Privacy statement

Privacy policy

This policy explains which personal data the Sonixtek website (sonixtek.com) processes, why, for how long and what your rights are. We collect as little as we can: the site has no advertising, no social media buttons, no embedded videos or maps, and its fonts are served from our own server.

1. Who is responsible

The controller is Cepimac BV, Rochesterlaan 11, 8470 Gistel, Belgium, enterprise number 0656.824.216, trading as Sonixtek. E-mail: info@sonixtek.eu, phone: +33 1 89 48 03 68.

For any question about your data, write to info@sonixtek.eu. We have not appointed a data protection officer.

2. Visiting the website: server logs

When you open a page, your browser sends technical data to our web server, and the server records it in its log files: IP address, date and time, the address requested, the response code and size, the referring page and the browser identification (user agent).

Purpose: to deliver the pages, keep the site secure and find faults. Legal basis: our legitimate interest in a working and secure website (Art. 6(1)(f) GDPR).

The website is hosted for us by our hosting provider, on a server in the EU (Germany), acting as our processor. Log files are deleted automatically by our hosting provider's log rotation once they are no longer needed for security and fault-finding, unless we need a specific entry to investigate an attack.

3. Visitor statistics without cookies

To see which pages are read, each page sends one small request to our own server after it has loaded. We record: the hour of the visit, the page address, the website you came from (domain only), the first two letters of your browser language, whether the device is a phone or a computer, and whether the visit came from a search engine robot.

We do not store your IP address and we store nothing on your device. To count a visitor only once per day, the server combines your IP address and browser identification with a random value and keeps only a 12-character code. The random value is deleted every night; after that the code can no longer be linked to anyone, and visits on different days cannot be connected.

These figures never leave our server and are not shared with anyone. Legal basis: our legitimate interest in knowing which content is useful (Art. 6(1)(f) GDPR). No cookies or similar identifiers are stored on your device, and no identifier is read from it, so no consent is needed for this counter. The monthly statistics files are kept for 25 months.

4. Google Analytics, only with your consent

If you click "Accept" in the statistics banner, we also use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics then sets cookies (_ga and _ga_8FKTMQQWKT, which last up to 2 years) and records how you use the site: pages viewed, time on page, clicks and scrolling, the site you came from, device and browser type, and an approximate location derived from your IP address. IP anonymisation is switched on, and Google states that Google Analytics 4 does not log or store IP addresses of users in the EU. Advertising features, personalised advertising and Google signals are switched off.

Until you click "Accept", and if you click "Decline", the Google script is not loaded: nothing is sent to Google and nothing is stored on or read from your device for Google Analytics.

Legal basis: your consent (Art. 6(1)(a) GDPR and the national rules implementing Art. 5(3) of the ePrivacy Directive). Data in Google Analytics is kept for 2 months. More information: policies.google.com/privacy.

Changing your mind: use the "Cookie settings" link at the bottom of every page and click "Decline". The site then deletes the Google Analytics cookies (_ga and _ga_8FKTMQQWKT), and from then on the Google script is no longer loaded. Withdrawing consent does not affect processing that took place before.

5. What the site keeps in your browser

The site uses the local storage of your browser for these entries, which never leave your device by themselves:

• sx-consent: your choice in the statistics banner ("yes" or "no"), so we do not ask on every page.
• sonixtek.quote: the models and options you put in your quote basket. It contains no personal data and is only sent to us when you submit the quote form.
• sonixtek.cart: the units and quantities in your shopping basket. It contains no personal data and is only sent to us when you place an order.
• sonixtek.lastorder: the number of your last online order, so that the order status page can show it after the payment.

All of them are needed for functions you use yourself, so no consent is required. They stay until you empty the basket or clear your browser data.

6. Quote and order requests

When you send the quote form, we receive:

• company name, contact name, e-mail address and country (required);
• phone number, VAT number, a list of spare parts and your message (optional);
• the models and options in your basket;
• automatically: a reference number, date and time, page language, browser identification (user agent) and how long the form was open (to recognise automated spam).

The request is first saved on our web server, in a folder that cannot be reached from the internet, and then sent by e-mail to our sales mailbox, which is hosted on Microsoft 365 (Microsoft Ireland Operations Limited). The mail is sent over an encrypted connection and a copy stays in the mailbox's sent items. No automatic confirmation e-mail is sent to you; after sending, the website shows a reference number. Your request is not passed to any other system.

