Privacy Policy

Last updated: October 28, 2026

1. Who We Are

Expeteo SARL operates the Référenceur brand (“Référenceur,” “we,” “us,” or the “Data Controller”).
Op der Haart 28, 9999 Wemperhardt, Luxembourg
Email: [email protected]
Phone: +352 20 60 04 04

This Privacy Policy explains how Référenceur collects and uses personal information through this website and our related websites, including www.referenceur.be, www.referenceur.lu, www.referenceur.ch, and www.referenceur.fr (together, the “Site”). “User” or “you” means any individual or organization that visits or otherwise interacts with the Site.

Référenceur is based in the European Union. Our processing of personal information is governed by the EU General Data Protection Regulation (Regulation (EU) 2016/679 of April 27, 2016, the “GDPR”) and by the Belgian Act of July 30, 2018, on the protection of natural persons with regard to the processing of personal data (the “Act”). We apply these rules to every User, wherever you are located, including visitors from the United States. Section 9 also describes rights you may have under U.S. state privacy laws.

As Data Controller, Référenceur determines the purposes and means of processing your personal information. We may engage individuals or companies that process personal information on our behalf and under our instructions (“Processors” or service providers). We only select Processors that provide sufficient guarantees regarding technical and organizational security measures, as required by the GDPR and the Act.

2. How We Collect Personal Information

When you use the Site, you may share personal information with us. Référenceur, as Data Controller, and service providers acting on our behalf process that information in accordance with the GDPR and the Act. We collect personal information through:

  • automated processes;

  • cookies;

  • our newsletter sign-up form;

  • our contact form;

  • the free content we share;

  • tracking software.

3. Why We Use Personal Information

As required by Article 13 of the GDPR, we use personal information for the following purposes:

  • to provide the services offered and agreed upon through the Site;

  • to monitor the delivery of those services;

  • to send marketing and promotional communications, only with your prior consent and until you withdraw it;

  • to answer your questions;

  • to compile statistics that help us improve the Site, our services, and our internal organization;

  • to improve the quality of the Site and of the products and services we offer;

  • to better understand your interests.

4. Personal Information We May Collect

When you visit and use the Site, Référenceur may collect and process the following personal information, as described in this Privacy Policy:

  • information you provide for contractual purposes and so that we can each meet our obligations, such as your first and last name, address, bank account details (IBAN) and other banking information, and VAT or tax ID number, and more generally any information you choose to provide;

  • information you provide when you fill out a form or contact us by phone, email, or other means, such as your name, address, email address, and phone number;

  • information collected automatically each time you visit the Site: your IP address, browser type and version, time zone, and operating system;

  • information about the pages you view on the Site, including URLs and time spent browsing.

5. Legal Basis and Consent

By accessing and using the Site, you confirm that you have read this Privacy Policy and that you freely, specifically, knowingly, and unambiguously consent to the processing of your personal information as described here.

You give this consent through an affirmative act: checking the box that links to this Privacy Policy. Consent is required to complete certain actions on the Site and to enter into a contractual relationship with Référenceur. Any contract between Référenceur and a User for the services offered on the Site is subject to the User’s acceptance of this Privacy Policy.

You agree that the Data Controller may collect and process the personal information you provide on the Site or in connection with our services, for the purposes listed in Section 3 and in accordance with this Privacy Policy.

You may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

6. How Long We Keep Personal Information

In accordance with Article 13(2) of the GDPR and the Act, we keep personal information only as long as reasonably necessary to fulfill the purposes for which it is processed, and in any event no longer than 10 years after the last service we provided.

7. Who We Share Personal Information With

We may share personal information with our employees, contractors, Processors, or suppliers who provide adequate data security guarantees and who work with Référenceur to market products or provide services. They act under Référenceur’s direct authority and may be responsible for collecting, processing, or further processing that information on our behalf.

In every case, these recipients must comply with this Privacy Policy. Référenceur ensures that they process the information only for the intended purposes, confidentially and securely.

If we ever intend to disclose personal information to third parties for direct marketing or prospecting, we will tell you in advance and ask for your consent first.

8. International Data Transfers

Référenceur is established in the European Union. If you use the Site from the United States or any other country outside the EU, the personal information you send us is transferred to and processed in the European Union, with the protections described in this Privacy Policy.

9. Your Privacy Rights

You can exercise your rights at any time by emailing us at [email protected] or by writing to Expeteo SARL, Op der Haart 28, 9999 Wemperhardt, Luxembourg. If you write to us by mail, please include a copy of an identity document so we can verify your request.

