Who operates this site and how your data is handled.

Publisher and service provider: SUMATONI-GROUP SRL, trading as Sumatoni, a Belgian private limited company with registered office at Excelsiorlaan 8, 1930 Zaventem, Belgium.

• Enterprise number (CBE): 0770.614.916
• VAT number: BE 0770.614.916
• Email: [email protected]
• Telephone: +32 2 899 03 01

SUMATONI-GROUP SRL determines why and how personal data submitted through this website is processed. Privacy requests can be sent to [email protected].

The contact form processes the name, company, email address, optional telephone number, number of users, expected timing, chosen topic, message, page path and submission time. Fields marked as required are necessary to process the request; without them the form cannot be sent.

Cloudflare also processes connection and security data needed to deliver and protect the site, such as the IP address and technical request metadata. Sumatoni does not add the visitor’s referrer, IP address or browser signature to the business contact email.

• Answering a request, arranging a discussion and preparing a possible quotation or engagement: steps taken at the visitor’s request before entering into a contract (Article 6(1)(b) GDPR).
• Preventing abuse, securing the form and protecting the website: Sumatoni’s legitimate interest in operating a secure and reliable service (Article 6(1)(f) GDPR).
• Keeping records where required by tax, accounting or other law: compliance with a legal obligation (Article 6(1)(c) GDPR).

The form is not used to subscribe visitors to a newsletter, and no solely automated decision or profiling determines whether Sumatoni will work with a prospect.

Access is limited to persons authorised by Sumatoni who need the information to handle the request. Technical processing is performed by Cloudflare for site delivery, security and anti-abuse checks, by Resend for email transmission, and by Sumatoni’s business email provider. Personal data is not sold.

Cloudflare and Resend may process data outside the European Economic Area, including in the United States. Depending on the processing, transfers are covered by an adequacy mechanism such as the EU-U.S. Data Privacy Framework or by the European Commission’s Standard Contractual Clauses and additional safeguards. Their current contractual information is available in the Cloudflare DPA and the Resend DPA.

If no commercial relationship follows, contact requests and related exchanges are kept for no more than 12 months after the last meaningful contact, then deleted unless a dispute or legal obligation justifies longer retention. If a contract is concluded, relevant information becomes part of the customer file and is kept for the relationship and the applicable statutory limitation, accounting and tax periods. Technical security data is kept only for the period justified by security needs and the relevant service configuration.

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. Send a sufficiently precise request to [email protected]. You may also lodge a complaint with the Belgian Data Protection Authority.

The site does not use advertising or audience-measurement trackers. It uses session storage to remember the selected language during the browsing session and local storage to remember the light or dark theme chosen on the device. On the contact page, Cloudflare Turnstile may use strictly necessary technical mechanisms to distinguish legitimate submissions from abuse. These functions are not used for advertising. Because the site does not place non-essential trackers, it does not display a consent banner.

Sumatoni applies reasonable technical and organisational safeguards and limits the information included in contact emails. No internet transmission is completely risk-free. This notice may be updated when the form, providers or legal requirements change; the date above identifies the current version.