Legal Architecture

1. Introduction & Data Controller Identity

Taveriq, registered at 1050, Avenue Louise 142, Bruxelles, Belgium (hereinafter referred to as "the Controller"), is committed to protecting the privacy and personal data of all website visitors, clients, and business partners in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Belgian data protection legislation.

This Privacy Protocol describes how we collect, process, store, and protect personal data when you interact with our digital ecosystem at Taveriq. By engaging with our services, you acknowledge the data processing activities outlined herein.

2. Categories of Personal Data Collected

We collect and process the following categories of personal data through our digital infrastructure:

• Identity Data: Full name, professional designation, and organizational affiliation provided through contact forms or service inquiries.
• Contact Data: Email address, telephone number, and physical address submitted during engagement initiation.
• Technical Data: IP address, browser type and version, operating system, device identifiers, and access timestamps collected automatically through server logs.
• Usage Data: Page navigation patterns, interaction timestamps, referral sources, and session duration metrics captured through analytics instrumentation.
• Communication Data: Content of inquiries, feedback submissions, and correspondence transmitted through our contact channels.

3. Legal Bases for Processing

All personal data processing activities are grounded in the following legal bases as defined under Article 6(1) GDPR:

• Consent (Art. 6(1)(a)): Where you have provided explicit, informed consent for specific processing purposes, such as marketing communications or newsletter subscriptions.
• Contractual Necessity (Art. 6(1)(b)): Processing required for the performance of a contract to which you are a party, or to take pre-contractual steps at your request.
• Legitimate Interest (Art. 6(1)(f)): Processing necessary for our legitimate interests in maintaining service quality, ensuring website security, and improving user experience, provided these interests are not overridden by your fundamental rights.
• Legal Obligation (Art. 6(1)(c)): Processing required to comply with applicable legal obligations, including tax reporting, regulatory compliance, and lawful disclosure requirements.

4. Purpose of Data Processing

Personal data is processed exclusively for the following purposes:

• Processing service inquiries and initiating business engagements;
• Delivering contracted web development, consulting, and digital infrastructure services;
• Maintaining communication channels for project coordination and support;
• Ensuring website functionality, security, and performance optimization;
• Complying with legal and regulatory obligations applicable to our operations;
• Analyzing aggregate usage patterns to improve service quality and user experience.

5. Data Retention Periods

Personal data is retained only for the duration necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Retained for 24 months from the date of submission, or until the conclusion of any resulting business relationship.
• Contractual data: Retained for the duration of the contractual relationship plus 7 years, in accordance with Belgian commercial record-keeping requirements.
• Technical logs: Server access logs are retained for 12 months and subsequently anonymized for aggregate analytics purposes.
• Marketing consents: Retained until withdrawal of consent, with a maximum retention period of 36 months from the date of collection.

6. Data Recipients & Third-Party Sharing

Your personal data may be shared with the following categories of recipients, all operating under appropriate data processing agreements:

• Infrastructure Providers: Cloud hosting and database services (subject to standard data processing agreements) for the purpose of service delivery.
• Payment Processors: Financial transaction handlers for payment processing, operating under PCI-DSS compliance frameworks.
• Analytics Services: Aggregate, anonymized usage analytics providers operating under data processing agreements ensuring GDPR compliance.
• Legal & Regulatory Bodies: Government authorities, courts, or regulatory bodies where disclosure is required by applicable law or lawful order.

We do not sell, rent, or commercially distribute personal data to third parties for their independent marketing purposes.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through the implementation of Standard Contractual Clauses (SCCs) approved by the European Commission, or by relying on adequacy decisions as published by the European Commission for the relevant destination country.

8. Your Data Protection Rights

Under the GDPR, you are entitled to exercise the following rights:

• Right of Access (Art. 15): Request confirmation of whether your personal data is being processed and obtain a copy of such data.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data or completion of incomplete data.
• Right to Erasure (Art. 17): Request deletion of your personal data where processing is no longer necessary or where you withdraw consent.
• Right to Restriction (Art. 18): Request restriction of processing in specific circumstances, including during the resolution of disputes.
• Right to Data Portability (Art. 20): Request receipt of your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests, including profiling activities.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

9. Data Security Measures

We implement appropriate technical and organizational measures to ensure the security of personal data, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256);
• Access controls with role-based authentication and multi-factor verification;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Incident response procedures with notification obligations within 72 hours of a confirmed breach;
• Employee training on data protection principles and security protocols.

10. Contact & Supervisory Authority

For any inquiries regarding this Privacy Protocol or to exercise your data protection rights, please contact our designated Data Protection Officer:

1. What Are Cookies

Cookies are small text files placed on your device when you visit our website. They serve various functions, from maintaining session state to analyzing usage patterns, and are subject to regulation under the ePrivacy Directive (2002/58/EC) as implemented in Belgian law.

2. Categories of Cookies Deployed

• Essential Cookies (Strictly Necessary): Required for core website functionality including session management, security token validation, and load balancing. These cookies cannot be disabled without compromising service integrity.
• Functional Cookies: Enable enhanced functionality such as language preference storage and interface customization. These improve user experience but are not strictly required.
• Analytics Cookies: Collect aggregate, anonymized usage data to understand visitor interaction patterns. All analytics data is aggregated and cannot be used to identify individual users.

3. Specific Cookies in Use

4. Managing Cookie Preferences

Upon your first visit, you will be presented with a Cookie Consent Banner allowing you to accept or decline non-essential cookies. Your preference is stored locally and respected across all subsequent visits. You may modify your preferences at any time by clearing your browser's local storage for this domain.