Your Rights Under the GDPR

a. Right of access. Under Article 15 of the GDPR, you have the right to access your personal information and to obtain the following information:

  • the purposes of the processing;

  • the categories of personal information concerned;

  • the recipients or categories of recipients to whom the personal information has been or will be disclosed, in particular recipients in countries outside the EU or international organizations;

  • where possible, how long the personal information will be kept or, if that is not possible, the criteria used to determine that period;

  • whether automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR takes place and, at least in those cases, meaningful information about the logic involved, as well as the significance and expected consequences of that processing for you.

The Data Controller may charge a reasonable fee based on administrative costs for any additional copies you request.

If you submit your request electronically (by email, for example), we will provide the information in a commonly used electronic format, unless you ask otherwise.

We will send you a copy of your information no later than one month after receiving your request.

b. Right to rectification. Référenceur guarantees your right to have your personal information corrected and erased.

Under Article 16 of the GDPR, incorrect, inaccurate, or irrelevant information can be corrected or deleted at any time. You should first make the necessary changes yourself in your user account or other settings; if you cannot do so on your own, you can ask Référenceur to make them.

Under Article 19 of the GDPR, the Data Controller notifies each recipient to whom the personal information was disclosed of any correction, unless this proves impossible or involves disproportionate effort. On request, the Data Controller will tell you who those recipients are.

c. Right to erasure. You have the right to have your personal information erased without undue delay in the cases listed in Article 17 of the GDPR.

If the Data Controller has made the personal information public and is required to erase it under the previous paragraph, the Data Controller, taking into account available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform other controllers processing that information that you have requested the erasure of any links to, or copies or replications of, that personal information.

The two previous paragraphs do not apply to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information;

  • for compliance with a legal obligation under EU or EU Member State law to which the Data Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;

  • for the establishment, exercise, or defense of legal claims.

Under Article 19 of the GDPR, the Data Controller notifies each recipient to whom the personal information was disclosed of any erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. On request, the Data Controller will tell you who those recipients are.

d. Right to restriction of processing. You have the right to restrict the processing of your personal information in the cases listed in Article 18 of the GDPR.

Under Article 19 of the GDPR, the Data Controller notifies each recipient to whom the personal information was disclosed of any restriction of processing, unless this proves impossible or involves disproportionate effort. On request, the Data Controller will tell you who those recipients are.

e. Right to data portability. Under Article 20 of the GDPR, you have the right to receive the personal information concerning you from Référenceur in a structured, commonly used, and machine-readable format, and to transmit it to another controller without hindrance from Référenceur in the cases provided for by the GDPR.

When you exercise this right, you may have the personal information transmitted directly from one controller to another, where technically feasible.

The right to data portability is without prejudice to the right to erasure. It does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller, and it must not adversely affect the rights and freedoms of others.

f. Right to object and automated individual decision-making. You may object at any time, on grounds relating to your particular situation, to the processing of your personal information, including automated processing by Référenceur. Under Article 21 of the GDPR, Référenceur will then stop processing the information unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed to establish, exercise, or defend legal claims.

Where personal information is processed for direct marketing, you may object at any time to that processing, including profiling to the extent it relates to direct marketing. If you object, your personal information will no longer be processed for that purpose.

g. Right to lodge a complaint. You have the right to file a complaint about how Référenceur processes your personal information with the Belgian Data Protection Authority (Autorité de protection des données), which has jurisdiction over Belgium:

Belgian Data Protection Authority
Rue de la Presse 35, 1000 Brussels, Belgium
Phone: +32 2 274 48 00
Email: [email protected]
Website: www.dataprotectionauthority.be

You may also bring a claim before the competent court.

U.S. State Privacy Rights

Several U.S. states have adopted comprehensive consumer privacy laws, including California with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Each law applies only to businesses that meet its own criteria, and this Privacy Policy does not state that any particular state law applies to Référenceur. Depending on where you live and whether a given law applies, you may have the right to:

  • know what personal information we collect and how we use and disclose it, and access a copy of it;

  • request that we delete your personal information;

  • request that we correct inaccurate personal information;

  • opt out of the sale or sharing of your personal information and of targeted advertising (see Section 10);

  • not be discriminated against for exercising any of these rights.

In the terms used by these laws, the information described in Section 4 includes identifiers (such as your name, email address, and IP address), contact and billing information, and internet or other electronic network activity (such as the pages you view on the Site).

Because we grant every User the GDPR rights described above, you can use the same contact details to submit a request, whatever state you live in. We may need to verify your identity before we act on it.

10. Do Not Sell or Share My Personal Information

Référenceur does not sell your personal information for money. As explained in Section 7, we do not disclose personal information to third parties for their direct marketing without first informing you and obtaining your consent.

