What ELSYS Lab keeps about the people who visit this site, get in touch or use the client portal, why, for how long, and what you can change about it. Last updated 2026-11-02.
Who
ELSYS Lab CommV, represented by Elias Meersman. Questions about your data go to info@elsyslab.com.
Visit statistics, without a cookie
Every page you open is counted: which page, which website you came from (the domain only), the country, region and city your IP address belongs to, your internet provider, and whether you read on a phone or a computer, with which browser and operating system.
To count visitors without following them, the server makes a code each day from your IP address and your browser, with a secret key. Tomorrow the code is a different one, and your IP address itself is not kept. Place and provider are looked up in a database on our own server (DB-IP Lite); your address goes nowhere for it.
We do this because we want to know how the site is read (legitimate interest, art. 6(1)(f) GDPR). You can object to it with an email to info@elsyslab.com.
With your consent: the cookie and the fingerprint
If you say yes in the cookie notice, your browser gets one cookie, elv: a random code valid for a year, so a second visit counts as the same person. Your time zone and window size come along with it.
With that consent we also read a few traits of your device: the screen size and pixel density, your time zone and languages, the number of processor cores, the platform, and a code of how your browser renders a small drawing and the graphics card (canvas and WebGL). From these the server makes a fingerprint: one code, encrypted with a key of its own. The traits themselves are not kept.
The fingerprint serves to recognise your browser if you cleared the cookie, so you are not counted as a new visitor. A new cookie is only linked to an earlier visit if your internet provider is the same too, and a link can be undone.
The legal basis is your consent (art. 6(1)(a) GDPR and art. 129 of the Belgian Electronic Communications Act). You can withdraw it at any time with the button below or the link at the bottom of every page; your browser then clears the cookie and we erase the fingerprint. Declining or withdrawing costs you nothing: the site works the same, and you are then only counted as above.
For how long
- Each single page view: 13 months.
- The fingerprint: 13 months after your last visit, then erased.
- The counts per day (one row per visitor per day, with the code and not your IP address): kept, for the figures across the years.
- The elv cookie: a year, or until you clear it or withdraw consent.
- Your answer to the cookie notice: in your browser (localStorage, elv.consent), until you clear it.
Contact form
What you fill in on the contact form (name, email address, subject and message) reaches our mailbox and our own management system, to answer your question (art. 6(1)(b) or (f) GDPR). Kept until 2 years after the last contact. If it leads to an assignment, for as long as the law requires for the accounts.
Client portal
Clients get a login to their own portal. We keep the password only as an irreversible hash, and a session cookie (__Host-cs) keeps you signed in. The documents in the portal are visible only to the client and to us. The legal basis is the agreement (art. 6(1)(b) GDPR).
Error reports
When this site, or a site we build for a client, runs into an error, we keep a technical report (what went wrong, on which page, when) to fix it. Those reports are erased after 90 days.
Who else processes your data
We sell or share nothing. We do work with services that store or send data for us:
- Railway (hosting of the site and the database), with servers in the United States. That transfer takes place under the European Commission’s standard contractual clauses, in Railway’s data processing agreement.
- Combell / mailprotect (email, Belgium).
- Google (calendar and video calls), only for meetings with clients.
- Billit (invoicing), only for clients.
Cookies on this site
- elv: counts a returning visit as the same person. Only with consent, one year.
- elv.consent (localStorage): remembers your answer. Strictly necessary, until you clear it.
- __Host-cs: keeps a client signed in to the portal. Strictly necessary, clients only.
- __Host-ss and gstate: only for the studio's administrator.
Your rights
You can ask what data we hold about you, have it corrected or erased, have its processing restricted, object to it, or receive it in a common format. Send an email to info@elsyslab.com. If you are not satisfied with how we handle it, you can complain to the Belgian Data Protection Authority (dataprotectionauthority.be).