Privacy policy

Last updated: 6 July 2026

This policy explains how we collect and use personal data when you use the Stone Arch Bridge Designer website and order our services. We are committed to processing your data lawfully and transparently under the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is:

2. What data we collect

3. Why we use your data, and our legal basis

PurposeLegal basis
Deliver the drawings/services you order and respond to your enquiryPerformance of a contract
Contact you about your project or quoteLegitimate interest / your consent
Issue invoices and keep accountsLegal obligation (Belgian accounting law)
Keep the site secureLegitimate interest

Where we rely on consent, you can withdraw it at any time.

4. Who we share your data with

We do not sell your data. We use a small number of processors that handle data on our behalf:

ProviderPurposeLocation
FormsparkReceives and forwards form submissionsEU (Netherlands)
BotpoisonInvisible spam protection on our formsEU (Netherlands)
MollieProcesses paymentsEU (Netherlands)
InfomaniakWebsite hostingSwitzerland (EU adequacy)
WiseReceives payment settlement; issues our invoices when you choose payment by bank transferEU / EEA

We may also disclose data where legally required.

5. International transfers

Our providers store data within the EU/EEA or in a country recognised by the EU as providing adequate protection (Switzerland). Where any transfer outside the EEA occurs, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep your data

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent. To exercise any of these, contact us at privacy@bernage.be. We will respond within two weeks.

8. Complaints

If you believe we have not handled your data properly, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels — gegevensbeschermingsautoriteit.be.

9. Cookies and tracking

This website uses no advertising or analytics cookies and no third-party tracking. Fonts, icons, images and all JavaScript — including the 3D bridge configurator, which runs entirely in your browser — are served from our own domain, so simply loading a page sends no data to any third party. The one exception: pages that contain a form load an invisible anti-spam script (Botpoison) from its content delivery network (unpkg.com) to block automated submissions; this is the only third-party request the site makes.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.