1. Data we process
On the marketing website we only process data you consciously send through your own email client. The form builds a mailto link locally and does not store the fields.
The platform may process account, member, lead, contract, payment, visit, scheduling, communication, access, staff and usage data according to club configuration.
2. Purposes and legal bases
Website enquiries are handled to respond to your request and take possible pre-contractual steps.
Platform data is processed to deliver and secure the service, execute club workflows, provide support, meet legal duties and — where configured and lawful — provide analytics or AI support.
3. Retention
Email correspondence is kept no longer than needed for follow-up, contracting and legal evidence or accounting duties.
Platform periods are agreed with the customer and follow purpose, club instructions and law. Deleted accounts, logs and backups may be kept briefly for recovery, security and compliance.
4. Recipients and processors
Data is shared only with authorised staff and hosting, communication, payment, support or integration providers where necessary and configured.
For transfers outside the EEA we use appropriate safeguards and assess provider and configuration risks. The current processor list is provided contractually or on request.
5. Your rights
Depending on your role and the GDPR, you may request access, correction, deletion, restriction, portability or object. Platform members should first address their club.
You may also complain to the Belgian Data Protection Authority. Privacy contact: stijn@galacticautomation.com.
6. Security and AI
We use appropriate measures including access control, tenant context, logging, encrypted transport and limited credential exposure.
AI output can be wrong. Critical actions should retain human review. Club data is not silently published as marketing content.