Legal information

Privacy
& data.

We collect little, we keep it briefly, we sell nothing on. This page sets out exactly what we know about you when you visit aeterna-bxl.be or drop into the studio — and how you can see it, correct it or have it erased.

01 · Our principles Minimal collection, always.

We regard your personal data as a confidence we do not betray. By using our site aeterna-bxl.be or visiting our shop, you accept the practices described below. In practice, three simple rules guide us:

  • We collect only what is strictly necessary to handle your appointment, your order or your message.
  • We never sell your data, nor rent it, nor exchange it for commercial purposes.
  • We delete whatever is no longer useful — automatically, within the periods described below.

02 · Data controller Who to contact.

Controller
Aeterna
Registered office
49 Rue du Marché aux Herbes
1000 Brussels, Belgium
Supervisory authority
Autorité de protection des données (APD — Belgian Data Protection Authority)
35 Rue de la Presse, 1000 Brussels

03 · Data collected What we know about you.

When you book an appointment

  • Surname, first name, email, phone
  • Number of people with you
  • Jewellery preferences

When you order online

  • Surname, first name, email, phone
  • Delivery and billing address
  • Details of the pieces ordered
  • Payment method (banking data never passes through our servers)

When you sign up to the newsletter

  • Email, explicit consent (double opt-in)

Automatically when you visit

  • IP address (anonymised within 24 hours)
  • Browser and device type, pages viewed, duration
  • Cookies — see our cookie policy

04 · Purposes What for.

Every piece of data collected serves a specific purpose, resting on a legal basis under the GDPR:

Studio appointment
Performance of the contract (art. 6.1.b)
Order & delivery
Performance of the contract (art. 6.1.b)
Newsletter
Revocable consent (art. 6.1.a)
Invoicing / accounting
Legal obligation (art. 6.1.c — art. 315 CIR, Belgian Income Tax Code)
Customer service
Legitimate interests (art. 6.1.f)
Audience statistics
Consent (cookie banner)

05 · Recipients Who else sees your data.

We work with a small circle of providers established in the European Union, each bound by a processing agreement compliant with article 28 of the GDPR:

  • OVH — website hosting (Roubaix, France)
  • Amelia (TMS) — booking system (EU, GDPR-compliant)
  • Brevo (formerly Sendinblue) — newsletter sending (Paris, France)
  • Mollie — online payment (Amsterdam, Netherlands)
  • bpost — delivery (Brussels, Belgium)
Important — We never sell, rent or share your personal data with third parties for commercial purposes without your explicit consent. No transfer outside the European Union.

06 · Retention What we keep, and for how long.

  • Appointment data — 2 years after the last contact.
  • Customer accounts — 3 years after your last order, then anonymised.
  • Invoices — 10 years (Belgian tax obligation).
  • Newsletter — for as long as you remain subscribed, deleted within 30 days of unsubscribing.
  • Contact form — 2 years maximum.
  • Analytics cookies — 13 months maximum.
  • Technical logs — 12 months, anonymised after 24 hours.

07 · Your rights You decide, we act.

In accordance with articles 15 to 22 of the GDPR, you have the following rights at any time:

  • Access — receive a copy of all your data.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — have your data deleted (except where a legal retention obligation applies).
  • Objection — refuse processing based on our legitimate interest.
  • Portability — receive your data in a structured, reusable format.
  • Restriction — freeze processing while a challenge is being examined.
  • Withdrawal of consent — revoke consent given at any time (e.g. newsletter).
Exercising your rights — Write to contact@aeterna-bxl.be stating your name, email and the right you wish to exercise. We reply within 30 days maximum.

08 · Security Encryption, backups, discipline.

The site uses TLS 1.3 encryption in transit. Databases are encrypted at rest (AES-256) and backed up daily in a European data centre. Internal access is logged, protected by strong authentication and restricted to the studio team and management.

In the event of a security incident affecting your data, we notify the APD within 72 hours and inform you directly if it concerns you.

09 · Cookies What we place on your device.

Our site uses essential cookies (basket operation, session) and, with your agreement, analytics cookies to understand browsing. You can accept or refuse non-essential cookies via our consent banner.

For the full detail of the cookies used, see our cookie policy.

10 · Minors Protecting under-16s.

Our site and our services are not intended for people under 16. We do not knowingly collect data from minors. If you are a parent or guardian and believe your child has provided us with data, contact us at contact@aeterna-bxl.be for immediate deletion.

11 · Complaints Your remedy in the event of a dispute.

If you consider that your rights have not been respected, you may lodge a complaint with the Belgian supervisory authority:

Body
Autorité de protection des données (APD — Belgian Data Protection Authority)
Address
35 Rue de la Presse, 1000 Brussels
Phone
+32 2 274 48 00

12 · Changes How we tell you about changes.

We reserve the right to amend this policy at any time to reflect changes in our practices or for legal reasons. Any amendment will be published on this page with a new update date. We encourage you to consult this page regularly.

Last updated: 19 May 2026. Version always available at aeterna-bxl.be/confidentialite.