Privacy Policy

Last updated: 05/03/2026
Effective date: 05/03/2026

1. About this privacy policy

Rock Lobster bvba (Rock Lobster City Lodge) attaches great importance to your privacy. In this privacy policy we explain which personal data we process when you use our website, why we do this, with whom we share the data, how long we retain it and what rights you have.

This privacy policy applies to the use of our website and the services offered through the website.

Data Controller

Rock Lobster bvba (Rock Lobster City Lodge)
Kreeftstraat 9
2018 Antwerp
Belgium

VAT: BE 0665 688 729

Tel: 0476 566 407
E: info@rocklobster.be

2. What data we may process

Depending on how you use the website, we may process the following categories of personal data:

Contact and content data that you provide yourself (e.g. name, email address, telephone number, message content).
Technical data that accompanies your visit automatically (e.g. IP address, browser and device information, page URL, referrer).
Cookie and consent data (e.g. your cookie preferences).

3. Why we process data (purposes)

We only process personal data when there is a purpose and legal basis for doing so, for example:

Contact and follow-up of questions or requests you submit.
Security and abuse prevention (e.g. spam detection on forms).
Website analytics to improve the website (e.g. via Fathom).

4. Legal bases

Depending on the purpose, we rely on one or more of the following legal bases:

Consent.
Necessary for the performance of a contract or pre-contractual steps.
Legitimate interest (e.g. basic website security), whereby we always carry out a balancing test.

5. With whom we share data

We do not sell your personal data. We only share data when this is necessary for the operation of the website or our services, and preferably with parties acting as processors on our behalf.

Which parties these are exactly depends on the modules active on this website (see §7).

6. Retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected, taking into account legal retention obligations.

Guidelines:

Contact requests: as long as necessary for follow-up, and afterwards a maximum of 24 months.
Technical/security logs: typically 6 months.
Analytics (Fathom): maximum 36 months.

7. Modules

7.1 Web hosting and email

We use web hosting and email services to make our website and communication possible. These service providers may process personal data in the context of hosting, security and technical support.

7.2 Consent management (CookieYes)

We use CookieYes to register and apply your cookie preferences. CookieYes helps us ensure that cookies are only activated when you give consent via the cookie settings.

7.3 Analytics (Fathom)

We use Fathom Analytics to gain insight into how the website is used (e.g. pages visited, general origin of visitors). This analysis helps us improve the website.

7.4 Protection against spam and abuse (Cloudflare Turnstile)

To protect our forms and website against spam, abuse and automated bots, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc.

Turnstile checks whether an interaction on our website is made by a human and not by an automated system. For this purpose, certain technical data may be processed, such as:

IP address
browser and device characteristics
interaction data with the website

This data may be processed by Cloudflare in order to perform the security verification. Turnstile does not use tracking cookies for advertising or marketing purposes.

The processing is carried out on the basis of our legitimate interest in protecting our website and forms against spam, abuse and automated attacks.

More information about how Cloudflare processes personal data can be found in Cloudflare’s privacy policy:
https://www.cloudflare.com/privacypolicy/

7.5 Contact forms

When you fill in a form, we process the data you provide in order to handle your request and contact you.

8. International transfers (outside the EEA)

Some service providers may process data outside the European Economic Area. In such cases, we ensure appropriate safeguards in accordance with applicable data protection legislation.

9. Your rights

to access your data;
to have your data corrected;
to have your data erased;
to restrict processing;
to object to certain processing activities;
to withdraw your consent;
to lodge a complaint with the supervisory authority.

You can exercise your rights via:
info@rocklobster.be.

Complaint: you can also lodge a complaint with the Belgian supervisory authority (Data Protection Authority).

10. Security

We take reasonable technical and organisational measures to protect personal data. However, no system is completely secure.

11. Changes to this privacy policy

We may modify this privacy policy. The most recent version will always be available on this page with the date of the latest update.

12. Contact

Rock Lobster bvba (Rock Lobster City Lodge)
Kreeftstraat 9
2018 Antwerp
Belgium