Privacy & Policy

ZAFFER Research & Development BV (hereinafter: “Zaffer” and “we”) is a company with its registered office at Weiveldlaan 41C, Unit C, 1930 Zaventem, Belgium, registered in the Crossroads Bank for Enterprises under number 0823.902.261 (RLE Brussels). This website gives more information about our products.

In this privacy and cookie statement we explain how we process personal data in connection with the website: which data, for which purposes and on which legal basis, how long we keep it, with whom we share it and which rights you have.

We want to inform you as well as possible about how we collect and process your personal data, and we make sure that no more data is processed than necessary. We consider privacy a fundamental right and attach due importance to respecting and protecting your privacy and the confidentiality of your personal data. We act in accordance with the GDPR, other applicable legislation and this privacy and cookie statement.

0. Preliminary: definitions

The following definitions are used:

• “Zaffer”: the Belgian company that manages the Website.
• “Website”: this website, www.zaffer.be.
• “Visitor”: any natural person who visits the Website or contacts Zaffer from the Website.
• “GDPR”: Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
• “personal data”: any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• “processing”: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. Who is responsible for the processing?

ZAFFER Research & Development BV, with its registered office at Weiveldlaan 41C, Unit C, 1930 Zaventem, registered in the Crossroads Bank for Enterprises under number 0823.902.261, is the controller of the personal data it processes for its public Website and for handling the questions you send us. The Zaffer app and the cloud application for installers on zaffersoft.be have their own processing and their own privacy statement.

2. Which personal data do we process and for which purposes?

The Website is an information site. There is no account, no form, no newsletter and no web shop.

Website visitor data: hosting logs and security

Categories of data: technical data about the visit to the Website, including the IP address, the browser used, the requested file and the time of the visit.

Purposes: displaying the Website, and the technical management and security of the Website.

Legal basis: our legitimate interest in ensuring the security, integrity and proper functioning of our Website and IT systems.

Visitor statistics via Cloudflare Web Analytics

Categories of data: statistical visit data, such as the page visited, the referring website, the country and the type of device and browser. No cookies are placed, nothing is stored on your device and IP addresses are not kept. Visitors are not tracked across days or across websites.

Purposes: aggregated analysis of website use, insight into the pages visited and improvement of the content, functioning and usability of the Website.

Legal basis: our legitimate interest in analysing and optimising our Website.

Contact details and correspondence by e-mail or telephone

Categories of data: identification and contact details such as name, company name, e-mail address and telephone number, insofar as provided by the data subject; communication data, in particular the content of the question or message and further correspondence about the question.

Purposes: answering questions about our products and, where necessary, preparing an agreement.

Legal basis: taking pre-contractual steps at the request of the data subject; our legitimate interest in handling the questions we receive.

Map on the contact page (Google Maps)

The map on the contact page is only loaded after you click the button to show the map. Before that click, the Website makes no connection with Google. After that click, your browser loads the map directly from Google, which receives your IP address and technical data and may use its own cookies. Google acts as an independent controller for this; Google's privacy policy applies.

The processing of your personal data involves no profiling and will not be subjected by us to automated decision-making. We do not use your data for marketing. We do not ask for special categories of personal data and ask you not to include such information in your communication with Zaffer.

3. Hosting, place of processing and transfers

The Website, including the videos and the PDF manuals, is hosted via Cloudflare Inc. (Cloudflare Pages). Cloudflare also provides the DNS services for zaffer.be. Cloudflare works with a worldwide network of servers, so data may also be processed outside the European Economic Area (EEA).

The visitor statistics are processed via Cloudflare Web Analytics, provided by Cloudflare Inc. (United States) through its worldwide network of servers.

For its e-mail communication, Zaffer uses Google Workspace (Google Ireland Ltd.).

Zaffer processes personal data in accordance with the applicable provisions of the GDPR. Where necessary, data processing agreements with standard contractual clauses are concluded. For any transfers of personal data outside the EEA, the applicable legal conditions and safeguards for international data transfers are observed, such as the EU-US Data Privacy Framework or standard contractual clauses. For more information about international transfers and the applicable safeguards, you can contact Zaffer at [email protected].

4. Security of personal data

Zaffer takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, loss, destruction or damage. These measures are adapted to the nature of the personal data processed, the processing concerned and the associated risks.

