your e-mail address will also be included in our database for sending our newsletter and providing information regarding events, seminars, and the like.
    2. If you sign up for the newsletter, your e-mail address will be used to send you our newsletters. Additionally, we may keep you informed about events, seminars, and the like that we organise and that may be relevant to you.
    3. We process your personal data for the purpose of supporting the website and improving your user experience. This purpose extends to monitoring the security, availability, performance, capacity, and health of our website.
    4. We process your personal data to enforce or comply with rights granted under applicable legislation (such as defending against legal claims) if necessary. We may also use your personal data to comply with our obligations under applicable legislation.
  3. We collect the following categories of personal data:
    1. Contact details: If you use the contact form, you will be asked to provide the following information: first name, e-mail address, the topic you are interested in and your message. This is information provided directly by you.
    2. Newsletter: If you sign up for our newsletter, you will be asked to provide your e-mail address. This is information provided directly by you.
    3. Usage information: We process personal data concerning your use of our website: IP address, device ID and type, referral source, language settings, browser type, operating system, geographical location, duration of the visit, page visited, or information regarding the timing, frequency, and pattern of your visit. This information may be aggregated and can help us gather useful information regarding the use of the website. In the event that such usage information is anonymised (and therefore cannot be traced back to you as a natural person), such information does not fall under this Privacy Policy. This information is collected automatically through your use of the website.
  4. The legal bases for the use of your personal data are:
    1. Contractual basis: the processing is necessary for the performance of an agreement with you, or to take steps at your request before entering into one.
    2. Consent: Pebble has obtained unambiguous and explicit consent from the person. We ask for this consent when you subscribe to our newsletter or accept cookies on our website. You have the right to withdraw your consent at any time. This will not affect the lawfulness of the processing that occurred prior to the withdrawal of your consent.
    3. Legitimate interest: the processing is necessary for the purposes of the legitimate interests, specifically the promise of the best Pebble customer experience (e.g., offering new services). Without the processing, the aforementioned goal is not achievable.
  5. Your personal data will only be used in accordance with the purposes as set out in Article 2.2.

3Retention of your personal data and erasure

  1. Your personal data will not be retained longer than is necessary to fulfil a specific purpose. However, because it is not possible to determine a period in advance, the period will be decided as follows:
    1. The period depends on which services Pebble provides. These are contractually agreed upon and established. When our Hosting service is used, a contract of indefinite duration is drafted by default. This contract can be terminated at any time. Terms regarding digital strategy are likewise established upon concluding the agreement. The duration of these contracts depends on the request and is contractually agreed upon.
    2. If you withdraw your consent or if you object to the processing of personal data, and such objection is sustained, we will delete your personal data. However, we will retain those personal data necessary to respect your preference for the future.
    3. We are, however, entitled to retain your personal data if this is necessary to comply with our legal obligations, to initiate a legal claim, to defend ourselves against such a claim, or for evidentiary purposes.

