Privacy Policy

1. Data controller

Droneview.be / DronePortal.app
Kleine Vinnestraat 7, 3803 Duras (Sint-Truiden), Limburg, Belgium
VAT BE.0534.916.002
[email protected]

2. Data we collect

From Operators (business users):

• Company name, email address, password (hashed)
• Billing and subscription information
• Usage logs and technical metadata (IP address, browser, timestamp)

From end clients (residents/owners):

• Name, address, email (optional, entered by the Operator)
• Access code and language preference
• Portal visit statistics

Inspection data:

• Thermal and visual photos, GPS coordinates, PDF reports
• 3D model links (WebODM URLs, where applicable)

3. Purposes of processing

• Providing and managing the DronePortal.app service
• Billing and customer support
• Security and fraud prevention
• Legal obligations

We do not process personal data for third-party marketing purposes.

4. Legal basis

• Contract performance — for delivering the service to Operators
• Legitimate interest — for security and fraud prevention
• Legal obligation — for accounting and tax retention

5. Retention periods

• Account data: for as long as the account is active + 30 days after cancellation
• Billing data: 7 years (Belgian accounting law)
• Inspection data: according to the expiry date set by the Operator

6. Third-party transfers

We do not share personal data with third parties for commercial purposes. We use sub-processors for:

• Server hosting in the EU (European data centres)
• Transactional email delivery

All sub-processors are contractually bound by the GDPR.

7. Your rights

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — restrict processing
• Objection — object to processing based on legitimate interest
• Portability — receive your data in a readable format

Send your request to [email protected]. We will respond within 30 days.

You may also file a complaint with the Belgian Data Protection Authority (GBA/APD).

8. Cookies and analytics

We use strictly necessary functional cookies (session, language and consent preferences), for which no consent is required. With your consent, we also use Google Analytics 4 to measure website visits and improve our site. Analytics cookies are placed only after you click "Accept" in the cookie banner; if you choose "Only necessary", Google Analytics is not loaded and no analytics cookies are set (Google Consent Mode).

Google Analytics may process data on servers outside the EU (Google LLC, USA) under the EU Standard Contractual Clauses; IP addresses are handled in anonymised form. We do not use advertising or remarketing cookies.

We also use a self-hosted, cookieless analytics tool (Matomo) to count visits. It sets no cookies, anonymises IP addresses and does not share data with third parties, so it requires no consent.

You can change or withdraw your choice at any time: Change cookie preferences

9. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed password storage, and server-level access controls.

10. Changes

We reserve the right to update this policy. For material changes, active users will be notified by email.