To limit abuse, the server counts how many requests come from one connection per hour. For this it keeps a one-way code of your IP address, never the address itself, and forgets it after one hour. Requests that our filter recognises as spam are stored but not mailed. If you do not hear from us within two working days, please write to info@sonixtek.eu.

Purpose: to answer your request, prepare a quotation and, if you order, to deliver, invoice and provide after-sales service. Legal basis: steps before a contract and the performance of the contract (Art. 6(1)(b) GDPR); for invoices and accounting records, our legal obligations (Art. 6(1)(c) GDPR); for spam and abuse protection, our legitimate interest (Art. 6(1)(f) GDPR). Without the required fields we cannot answer you.

Retention: requests that do not lead to an order are deleted 3 years after the last contact, and entries recognised as spam after 90 days. Order and invoice data are kept for 10 years, in line with Belgian accounting and VAT rules.

If you order, we share what is needed with the carrier that delivers the goods and, where the law requires it, with the tax authorities.

Online orders and payment

When you order in the online shop, we receive your name, e-mail address, telephone number and delivery and billing address and, if you enter them, your company name and VAT number, together with the items, the prices, the delivery country, the order number, the time of the order and your browser identification (user agent). The order is saved on our web server, in a folder that cannot be reached from the internet, before you are sent to the payment page.

The payment is handled by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands, a payment institution supervised by De Nederlandsche Bank. We pass Mollie the amount, the order number, your name, e-mail address and billing address. You enter your payment details on Mollie's own page; we never see your card or bank account details. Mollie tells us whether and how the order was paid. For the payment itself Mollie processes your data under its own responsibility, as set out in its privacy statement (mollie.com/privacy).

Once the payment is confirmed, the order is sent by e-mail to our sales mailbox (Microsoft 365), and you receive an order confirmation by e-mail with the terms of sale and the withdrawal information. For the delivery we pass your name, the delivery address and, where the delivery needs it, your telephone number to our logistics partner that runs the warehouse in Germany and to the carrier.

Purpose and legal basis: to conclude and perform the contract, deliver, invoice and provide after-sales service (Art. 6(1)(b) GDPR) and to keep accounting records (Art. 6(1)(c) GDPR). The checkout is protected against abuse with the same connection count as the quote form (our legitimate interest, Art. 6(1)(f) GDPR).

Retention: paid orders are kept for 10 years, in line with Belgian accounting and VAT rules. Orders that were never paid are deleted 3 years after they were started.

7. E-mail and phone

If you e-mail or call us, we use your name, contact details and the content of your message to answer you. E-mail is handled in Microsoft 365. Legal basis: steps before or under a contract (Art. 6(1)(b) GDPR) or, for general questions, our legitimate interest in answering (Art. 6(1)(f) GDPR). We keep correspondence as long as needed for the matter and any follow-up, and for orders as long as the law requires. Calls are not recorded.

8. Who receives your data

• Our hosting provider, for the website, the logs and the stored quote requests (processor; server in the EU, Germany).
• Microsoft Ireland Operations Limited, for e-mail (processor).
• Mollie B.V., Amsterdam, for online payments (see section 6).
• For online orders: our logistics partner that runs the warehouse in Germany (processor).
• Google Ireland Limited, for Google Analytics, only as described in section 4.
• For orders: carriers and, where required by law, public authorities.

We do not sell personal data and do not use it for advertising.

9. Transfers outside the EU

Microsoft and Google may process data in the United States. Both are certified under the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (see www.dataprivacyframework.gov); in addition they use the EU standard contractual clauses.

10. Your rights

You have the right to:

• know which data we hold about you and receive a copy;
• have incorrect data corrected;
• have data erased when we no longer need it or process it unlawfully;
• have processing restricted;
• receive data you gave us in a common machine-readable format (data portability);
• object at any time to processing based on our legitimate interest, on grounds relating to your particular situation;
• withdraw consent at any time, with effect for the future.

Write to info@sonixtek.eu. We answer within one month and may ask you to confirm your identity. For the cookieless statistics we cannot single out your entries, because we do not know who you are. We do not make decisions about you based solely on automated processing.

11. Complaints

You can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be, or with the authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first.

12. Security

The whole site is served over HTTPS. Quote requests, orders and statistics are stored outside the public web folder with restricted file permissions, and only people who need them for their work have access.

13. Changes

We update this policy when the site or the law changes. The current version is always on this page. Last update: 5 October 2026.