Privacy statement
For the website assistant27.com · last updated 30 August 2026
In short. This website sets no cookies and stores nothing in your browser; there is therefore no consent banner. We do count how often each page is viewed — without knowing by whom: the count contains no IP address and no identifier that recognises your device. Beyond that we only process what you send us yourself through the demo form or by email, plus the technical logs that every web server keeps.
1. Who processes your data
The controller for this website is:
- Company
- ALsecurit CommV
- Registered office
- Raamstraat 14 bus 2.01, 3500 Hasselt, Belgium
- Company number
- 1025.658.006
- info@alsecurit.be
Assistant27 is a product of ALsecurit. We have not appointed a data protection officer; for a company of this size and with these processing activities that is not required. Questions about this statement go to the address above.
2. This site uses no cookies
No cookies are set and nothing is stored in or read from your browser — no local storage, no session storage, no pixels, no device fingerprinting. There is no third-party service on the site: no Google Analytics or comparable service, no advertising networks, no social media buttons, no chat widget.
What the site does carry is a counting script of thirty lines, written by us. When a page opens, it sends a single message with the path of that page, the language, and — if you arrived from another site — that site's domain name. Nothing more: no search terms from the address bar, no name, no identifier that links visits together. We therefore count page views, not people: a hundred views may be a hundred visitors or one visitor returning a hundred times, and we have deliberately made that distinction impossible for ourselves. If your browser signals that you do not want to be tracked (Do Not Track or Global Privacy Control), nothing is counted at all.
Everything the page needs sits on our own server: the screenshots, the logo, the styling and the counting script itself. Even the typefaces are not fetched externally — the page uses the fonts already present on your device. The only other destination your browser reaches is the collection point on Microsoft Azure in Paris — with the same processor that hosts the site itself.
Because nothing is stored on or read from your device, the consent requirement of article 129 of the Belgian Electronic Communications Act does not apply here, and we deliberately show no cookie banner.
3. What we process, and why
The demo form
If you fill in the form at the bottom of the home page, we process your name, organisation, email address, your phone number if you give one, the framework you selected and the explanation you write yourself.
The form has no server behind it. What you enter is turned, inside your own browser, into an email message that opens in your own mail program; you send it yourself. Nothing goes to an external form service, and as long as you do not press send, nothing reaches us. Once the message arrives, it lands in our mailbox and we process it.
- Purpose: answering your request, scheduling a demo and holding the conversation about it; sending you an example report if you ask for one.
- Legal basis: taking steps at your request prior to a possible contract (art. 6(1)(b) GDPR). For follow-up afterwards we rely on our legitimate interest in maintaining business contact (art. 6(1)(f) GDPR); you may object at any time and it stops.
- Retention: twenty-four months after our last contact. If you become a customer, the retention period in the contract applies.
Email and other direct contact
If you write or call us outside the form, we process the data you provide in doing so, in order to answer you (art. 6(1)(b) or 6(1)(f) GDPR). Here too we keep the correspondence until twenty-four months after the last contact, unless a legal retention duty — accounting rules, for instance — requires longer.
The page view count
For each page viewed we receive: the path of the page, the language, the domain you came from if that was another site, the time, and the browser type. Microsoft Azure derives the country from the IP address and does not retain the address itself.
- Purpose: knowing which pages are viewed and where visitors come from, in order to improve the site.
- Legal basis: legitimate interest (art. 6(1)(f) GDPR); the count is set up so that it cannot be traced back to a person.
- Retention: ninety days, then deleted automatically.
Technical web server logs
Like every web server, our hosting provider keeps a technical log: the visitor's IP address, the time, the page requested and the browser type. We do not use that data to track or count visitors; it exists to keep the site available and secure and to investigate faults and abuse (legitimate interest, art. 6(1)(f) GDPR). These logs are managed by the hosting provider and deleted after a short period.
4. Who else sees your data
We sell nothing on and share nothing for commercial purposes. Your data only reaches parties that perform a service for us:
- Microsoft — the website runs on Microsoft Azure, the page view count is kept there in the Paris region, and our email runs on Microsoft 365. Microsoft acts as a processor in doing so.
Beyond that, no one. Microsoft commits to the EU Data Boundary for customer data; where data would nevertheless end up outside the European Economic Area, this happens on the basis of the European Commission's standard contractual clauses. We also disclose data where a legal obligation or a court order compels us to.
5. Your rights
You have the right to access your data, to have it corrected or erased, to have processing restricted, to object to processing based on legitimate interest, and to have your data transferred in a readable format. Send a request to info@alsecurit.be. We answer within one month. To avoid handing data to the wrong person, we may ask you to make your identity plausible.
If you disagree with how we handle your data, please do raise it with us first. You also always have the right to lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.
6. Security
The site is served exclusively over an encrypted connection (HTTPS, with HSTS). Access to our mailbox is limited to those who need it and protected with multi-factor authentication. There is no publicly accessible database behind this website; the page view count sits in a shielded environment and contains no data that can be traced back to a person.
7. This statement covers the website, not the product
Assistant27 itself — the application in which customers maintain their ISMS — is a different processing activity with a different division of roles. There, the customer organisation is the controller over the data it enters, and ALsecurit acts as a processor. What we may and may not do in that role, which sub-processors we engage and how long data is kept is set out in a separate data processing agreement that accompanies the licence — not in this statement.
Are you a customer, or considering becoming one, and would you like to see that agreement and the list of sub-processors in advance? Request them at info@alsecurit.be; we will send them without fuss.
8. Changes
If something changes about the site or about what we process, we update this statement and change the date at the top. There is no version that quietly falls behind: what is written here describes the site as it stood online on that date.