The Website is offered only over a secure connection (HTTPS), uses security headers and is protected by Cloudflare against abuse and suspected automated traffic. The processing of personal data takes their confidentiality, integrity and availability into account. Zaffer also ensures that the service providers it engages are subject to the necessary applicable data protection obligations.

5. Retention periods

Zaffer does not keep personal data longer than necessary for the purposes for which it is processed, without prejudice to legal retention obligations.

Zaffer applies the following retention periods or criteria:

• Technical logs: according to Cloudflare's retention periods for the security and proper functioning of its network.
• Visitor statistics (aggregated, without IP address): 6 months.
• Contact details and correspondence: 2 years after the last contact, unless the law or a pending dispute requires longer retention.

After the applicable retention period, the personal data is deleted or anonymised, subject to legal retention obligations.

6. Recipients and service providers

Zaffer may share personal data with third parties, including service providers such as IT service providers and software and cloud suppliers, insofar as this is necessary for the purposes set out in this privacy and cookie statement. Appropriate technical and organisational measures are taken and, where required, the necessary contractual arrangements are made. The personal data shared is limited to what is necessary.

Zaffer may engage the following recipients and service providers, among others:

• internal employees and directors of Zaffer who need access on a “need-to-know” basis;
• Cloudflare Inc.: hosting of the Website, videos and manuals, technical logs, security and DNS services;
• Cloudflare Inc. (Cloudflare Web Analytics): visitor statistics;
• Google Ireland Ltd. (Google Workspace): e-mail communication.

Zaffer ensures that service providers who process personal data on its behalf are subject to the applicable data protection obligations.

We treat personal data confidentially and do not pass it on, trade, sell or rent it to third parties for commercial purposes.

7. Rights of data subjects

For the processing for which Zaffer is the controller, you have the following rights within the limits of the GDPR:

• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure of your data in the cases provided for by the GDPR;
• the right to restriction of processing;
• the right to portability of the data you have provided to us, in the cases provided for by the GDPR;
• the right to object to certain processing based on our legitimate interest;
• the right to withdraw your consent at any time where the processing is based on your consent, without affecting the lawfulness of the processing before the withdrawal.

You can exercise these rights by contacting Zaffer at [email protected].

8. Cookies and similar technologies

8.1. Which cookies do we use?

The Website itself places no cookies and stores nothing in your browser's local storage. In specific circumstances, the following technologies are involved:

• Cloudflare security cookie. Purpose: protecting the Website against suspected automated traffic. Only where applicable, for suspected bots. Duration: 30 minutes at most. Type: strictly necessary.
• PDF download counter. Purpose: measuring the total number of downloads per manual. Anonymous totals per PDF file, without recording personal data, without cookies and without IP address. Duration: n/a. Type: statistical functionality for which no prior cookie consent is required.
• Map on the contact page (Google Maps). Purpose: showing Zaffer's location. Only after you click the button to load the map; Google may then use its own cookies under its own privacy and cookie policy. Duration: according to Google's policy. Type: third-party service that you expressly request yourself.

In addition, Zaffer uses Cloudflare Web Analytics to collect visitor statistics, without placing cookies or storing anything on your device. Zaffer does not use Google Analytics, advertising cookies, tracking cookies or social media plug-ins. The videos on the Website are served from our own hosting.

8.2. Legal basis and consent

For cookies and similar technologies that are strictly necessary for the functioning and security of the Website, or for providing a service expressly requested by the user, no prior consent is required. Because the Website uses no other cookies or similar technologies, Zaffer does not ask for cookie consent and the Website shows no cookie banner. Insofar as personal data is processed through these technologies, this is done in accordance with the legal bases and purposes set out in this privacy and cookie statement.

9. Links to other websites

The Website contains links to other websites, such as zaffersoft.be (the cloud application for installers, a separate service) and Google Maps. Those websites have their own privacy policy; Zaffer has no control over them.

10. Questions, complaints and contact details

For questions about this privacy and cookie statement or about the processing of your personal data, you can contact Zaffer at [email protected]. If there is reasonable doubt about your identity, Zaffer may ask for additional information needed to confirm your identity. We handle your request within the legal time limits.

You also always have the right to lodge a complaint with the competent data protection supervisory authority in Belgium: the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, tel. +32 2 274 48 00, e-mail: [email protected].

11. Changes to this privacy and cookie statement

Zaffer may change this privacy and cookie statement from time to time, for example following changes to the Website, the technologies used or the applicable legislation. The most recent version is always available on the Website and states the date of the last change.

Last changed: 11 November 2026.