Legal
Privacy
What we collect, why, how long we keep it, and how to ask us to forget it. We follow the GDPR and Belgian data-protection law.
Last updated: 2026-06-22
Who is responsible
The PeppolNews desk operates this site and acts as data controller for the personal data described below. The desk can be reached at desk@peppolnews.com.
What we collect, and why
When you read the site
Pages are served through Cloudflare. Standard server logs record the request URL, the response status, an approximate region, the user-agent string, and a truncated IP address. These logs exist to detect abuse and keep the site online. They are not joined to any identity and are retained for no longer than is needed to investigate incidents.
When you subscribe to the newsletter
We process your email address and any preferences you set (audience segment, language, frequency) to send the Weekly Brief and to let you manage your subscription. The email list is managed through Loops, our newsletter processor. We store the date of subscription and a record of which issues were sent to you. We do not use these records for profiling or sell them to third parties.
When you write to us
If you email the desk, we keep the message and our reply for as long as needed to handle the request and to keep a record of corrections, source-removal requests, and tip-offs.
When you submit a form
Forms on this site may use Cloudflare Turnstile to verify that a request is not automated. Turnstile uses a privacy-preserving challenge and does not set advertising cookies.
Lawful basis
- Newsletter: your consent, given when you subscribe, withdrawable at any time.
- Correspondence: our legitimate interest in answering and keeping a record of editorial requests.
- Server logs and abuse prevention: our legitimate interest in keeping the site available and secure.
Who else processes your data
We use a small number of processors. Each is bound by a data-processing agreement and is used only for the purpose listed.
- Cloudflare: hosting, content delivery, edge logs, and bot protection.
- Loops: newsletter list management and delivery.
- Typefully: scheduling and posting our own content to social platforms. This does not process subscriber data.
Some of these processors are based outside the European Economic Area. Where that is the case, transfers rely on Standard Contractual Clauses and any additional safeguards their contracts require.
Retention
- Newsletter records: until you unsubscribe, plus a short suppression list so we do not email you again by accident.
- Correspondence: typically up to 24 months after the matter is closed.
- Server logs: short-lived, rotated by Cloudflare on its default schedule.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it elsewhere in a portable format. You can also object to processing based on legitimate interest. Send the request to desk@peppolnews.com and we will reply within one month.
If you believe we have mishandled your data you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) at dataprotectionauthority.be, or to the supervisory authority in your country of residence.
Profiling and decision-making
We do not profile readers, score them, or take any action that produces legal effects on you.
Changes
We will update this policy when the underlying processing changes. The Last updated date above always reflects the current version.