Legal

Privacy policy

How Storymachine processes and protects personal data when you visit our website or get in touch with us.

Last updated: 17 August 2026

1. Who are we?

Storymachine is a trade name/brand of:

ConceptPool BVVinkenlei 352900 SchotenBelgiumCompany number: BE0819.201.820

For questions about privacy or personal data, you can contact us at hello@storymachine.be.

ConceptPool BV is the data controller for the personal data processed through this website.

2. Which personal data do we process?

Depending on how you use the website, we may process the following data, among others:

  • name and contact details you enter yourself through a form;
  • email address and other information you voluntarily provide to us;
  • technical data such as IP address, browser type, device information and pages visited;
  • information about how you use our website, when you give consent for this;
  • your cookie and privacy preferences.

We do not ask for more personal data than is necessary for the purposes for which we use it.

3. Why do we process this data?

Contact and requests

When you contact us or submit a request, we use your data to:

  • answer your question;
  • arrange an intro call or conversation;
  • provide information about our services;
  • enable further communication about your request.

The legal basis for this is the performance of pre-contractual measures at your request or, where applicable, our legitimate interest in properly following up on questions and commercial contacts.

Website analytics

With your consent, we may use analytical technologies to better understand how visitors use our website. For this we use, among others, Google Analytics 4.

This processing takes place solely on the basis of your consent where that is legally required.

Cookie and consent management

We use CookieFirst to collect, store and pass on your cookie preferences to the relevant services on the website.

This helps us to use non-essential cookies and tracking technologies only when consent has been given.

CookieFirst records consent information so that we can demonstrate which choice a visitor has made.

Website management and security

Certain technical data may be processed to make the website function correctly, to detect security issues and to prevent misuse.

For this we rely on our legitimate interest in managing our website securely and reliably.

4. Cookies and similar technologies

Our website uses essential cookies and may, after your consent, also use analytical or other non-essential technologies.

CookieFirst manages the cookie banner and your preferences.

Google Analytics is managed through Google Tag Manager. For visitors from the European Economic Area, we pass consent choices on to Google via Google Consent Mode, so that Google tags adjust their behaviour to your choice.

You can change your cookie preferences at any time through the cookie settings on the website.

5. With whom do we share personal data?

We may share personal data with service providers that help us offer and manage the website, including for example:

  • hosting and infrastructure providers;
  • Google, for Google Analytics and Google Tag Manager;
  • CookieFirst, for cookie and consent management;
  • providers delivering technical support or security services.

These parties process data solely for the agreed purposes and, where necessary, on the basis of appropriate data processing agreements.

We do not sell your personal data.

6. Transfers outside the European Economic Area

Some service providers, including Google, may process personal data outside the European Economic Area.

When that happens, we rely on the safeguards permitted under the GDPR, such as adequacy decisions or standard contractual clauses.

7. How long do we keep personal data?

We do not keep personal data longer than necessary for the purpose for which it was collected.

In general:

  • contact details and correspondence are kept for as long as needed to follow up on your question or commercial relationship;
  • data subject to statutory retention periods is kept for as long as the law requires;
  • analytics data is retained in line with the retention periods configured in Google Analytics;
  • consent data is retained in line with the CookieFirst settings.

8. How do we secure your data?

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and other unwanted processing.

No system is entirely without risk, but we limit access to personal data to what is reasonably necessary.

9. Your rights

Under the GDPR you have, depending on the circumstances, the right to:

  • request access to your personal data;
  • have inaccurate data corrected;
  • have your data erased;
  • have the processing restricted;
  • object to certain processing;
  • have your data transferred where the right to data portability applies;
  • withdraw your consent at any time where processing is based on consent.

The right to erasure is not absolute and may be limited in certain circumstances, for example when we are legally required to retain data.

Would you like to exercise one of these rights? Send an email to hello@storymachine.be.

10. Filing a complaint

If you believe that we are not processing your personal data correctly, you can contact us first at hello@storymachine.be.

You also have the right to lodge a complaint with the competent supervisory authority:

Belgian Data Protection Authority (Gegevensbeschermingsautoriteit)Drukpersstraat 351000 BrusselsBelgium

11. Changes

We may amend this privacy policy when our services, website or legal obligations change.

The most recent version is always available on this page.