Tenlingo, Georges Ottenbourgsstraat 6 bus 101, 3500 Hasselt, Belgium, enterprise number 1044.424.338. We are responsible for processing your data. Questions? Email hello@tenlingo.com.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Address of your online store and the scan result | Running the scan and showing you the result | Your request | 12 months |
| Email address | Sending your result and answering your questions about the scan | Your request | 12 months |
| Phone number (required for the free scan) | Calling you once to go over your scan result, and after that only if you ask. Rather not be called? Say so, and we won't call again. | Your request for a scan and the call about it (steps prior to a possible contract) | 12 months, or shorter if you ask |
| Order details: company name, VAT number, online store, name, email, phone (optional) | Preparing your quote, performing the contract and invoicing | Contract and legal obligation | 12 months if no contract follows; invoices and accounts for as long as the law requires |
| An appointment you book yourself through our calendar (name, email, phone, online store) | Planning and holding the call | Your request | 12 months |
| Country you ran the scan from (based on your connection) | Knowing where you're based, for the call | Legitimate interest | 12 months |
| Client portal: name, store, package, project steps, documents and questions you send | Showing you your project | Contract | For the duration of the contract and as long as the law requires for invoices |
| Logging in to the client portal: your email address and an encrypted fingerprint of the password you choose yourself (PBKDF2 with its own salt; we never know or see your password), counters of login attempts per email address and per IP address (both only as a keyed hash; for IPv6 per block) and a random ID of the devices on which you logged in before | Letting you log in securely and stopping password guessing | Contract and legitimate interest (security) | Email address and fingerprint for as long as your account exists; counters are erased after 30 days without a new attempt; a device ID after 400 days |
| Evidence log of the client portal: who logged in or did something and when, and for an approval: your name, role, the exact text you approved, date and time, country, shortened IP address, a keyed hash of your full IP address, browser and a random ID of your device | Proving what was agreed and approved, in case of a later dispute | Legitimate interest (proof of the contract and defence in a dispute) | As long as needed as evidence for a possible dispute, at most 10 years (the legal retention period for accounting records in Belgium) after the end of the contract. Entries are never changed or deleted. |
We don't send you a newsletter unless you choose it separately. We never sell or rent out your data.
Question box on the homepage: we only use your question to answer it right away; we don't keep it. The answer comes from our own list of questions and is sometimes worded by AI from Cloudflare (our hosting partner), which processes the question for that purpose. If you leave your number and email, we only use them to call or email you about your question.
Did you receive an email, letter or phone call from us without running a scan yourself? Then we found your online store and your business contact details in public sources: your own website (contact, imprint, about and team pages, and your store’s public details) and Google Maps. From the Belgian Crossroads Bank for Enterprises we only take your legal form and enterprise number, never contact details; in the Netherlands, your postal address from the Trade Register (not if you have a Non-Mailing Indicator); in other countries, only your legal form and registration number from the public company register. We only keep what we need to contact you about your online store: at most three emails and three call attempts, spread over about two weeks, or one letter. That is: company name, company number, website, the location of your online store (city and country), business email address or phone number, the name and role of a contact person if your store mentions them on its own website (so we ask for the right person), the name of the person we spoke to, the date and time of your consent if you gave it by phone, and what our scan found on your public store.
The agreements required by the GDPR apply with these parties. Some of them may process data outside the European Economic Area; this then happens under the European Commission's standard contractual clauses or a comparable safeguard.
The scanner only visits public pages of the online store you enter, as any visitor can: the homepage, a few product pages, the policy pages, the empty cart page and the store's public product list. It follows the store's robots.txt, doesn't log in anywhere, doesn't add anything to the cart, doesn't place orders and doesn't store any data of that store's customers. More information and opting out: tenlingo.com/en/scanner.
This website only uses functional cookies: one that remembers your language choice (1 year) and, in the client portal, one that keeps you logged in (30 days; signed, only for tenlingo.com itself and not readable by other sites) and one with a random ID of your device (2 years, for the evidence log). No tracking or advertising pixels.
You may access your data, have it corrected or deleted, have processing restricted, object, request your data in a common format and withdraw your consent at any time. To do so, email hello@tenlingo.com; we reply within 30 days. If you're not satisfied with how we handle your data, you can file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or with the supervisory authority in your own country, such as the Data Protection Commission in Ireland (dataprotection.ie).