Data controller
The data controller for the data described in this statement is:
Corani bvba, with registered office at St.-Ermelindisstraat 11, 3320 Hoegaarden, Belgium — company number BE 0808.134.120. You can contact us at info@corani.be.
What data we process
This website is a static company site. We do not place tracking cookies, do not use advertising networks, and do not send data to Google Analytics, Facebook or comparable services. What we may process:
- Web server logs. When you visit our pages, our hosting infrastructure records standard technical data (IP address, time, requested URL, user-agent). This data is used for security and stability and is retained for at most 30 days.
- Email correspondence. When you email us — directly or via the contact form that opens a mailto link — we process the data you yourself include in your message: name, email address, any company details and the content of your enquiry.
- Product data. Anyone who uses HorseJournal or Creative Wonderland entrusts us with data in the context of those products. For HorseJournal that includes account data and the content of your logbook; for Creative Wonderland that includes booking and invoicing data. The product-specific privacy statements are available on the respective product sites.
- Contract data. In the context of our management and advisory work, we process contact details of client staff and, where applicable, substantive data needed to perform the engagement.
Purposes of processing
Personal data is processed solely for the following purposes:
- Responding to your enquiry, order, application or contact.
- Performing agreements to which you or your organisation are a party.
- Delivering and maintaining our products and services.
- Complying with legal obligations (accounting retention, tax obligations, any other statutory requirements).
- The security and stable operation of our systems.
We do not process your data for profiling, automated decision-making with legal effects, or onward sale to third parties.
Legal basis
Depending on the purpose, our processing rests on one of the following legal bases under the GDPR: performance of a contract (Article 6(1)(b)), compliance with a legal obligation (Article 6(1)(c)), our legitimate interest in keeping the website secure and functional and being able to communicate with you (Article 6(1)(f)), or your explicit consent where required (Article 6(1)(a)).
Disclosure to third parties
We do not share your data with third parties for commercial purposes. We do rely on carefully selected processors for specific technical tasks — for example a hosting provider for this website, an email service, or an accountant. With those parties we conclude, where applicable, a data processing agreement that frames their obligations under the GDPR.
We only transfer data outside the European Economic Area where appropriate safeguards exist, such as an adequacy decision or the standard contractual clauses of the European Commission.
Retention period
Personal data is not retained longer than necessary for the purposes mentioned above, or longer than legally required. The legal retention period of seven years applies to accounting records. Web server logs are deleted within 30 days. Email correspondence is kept for as long as it remains relevant to our relationship with you, and can be deleted on request.
Your rights
Within the limits of the GDPR, you have the right to:
- Access the data we process about you;
- Have inaccurate or incomplete data corrected;
- Have data erased, to the extent it does not need to be retained by law;
- Restrict processing;
- Object to processing based on legitimate interest;
- Receive your data in portable form for what you provided to us yourself;
- Withdraw a previously given consent, without prejudice to the lawfulness of earlier processing.
Requests can be sent to info@corani.be. We respond within one month; for exceptional requests we may extend this period and will notify you in good time.
You also have the right at any time to lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be.
Security
We take reasonable technical and organisational measures to protect your data against loss, unauthorised access or unlawful use. Complete security against every conceivable incident can never be guaranteed; in the event of a data breach that poses a high risk to your rights, we will notify you and the competent authority in accordance with our legal obligations.
Cookies
This website does not place cookies for analytics, marketing or tracking. Functional storage (e.g. a language preference you set yourself) is used only to keep the site usable. The products HorseJournal and Creative Wonderland have their own cookie/session policies on their respective domains.
Changes
This statement may be updated over time to reflect changes in our operations, in our tools or in the regulations. The most recent version is always available on this page.
