GDPR · last updated: September 2026

Privacy policy.

Data controller

Nutrimedia SRL, Chemin de Feluy 139 bte 3, 7090 Braine-le-Comte, Belgium. VAT BE 0881.742.272.

For any question about your data: privacy@nutrimedia.info.

Data collected

I only collect the data needed to run the site and the business relationship:

Contact form: name, company (optional), email, subject and message.
Resources and observatory: the email address to which the resource or the observatory's first wave is sent.
Blueprint diagnostic: your answers to the questionnaire, when you complete it.
Audience measurement: aggregated visit statistics, without cookies (Plausible). See the cookie policy, which also details your browser's local memory.

No sensitive data within the meaning of Article 9 GDPR. No personal health data.

Purposes & legal bases

Answering your request (contact, sending a resource or diagnostic) — legal basis: pre-contractual measures taken at your request, Art. 6(1)(b) GDPR.
Audience measurement — legal basis: legitimate interest, Art. 6(1)(f) GDPR (anonymised statistics, no profiling).

Retention periods

Contact and diagnostic requests, including reports: 3 years from the last exchange. AI visibility checks requested before 20 September 2026 follow the same period.
Accounting and contractual data (clients): 10 years, in line with Belgian accounting obligations.
Technical server logs: 12 months.

Recipients, processors & transfers

Your data is accessible to Nicolas Rousseau (managing director) and to the following technical providers, acting as processors:

Vercel Inc. (United States): hosting of the site and its forms.
Resend (United States): sending of the emails generated by the site.
Google (Google Workspace): Nutrimedia's mailbox, where your requests arrive.
Supabase Inc. (United States, data hosted in the European Union, in Ireland): database for the Blueprint diagnostic and for following up contact requests.
Plausible Analytics (European Union): cookieless audience measurement.
Calendly (United States): only if you book a meeting through that link.

Several of these providers are based in the United States. These transfers rely on the safeguards provided by the GDPR: the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

No transfer to commercial third parties. Advertising tools (Google, Meta, LinkedIn) can only be activated with your explicit consent, collected by the cookie banner; without that consent, no browsing data reaches them. Details in the cookie policy.

Your rights

Under the GDPR, you have the following rights:

Right of access to your data.
Right to rectification if it is inaccurate.
Right to erasure ("right to be forgotten").
Right to restriction of processing.
Right to object to processing.
Right to data portability.

To exercise these rights: privacy@nutrimedia.info. Reply within 30 days at most.

Complaint

If you believe your rights are not respected, you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels. dataprotectionauthority.be.

Updates

This policy was last updated on 20 September 2026: the AI visibility check is no longer offered online, and the providers that served it no longer receive any data. Any substantial change will be announced on the homepage for 30 days.