Privacy policy
Last updated: 27 October 2026
Bocon handles your personal data with care. This privacy policy explains which data we process, why, how long we keep it and which rights you have under the General Data Protection Regulation (GDPR).
Who is responsible?
Bocon bv
Rubenslei 6a, 2018 Antwerp, Belgium
Enterprise and VAT number: BE0767.404.612
ITAA number: 52.348.270
E-mail: boekhouding@bocon.be · Phone: +32 3 227 55 22
Bocon bv is the controller for the processing described in this policy. For privacy questions you can always reach us at the e-mail address above.
Which data do we process, why and for how long?
| When | Which data | Purpose and legal basis | Retention |
|---|---|---|---|
| You fill in the contact form | First and last name, e-mail address, your message, language, the page you sent the form from and the time | Answering your question and sending you an acknowledgement. Legal basis: steps taken at your request before a possible contract, and our legitimate interest in following up questions | 12 months after the last contact, unless you become a client (see “Clients”) |
| You subscribe to the newsletter | E-mail address, language, time of subscription and confirmation, page of subscription, whether you open a newsletter (via a small invisible image) and which guides you download via your personal link | Sending you the newsletter, tax tips and free guides and measuring which topics are useful, so we can improve the newsletter. Legal basis: your consent, which you confirm via a link in an e-mail (double opt-in). Prefer that opens are not measured? Keep images disabled in your mail program or unsubscribe | Until you unsubscribe. After that we only keep your address marked “unsubscribed” so we never mail you again; on request we erase that too |
| You visit the website | Anonymous visitor statistics: page visited, referring website, device type, browser and operating system, screen width, clicks on buttons such as phone or e-mail. No cookies, no IP addresses: visitors are recognised per day through a code that cannot be traced back and changes every day | Improving the website and measuring which information is useful. Legal basis: our legitimate interest. You can refuse this at any time via “Cookie preferences” at the bottom of every page (choose “Necessary only”). Visitors with “Do Not Track” or “Global Privacy Control” enabled are not counted either | 26 months |
| Security of the website and forms | Time, event (e.g. a rejected form or a failed login) and a pseudonymous code of the IP address that changes monthly | Preventing and detecting abuse, spam and intrusion attempts. Legal basis: our legitimate interest | 180 days |
| Clients | Identification and contact details, data needed for the accounts, tax returns and the advice you entrust to us | Carrying out the engagement and complying with legal obligations such as anti-money-laundering, tax and accounting rules. Legal basis: contract and legal obligation | For the duration of the engagement and afterwards according to the legal periods (generally 10 years) |
We never use your data for purposes other than those described above, we do not sell it and we do not make automated decisions about you.
Who do we share data with?
We work with a limited number of service providers that process data on our behalf (processors), under appropriate contractual arrangements:
- Our hosting provider for the website and database, with servers in the European Union.
- Microsoft (Microsoft 365) for e-mail, including confirmation e-mails and the newsletter.
- For clients: the accounting, invoicing and government platforms needed for the engagement (for example the applications of the FPS Finance).
Where a provider would process data outside the European Economic Area, this only happens with appropriate safeguards, such as the European Commission’s standard contractual clauses.
If you click the WhatsApp button or a link to another website (such as Google Maps or an invoicing tool), you leave our website and that party’s privacy policy applies.
How do we protect your data?
The website uses an encrypted connection (HTTPS). Forms are protected against spam and abuse. Contact-form and newsletter data are only accessible to Bocon staff through a protected admin panel with two-step verification. We do not collect more data than necessary.
Your rights
You have the right to:
- access your data and receive a copy;
- have incorrect data corrected;
- have your data erased, unless we are legally required to keep it;
- restrict processing;
- object to processing based on our legitimate interest;
- data portability;
- withdraw your consent at any time, for example via the unsubscribe link at the bottom of every newsletter.
Send your request to boekhouding@bocon.be. We reply within one month. To prevent abuse we may ask you to confirm your identity.
Not satisfied with how we handle your data? You can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels. We would of course like to hear from you first, so we can put it right.
Cookies
How we use cookies is explained in our cookie policy.
Changes
We update this privacy policy when our practices or the law change. The date of the last change is shown at the top of this page.