4Your rights as an individual

  1. This article contains an overview of your primary rights in accordance with the applicable data protection legislation. We have endeavoured to summarise them for you in a clear and readable manner.
  2. If you wish to exercise any of your rights, please send us a written request in accordance with Article 1 of this Privacy Policy. We aim to respond to your request without unreasonable delay, but in any event within a period of one month from the receipt of your request. If we are unable to respond within the aforementioned one-month period and wish to extend the period, or if we will not act upon your request, we will notify you accordingly.
  3. Right of access
  4. In the event that we process your personal data, you have the right to access your personal data, as well as certain additional information as described in this Privacy Policy.
  5. You have the right to receive from us a copy of your personal data that we hold, provided that this does not adversely affect the rights and freedoms of others. The first copy will be provided to you free of charge, but we reserve the right to charge a reasonable fee if you request multiple copies.
  6. Right to rectification
  7. If the personal data we hold about you is inaccurate or incomplete, you have the right to request us to correct this information, or, taking into account the purposes of the processing, to complete it.
  8. Right to erasure / to be forgotten
  9. Where one of the following cases applies, you have the right to obtain, without unreasonable delay, the erasure of your personal data:
    1. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    2. You withdraw your consent on which the processing is based, and there is no other legal ground for the processing of your personal data;
    3. Your personal data have been unlawfully processed;
    4. Erasure of your personal data is necessary for compliance with EU law or Belgian law;
  10. There are certain exclusions to the right to erasure. These exclusions include where processing is necessary:
    1. For exercising the right of freedom of expression and information;
    2. For reasons of public interest in the area of public health;
    3. For archiving purposes in the public interest, or statistical purposes;
    4. For compliance with a legal obligation; or,
    5. For the establishment, exercise, or defence of legal claims.
  11. Right to restriction of processing
  12. You have the right to obtain the restriction of the processing of your personal data (which means that the personal data may only be stored by us and may only be used for limited purposes), if one of the following elements applies:
    1. You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
    2. The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
    3. We no longer need your personal data for the purposes of the processing, but you require them for the establishment, exercise, or defence of legal claims; or,
    4. You have objected to the processing, pending the verification whether our legitimate grounds override yours.
  13. In addition to our right to store your personal data, we may still process it, but only:
    1. With your consent;
    2. For the establishment, exercise, or defence of a legal claim;
    3. For the protection of the rights of another natural or legal person; or,
    4. For reasons of public interest.
  14. You will be informed before we lift the restriction on the processing of your personal data.
  15. Right to data portability
  16. If the processing of your personal data is based on your consent, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. However, this right does not apply insofar as it would adversely affect the rights and freedoms of others. You also have the right to have your personal data transmitted directly from us to another company, where technically feasible.
  17. Right to object
  18. You have the right to object at any time, on grounds relating to your specific situation, to the processing of your personal data, but only to the extent that the legal basis for the processing is that the processing is necessary for:
    1. The performance of a task carried out in the public interest or in the exercise of official authority vested in us;
    2. The purposes of our legitimate interests or those of a third party.
  19. If you object to the processing of your personal data, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests or fundamental rights and freedoms.
  20. When your personal data are processed for direct marketing purposes, regardless of whether it is an initial or further processing, you have the right to object to this processing at any time and free of charge, including profiling to the extent that it is related to such direct marketing. If you raise such an objection, we will stop processing your personal data for this purpose.
  21. Right to lodge a complaint with a supervisory authority
  22. If you consider that the processing of your personal data carried out by us infringes data protection legislation, you have the right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement. In Belgium, you can lodge a complaint with the Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels (contact@apd-gba.be), https://www.dataprotectionauthority.be.

5Providing your personal data to third parties

  1. In order to offer our website, we work with service providers to process and store your personal data. We use the following service providers:
    1. Cloudflare, for hosting the website, its security and the spam protection on our forms
    2. Customer.io, for receiving what you send through our forms and for sending our e-mails, including the newsletter
    3. Google (Google Analytics and Google Tag Manager), for website statistics, only if you accept statistics cookies
    4. If agreed upon, a third party who has access to the website dashboard
    5. If contractually agreed under the term SEA (Search Engine Advertising), we work together with Facebook Business, Google Ads, and LinkedIn Business.
  2. It may be that providing access to your data is necessary for legal purposes. In such a case, we will be forced to comply with this. We may also provide your personal data if this is necessary to protect the vital interests of another natural person.
  3. We do not provide personal data to third parties unless this has been previously agreed upon. Our website uses social media plug-ins that make it possible to link you to our social media channels or that enable you to share content on your social media channels. These social media channels are Facebook, Instagram, LinkedIn, X (formerly Twitter), YouTube, and Pinterest. If you click on such a link, it is possible that the aforementioned social media partners collect personal data, such as personal data concerning your profile.
  4. We are not responsible for how these social media partners use your personal data. In such a case, they will act as a data controller. For your information, we list the relevant links below (however, these may change from time to time):
    1. Facebook: http://facebook.com/about/privacy;
    2. Instagram: https://help.instagram.com/155833707900388;
    3. LinkedIn: http://linkedin.com/legal/privacy-policy;
    4. X (formerly Twitter): https://x.com/en/privacy.

6Transfer of personal data

  1. Some of our service providers (Cloudflare, Customer.io and Google) are based in the United States and may process personal data outside the European Economic Area (EEA).
  2. Where that happens, we make sure the necessary safeguards are in place: the provider is certified under the EU-US Data Privacy Framework, or the transfer is covered by the standard contractual clauses approved by the European Commission.