Privacy notice
SITEMPO website and demo requests · Version 9 November 2026 (v5)
1. Controller and contact
Sarabando BV is responsible for the processing described here. Address: IJzerlaan 30, B401, 2060 Antwerp, Belgium (not a visitor address). Enterprise/VAT number: BE0770923138. For privacy questions and requests, contact info@sitempo.eu.
2. Demo requests: data and purposes
We collect your name and email address so that we can respond to your request and arrange a demo. Company and message fields are optional. We also store a request identifier, submission time, selected language and the version of this notice. Required fields are necessary to handle your request through the form. Do not include sensitive personal data, confidential plans or site security details. Your request does not subscribe you to a newsletter, and we do not use it for unrelated marketing.
3. Legal bases
When you request steps towards a possible agreement in your own name, processing necessary for that request is based on Article 6(1)(b) GDPR. When you act for your employer or another organisation, we rely on our legitimate interest in responding to a business enquiry under Article 6(1)(f). We also rely on legitimate interests to protect the form from abuse and administer access. These activities are limited to the enquiry and proportionate security measures. You may object to processing based on legitimate interests. We do not require marketing consent or a mandatory privacy-consent checkbox to respond to your request.
4. Retention
We remove requests once they are no longer needed. The online request list uses a 90-day retention threshold: older entries are automatically removed on the next form submission or owner access, and the owner can delete entries earlier. If there is no activity, deletion occurs at the next such use rather than exactly on day 90. Email notifications and correspondence are reviewed and removed when the enquiry is closed and no longer needed. Records needed for an agreement, a legal obligation or a specific dispute may be kept separately for the period required for that purpose. Deleting an entry from the online request list does not delete copies in the mailbox or delivery provider; those copies must be handled separately. Backup deletion follows the hosting provider’s retention cycle.
5. Access, service providers and transfers
The online request list is restricted to the authorised site owner. The website uses OpenAI Sites hosting and Cloudflare infrastructure, including a database for requests. Relevant personnel and service providers may process data as necessary to operate, secure and support the service. New demo requests also trigger an internal notification via Resend, configured with the Ireland sending region and without open or click tracking. The notification includes your name, email address, company (if provided) and message so that we can handle your enquiry directly from our mailbox. Your email address is also used as the reply-to address. We also send an automatic receipt confirmation in your selected language to the email address entered in the form via Resend. This acknowledgement contains standard text, without a copy of your submitted message, and replies go to info@sitempo.eu. Resend processes this content, the notification recipient (info@sitempo.eu), a request reference and delivery metadata. Resend may retain delivery and account records under its service terms. Email sent to info@sitempo.eu is handled by our email provider, Vimexx. We do not sell personal data. Processing by infrastructure providers may involve countries outside the European Economic Area. Such transfers require an applicable adequacy decision or other valid GDPR safeguards, such as standard contractual clauses and any necessary supplementary measures. Contact info@sitempo.eu for information about the providers, transfer locations and applicable safeguards.
6. Website measurements and cookies
The website’s own pageview counter stores only a date and an aggregate count. It does not store IP addresses, user agents, visitor identifiers or browsing profiles in that counter. Request headers are examined transiently to exclude known bots and certain technical requests. We do not add advertising trackers, third-party analytics scripts, tracking pixels or embedded social-media widgets. The LinkedIn link connects to LinkedIn only when you follow it. Infrastructure providers process technical connection and security data to deliver the site. The language choice is included in the page URL; no cookie is used for this preference. The owner sign-in service may use authentication mechanisms needed for secure access. Optional tracking would require a separate assessment and, where required, prior consent before activation.
7. Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure or restriction, object to processing based on legitimate interests, and request portability where applicable. We do not make solely automated decisions with legal or similarly significant effects about you. Contact info@sitempo.eu to exercise your rights. We normally respond within one month; if a permitted extension is necessary, we explain why within that month. We ask only for proportionate information needed to confirm identity. You can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, via www.gegevensbeschermingsautoriteit.be, or to your competent supervisory authority.
8. Security and updates
The form uses encrypted transport, server-side validation, limited input lengths, abuse controls and restricted owner access. Request content is not intentionally written to application logs. No system can eliminate every security risk. Report suspected exposure to info@sitempo.eu. We update this notice when our processing changes and identify each version by date.