The Site uses Google Analytics tracking cookies (see Section 12). Under some state laws, certain uses of cookies and similar technologies may be treated as a “sale” or “sharing” of personal information, or as targeted advertising. To opt out, you can block or delete cookies in your browser settings, install Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout), or email us at [email protected] with “Do Not Sell or Share” in the subject line.

11. Children’s Privacy

The Site is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal information from children under 13, as defined by the U.S. Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has given us personal information, contact us at [email protected] and we will delete it.

In line with the GDPR, a parent or legal guardian must give express consent before a minor under 16 discloses information or personal information on the Site. We never process personal information from a User who states that they are under 16. We strongly encourage parents and guardians to promote responsible, safe internet use.

12. Cookies

The Site uses cookies to distinguish Users from one another. This helps us give you a better browsing experience and improve the Site and its content. This section explains what cookies we use and why.

a. General principles. A “cookie” is a file stored temporarily or permanently on your device’s hard drive when you visit the Site, so that it can be used on later visits. Cookies allow the server to recognize your device.

Cookies may also be placed by third parties that Référenceur works with.

Some of the cookies Référenceur uses are necessary for the Site to work properly; others improve your experience.

You can customize or disable cookies through your browser settings.

By using the Site, you expressly agree to the use of cookies as described in this section.

b. Types of cookies and why we use them. Référenceur uses the following types of cookies on the Site:

  • Technical cookies: these are necessary to operate the Site, allow the information you enter to be transmitted, and make browsing easier;

  • Analytics and audience measurement cookies: these recognize Users and count the number of visitors to the Site over a given period. Because they also show browsing behavior, they help us improve navigation by suggesting content and offers likely to interest you. They also help Référenceur find and fix possible bugs on the Site;

  • Functional cookies: these make the Site easier to use by remembering choices you have made (for example, your username or language);

  • Tracking cookies: Référenceur uses tracking cookies through Google Analytics to measure how Users interact with the Site’s content and produce anonymous statistics that help us improve the Site. Google explains how these cookies work in its Privacy Policy: policies.google.com/privacy.

c. How long cookies are kept. Cookies are kept only as long as needed for their purpose. Cookies that may be stored on your device are kept for a maximum of 10 years.

d. Managing cookies. If you do not want the Site to place cookies on your device, you can easily manage or delete them by changing your browser settings. You can also set your browser to notify you whenever a website uses cookies, so you can decide whether to accept or refuse them.

If you disable certain cookies, the Site may not work as well, and some parts of it may be unavailable or only partly available.

If you do not want Google Analytics cookies to be used, you can set up your browser accordingly using Google’s opt-out add-on: tools.google.com/dlpage/gaoptout.

13. Limitation of Liability

The Site may contain links to websites owned by third parties that are not affiliated with Référenceur. Référenceur is not responsible for the content of those websites or for their compliance with the GDPR and the Act.

Référenceur cannot be held responsible for collecting and processing information or personal information from minors under 16 whose consent is not actually covered by that of their parents or legal guardians, or for inaccurate information, particularly regarding age, entered by minors.

To the extent permitted by applicable law, Référenceur is not responsible for the loss, corruption, or theft of personal information caused, in particular, by viruses or cyberattacks.

14. Security

The Data Controller implements organizational and technical measures to ensure a level of security appropriate to the collection and processing of personal information. These measures take into account the cost of implementation and the nature, context, and purposes of the processing.

The Data Controller uses industry-standard encryption when data is transferred to or collected through the Site.

15. Changes to This Privacy Policy

Référenceur may update this Privacy Policy to comply with its legal obligations. We encourage you to review it regularly to stay informed of any changes. Changes will be posted on the Site or sent by email.

16. Governing Law and Jurisdiction

This Privacy Policy is governed exclusively by Belgian law. Any dispute will be brought before the courts of the judicial district where Référenceur’s registered office is located.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, contact the Data Controller by email at [email protected], by phone at +352 20 60 04 04, or by mail at Expeteo SARL, Op der Haart 28, 9999 Wemperhardt, Luxembourg.

18. Copyright and Intellectual Property

© Référenceur

Référenceur is a trademark registered with the Benelux Office for Intellectual Property (BOIP), registration no. 1013000.

The logos, animations, drawings, text, photos, databases, and other elements of this Site are protected by international copyright law.

Any copying, adaptation, modification, translation, arrangement, storage in a database, or communication to the public of all or part of this Site, in any form and by any means, electronic, mechanical, or otherwise, is strictly prohibited without Référenceur’s prior written consent.

If you would like to use any part of the Site’s content, images, drawings, photos, or text, please contact Référenceur first at [email protected].

Appeler