Privacy Policy

Last updated: May 2026

‍

1. Who I am and how to contact me

This website is operated by:

Ada Bossier

Trading as: Ada Bossier

Country: Belgium

Email: hello@adabossier.com

As the operator of this website, I act as the data controller within the meaning of the General Data Protection Regulation (GDPR / AVG). This means I determine the purposes and means of processing your personal data and am responsible for ensuring that processing is lawful, transparent, and secure.

If you have any questions about this privacy policy or how I handle your personal data, you can contact me at info@ada-design.be.

‍

2. What data I collect, why, and on what legal basis

2.1 Project request form

When you fill out the project request form on this website, I collect the following personal data:

‍

Purpose: This data is used solely to respond to your project inquiry and to assess whether we are a good fit for working together. I do not use this data for any other purpose, including marketing or profiling.

Legal basis: Article 6(1)(a) GDPR — your freely given, specific, informed, and unambiguous consent. You provide this consent by actively and voluntarily checking the consent checkbox before submitting the form. The checkbox is never pre-checked. You are never required to submit the form, and you may withdraw your consent at any time by contacting me at info@ada-design.be.

Retention period: Form submissions are retained for a maximum of 2 years after our last contact. If no project follows from your inquiry, your data will be deleted within 12 months. You may request earlier deletion at any time.

Data sharing: I do not sell, rent, or share your personal data with third parties for marketing or any other commercial purposes. Your data is only used to respond to your inquiry.

2.2 Website analytics

This website uses analytics tools to understand how visitors use the site. These tools may collect anonymized, aggregated data such as:

• Pages visited and time spent
• Traffic sources (e.g. search engine, direct, referral)
• Device type, browser, and approximate screen resolution
• Country or region (not your precise location)

No personally identifiable information is collected through analytics. All analytics data is anonymized before storage. These tools are only activated after you have given your explicit consent through the cookie banner on this website.

Legal basis: Article 6(1)(a) GDPR — your consent via the cookie banner.

Retention period: Analytics data is retained according to the default retention settings of each tool. For Google Analytics, this is a maximum of 14 months.

2.3 Google Tag Manager

This website uses Google Tag Manager (GTM) to manage and deploy third-party scripts. GTM itself does not collect or store personal data. It acts as a container that loads other scripts — such as Google Analytics or Hotjar — only after you have given your consent via the cookie banner. No tracking scripts are loaded without your prior consent.

3. Use of Webflow Forms

This website uses Webflow Forms to collect project request submissions. Personal data submitted through these forms is transmitted to and temporarily stored on servers operated by Webflow, Inc., located in the United States.

Webflow complies with GDPR requirements through a Data Processing Agreement (DPA) that includes Standard Contractual Clauses (SCCs) as approved by the European Commission, and participates in the EU-U.S. Data Privacy Framework (DPF). This ensures an adequate level of protection for the processing of personal data outside the EU.

By submitting a form on this website, you acknowledge that your data will be processed and temporarily stored as described above and in this privacy policy. You can review Webflow's privacy policy and DPA at:

• webflow.com/legal/privacy
• webflow.com/legal/dpa
• webflow.com/legal/subprocessors

4. Cookies

This website uses cookies and similar technologies. A cookie is a small text file stored on your device when you visit a website.

4.1 Types of cookies

Necessary cookies

‍These cookies are required for the website to function correctly and cannot be switched off in our systems. They are typically set in response to actions you take, such as navigating between pages. These cookies do not store any personally identifiable information and do not require your consent.

Analytics cookies

‍These cookies allow us to measure and improve the performance of this website. All information collected by these cookies is anonymized and aggregated. These cookies are only placed after you have given your consent.

• Google Analytics: _ga, _gid, _gat (retention: up to 2 years)
• Hotjar: _hjSessionUser, _hjSession (retention: up to 1 year) — planned

Marketing cookies

‍Currently not in use on this website.

4.2 Cookie consent

When you first visit this website, a cookie banner will ask for your consent to place non-necessary cookies. The banner offers equal-prominence options to accept or reject non-necessary cookies. No non-necessary cookies are placed before you make a choice.

You can withdraw or change your consent at any time by:

• Clicking the cookie settings link in the footer of this website
• Clearing your cookies in your browser settings
• Using your browser's built-in cookie controls

Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.

