Privacy statement
Last updated: November 2, 2026
This privacy statement describes how Move 37 BV processes personal data obtained through the website sprintrender.be, through quote requests and in the performance of assignments under the name SprintRender. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
Who we are
The controller is Move 37 BV, with its registered office at Wolfjagerslei 36, 2140 Antwerpen, enterprise number 0737.853.759, VAT BE0737.853.759, RPR Antwerpen, afdeling Antwerpen.
For any question about the processing of your personal data, please contact info@sprintrender.be. Move 37 BV is not required to appoint a data protection officer and has not done so.
What data we process
Data you provide: through the quote form, your name and e-mail address, and optionally your phone number, company name, the service you select, the number of images and your message. In addition, the content of our further correspondence and the plans, documents and images you send us.
Client data: billing details, such as name, address and VAT number, and the project files we create for you.
Technical data: on every visit, our hosting provider processes technical data, such as your IP address, browser type and the time of your visit, to deliver and secure the website. When the quote form is submitted, technical browser data is used to verify that it was completed by a person.
Third-party data: plans and documents may contain personal data of others, such as the name of a client or architect and the address of a building project. We receive that data from the person or company that commissions us. We process it solely to handle the request or perform the assignment, on the basis of our legitimate interest in handling that request and performing that assignment (Article 6(1)(f) GDPR). Whoever supplies such data is responsible for doing so lawfully. Where we process this data solely on behalf of a business client, we act as a processor for that client; the arrangements for this are set out in our terms and conditions.
Purposes and legal bases
Handling your request and performing the assignment: answering your request, preparing a quote and performing the assignment, including communication, delivery of the images and the project page. Where the request or assignment is your own, the legal basis is the performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR). Where you act on behalf of a company, we process your data as its contact person on the basis of our legitimate interest in communicating with that company and performing the assignment (Article 6(1)(f) GDPR).
Invoicing and accounting: to comply with our legal obligations (Article 6(1)(c) GDPR).
Security, statistics and disputes: securing the website and the form, measuring website use in aggregate, and establishing, exercising or defending legal claims, on the basis of our legitimate interest (Article 6(1)(f) GDPR).
References: we only show images of your project as a reference, on our website or on social media, if you explicitly agree (Article 6(1)(a) GDPR), and then without the addresses or names of private individuals.
The quote form fields not marked as optional are required to handle your request; without them we cannot prepare a quote. We do not use the data you provide through the quote form for direct marketing. We do not sell your data, and we do not take decisions based solely on automated processing.
Retention periods
The quote form does not store your request in a database; it sends it to us by e-mail. After that, these periods apply:
- Quote requests that do not lead to an assignment, and the correspondence about them: no longer than 12 months after our last contact.
- Correspondence, plans and project files of completed assignments: no longer than 12 months after our last contact about the assignment. If you tell us the project is complete, we delete them sooner.
- We keep invoices and accounting records for the statutory retention periods, in principle ten years, and longer where the law requires it.
If you ask us to erase your data, we erase it sooner, unless we still need it to meet a legal obligation or to establish or defend legal claims. Data needed for a pending dispute is kept until that dispute has been finally resolved. Copies in backups are overwritten in the normal backup cycle.
Project page
For clients, we place the project's images, and the plans, documents and images we exchange about it, on a restricted project page. The page is not public, not indexed by search engines and can only be reached through a unique link. Please keep that link confidential: anyone who has it can open the page.
Files we exchange through the project page, such as plans and documents, are stored with Cloudflare, within the European Union.
The project page and its files remain available for no longer than 12 months after our last contact about the project, or less if you tell us the project is complete.
Service providers and recipients
We use the following service providers. Insofar as they process personal data on our behalf, they act as processors within the meaning of Article 28 GDPR.
- Cloudflare (United States): hosting and securing the website, storing project files, spam protection of the form (Turnstile) and visitor statistics (Web Analytics).
- OVHcloud (France): e-mail hosting.
- Resend (United States): sending the e-mails generated by the quote form.
- Providers of AI models (including outside the European Economic Area): creating and editing images.
To create and edit images, we may send plans, images and instructions to AI models from external providers. These providers process the data under their own terms.
For our accounting, we share billing data with our external accountant. Where the law requires it, we share data with public authorities, such as the tax administration. They act as independent controllers.
Transfers outside the EEA
Some service providers are established outside the European Economic Area or process data there. For companies in the United States certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission's adequacy decision for that framework (Article 45 GDPR). For other transfers, the standard contractual clauses approved by the European Commission apply (Article 46 GDPR).
We will provide more information about these safeguards on request.
Security
Cookies
This website does not use cookies for advertising or to track you. We place one functional cookie (NEXT_LOCALE), and only when you choose a language yourself; automatic language detection sets no cookie. The cookie remembers your language choice for one year.
To secure the website, Cloudflare may place cookies that are exempt from consent, such as __cf_bm, which helps detect automated traffic and expires after 30 minutes, and cf_clearance, which is only placed after a security check and is typically valid for 30 minutes.
We measure visits with Cloudflare Web Analytics, which uses no cookies, builds no user profile and does not track you across other websites. Because we only use cookies that are exempt from consent, we do not ask for consent.
Your rights
You have the right to access your personal data, to rectification, to erasure and to restriction of processing. You can object to processing based on our legitimate interest. Data you have provided to us under a contract can be requested in a structured, commonly used format (data portability). Some of these rights only apply in certain cases and under the conditions set by the GDPR. Where you have given us your consent, you can withdraw it at any time; this does not affect processing carried out before the withdrawal.
You can exercise these rights free of charge by writing to info@sprintrender.be. We may ask you to verify your identity. We respond within one month of receiving your request; for complex or numerous requests, this period may be extended by two further months, in which case we will inform you within the first month.
You also have the right to lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).