You can review and update your cookie preferences at any time by clicking Change cookie preferences.

5. Third-party services and international data transfers

Some services used on this website are operated by third parties located outside the European Economic Area (EEA), in particular in the United States. For all such transfers, appropriate safeguards are in place as described below.

5.1 Webflow (website hosting and forms)

Provider: Webflow, Inc., United States

‍Purpose: Website hosting and storage of form submissions

‍Transfer safeguard: EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs)

‍Privacy policy: webflow.com/legal/privacy

‍Subprocessors: webflow.com/legal/subprocessors

Webflow acts as a data processor on my behalf. I have accepted Webflow's Data Processing Addendum, which incorporates Standard Contractual Clauses and UK IDTA as required by GDPR Article 28.

5.2 Google Tag Manager and Google Analytics

Provider: Google LLC, United States

‍Purpose: Tag management and anonymized website usage statistics

‍Transfer safeguard: EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs)

‍Privacy policy: policies.google.com/privacyOpt-out: tools.google.com/dlpage/gaoptout

Google Analytics is configured with IP anonymization enabled. This means your IP address is truncated before being stored. Google Analytics is only loaded after you have given your consent via the cookie banner.

5.3 Hotjar (planned)

Provider: Hotjar Ltd, Malta (European Union)

‍Purpose: Heatmaps and session behavior analysis to improve website usability

‍Transfer safeguard: No international transfer — Hotjar is based in the EU

‍Privacy policy: hotjar.com/legal/policies/privacyOpt-out: hotjar.com/legal/compliance/opt-out

Hotjar automatically masks all text entered in input fields, meaning no personal data entered in forms is recorded. Hotjar is only loaded after you have given your consent via the cookie banner.

6. Security

I take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include:

• HTTPS/TLS encryption on all pages of this website (enforced by Webflow by default)
• Limiting access to form submissions to myself only
• Using reputable third-party processors with appropriate security certifications

No method of transmission over the internet or electronic storage is 100% secure. While I strive to use commercially acceptable means to protect your personal data, I cannot guarantee absolute security.

7. Your rights under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)You can request a copy of the personal data I hold about you, along with information about how it is used.

Right to rectification (Art. 16 GDPR)You can request that I correct inaccurate or incomplete personal data.

Right to erasure (Art. 17 GDPR)You can request that I delete your personal data, subject to certain legal conditions (e.g. when data is no longer necessary for the purpose it was collected).

Right to restriction of processing (Art. 18 GDPR)You can request that I limit how I use your data in certain circumstances, for example while a dispute about accuracy is resolved.

Right to data portability (Art. 20 GDPR)You can request your data in a structured, commonly used, machine-readable format (e.g. CSV), where technically feasible.

Right to withdraw consent (Art. 7(3) GDPR)You can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to object (Art. 21 GDPR)You can object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please send a request to hello@adabossier.com. I will respond within 30 days. In complex cases, this period may be extended by a further 2 months, of which I will notify you.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Belgian supervisory authority:

Gegevensbeschermingsautoriteit (GBA) / Autorité de protection des données (APD)Drukpersstraat 35 / Rue de la Presse 351000 Brussels, Belgiumcontact@apd-gba.bedataprotectionauthority.be

8. Children's privacy

This website is not directed at children under the age of 16. I do not knowingly collect personal data from minors. If you believe a child has submitted personal data through this website, please contact me immediately at hello@adabossier.com and I will delete the data without undue delay.

9. Links to third-party websites

This website may contain links to third-party websites. I am not responsible for the privacy practices of those websites and encourage you to read their privacy policies. This privacy policy applies solely to this website.

10. Changes to this policy

I may update this privacy policy from time to time to reflect changes in the tools I use, applicable legislation, or my data handling practices. The date at the top of this page reflects the most recent update. Continued use of this website after any changes constitutes your acknowledgment of the updated policy. For significant changes, I will make reasonable efforts to notify visitors via a notice on the website.

11. Contact

For any questions, requests, or concerns regarding this privacy policy or the handling of your personal data:

Ada Bossier

‍Trading as: Ada Bossier

Email: hello@adabossier.com

‍Country: Belgium