Additionally, you can manage cookies through your browser settings. Refer to your browser's help documentation for specific instructions on blocking or deleting cookies. Note that disabling essential cookies may impair website functionality.

5. Third-Party Cookie Disclosure

We do not deploy third-party advertising cookies or tracking pixels. Any analytics tools used operate in a privacy-preserving mode with IP anonymization enabled and data processing agreements in place.

1. Scope & Applicability

This Refund Directive applies to all services rendered by Taveriq as described in our published service catalog. It governs the conditions under which refunds, partial reimbursements, or service credits may be issued for services that have been contracted and partially or fully delivered.

2. Milestone-Based Refund Framework

Given the phased nature of our service delivery model, refunds are evaluated based on the completion status of project milestones:

• Pre-Initiation Cancellation: If a project is cancelled before any work has commenced (defined as the start of the first delivery sprint), a full refund of any advance payments will be issued within 14 business days.
• Partial Milestone Completion: Where work has commenced but is terminated mid-sprint, refund amounts are calculated proportionally based on the percentage of milestones completed versus total project scope, minus a 15% administrative processing fee.
• Post-Delivery Disputes: Refund requests submitted after final delivery acceptance must be raised within 30 calendar days of delivery and are subject to a technical audit to verify scope compliance.

3. Non-Refundable Elements

The following are explicitly excluded from refund eligibility:

• Third-party licensing fees, domain registrations, and hosting deposits already disbursed;
• Consulting hours and strategic scoping deliverables that have been delivered and approved;
• Custom design assets, wireframes, or prototype deliverables accepted through formal sign-off;
• Work completed under approved change orders beyond the original project scope.

4. Dispute Resolution Process

Refund requests must be submitted in writing to [email protected] with the following information: project identifier, specific milestone reference, and detailed description of the grounds for the refund request. All requests will receive a substantive response within 10 business days of receipt.

In the event of an unresolved dispute, parties may seek mediation through the Belgian Mediation Commission or submit the matter to the competent courts of Brussels, Belgium.

5. Processing Timeline

Approved refunds are processed within 14 business days of final approval, using the original payment method or an alternative method as agreed by both parties. Processing fees incurred during the original transaction are non-refundable.

1. Acceptance of Terms

By engaging the services of Taveriq ("the Provider"), whether through our website, direct communication, or written agreement, you ("the Client") agree to be bound by these Terms of Service. These terms constitute the entire agreement between the parties and supersede any prior negotiations, representations, or agreements, whether written or oral.

2. Scope of Services

Services are defined in the applicable service proposal, statement of work, or project agreement issued by Taveriq. The Provider undertakes to deliver services with reasonable skill and care in accordance with the specifications outlined in the relevant project documentation. Any modifications to the agreed scope must be documented through formal change orders signed by both parties.

3. Payment Terms & Conditions

• Invoices are issued according to the payment schedule specified in the project agreement.
• Payment is due within 14 days of invoice date unless otherwise specified.
• Late payments attract a statutory interest rate of 8% per annum plus a fixed recovery fee of EUR 40, in accordance with Belgian commercial late payment legislation.
• The Provider reserves the right to suspend work if payments are overdue by more than 14 days, with prior written notice.
• All prices are quoted in Euros (EUR) exclusive of VAT, which will be applied at the prevailing Belgian rate.

4. Intellectual Property Rights

Upon full payment of all applicable fees, the Client receives a perpetual, non-exclusive license to use all custom deliverables, code, designs, and documentation produced as part of the contracted services. The Provider retains the right to use general methodologies, frameworks, and non-client-specific knowledge gained during the engagement.

Third-party components, libraries, and frameworks incorporated into deliverables remain subject to their respective open-source or commercial licenses as specified in the project documentation.

5. Confidentiality Obligations

Both parties agree to maintain the confidentiality of proprietary information disclosed during the engagement. Confidential information includes, but is not limited to, business strategies, technical specifications, client lists, financial data, and trade secrets. This obligation survives the termination of the agreement for a period of 3 years.

6. Limitation of Liability

The Provider's total aggregate liability under any agreement shall not exceed the total fees paid by the Client for the specific services giving rise to the claim. The Provider shall not be liable for indirect, consequential, incidental, or special damages, including loss of profits, data, or business opportunity, regardless of whether such damages were foreseeable.

Nothing in these terms excludes or limits liability for fraud, gross negligence, or any liability that cannot be excluded under applicable Belgian law.

7. Warranty & Service Level

The Provider warrants that services will be performed in a professional manner consistent with industry standards. A 30-day post-delivery warranty period applies to all custom development work, during which defects attributable to the Provider's workmanship will be remediated at no additional cost.

This warranty does not cover issues arising from third-party integrations, client-side modifications, hosting environment changes, or force majeure events.

8. Termination Provisions

• Termination for Convenience: Either party may terminate with 30 days' written notice. The Client is liable for all work completed up to the termination date.
• Termination for Cause: Immediate termination is permitted in the event of material breach, insolvency, or failure to cure a breach within 14 days of written notice.
• Post-Termination: Upon termination, the Provider will deliver all completed work and cooperate in the transition of services. Confidentiality obligations and payment obligations survive termination.

9. Force Majeure

Neither party shall be liable for failure to perform obligations where such failure results from circumstances beyond reasonable control, including natural disasters, pandemics, government actions, cyber attacks, infrastructure failures, or other events constituting force majeure under Belgian law. The affected party must notify the other party within 48 hours of the force majeure event.

10. Governing Law & Dispute Resolution

These Terms of Service are governed by Belgian law, without regard to its conflict of laws provisions. Any disputes arising from or relating to these terms or the services provided shall first be subject to mediation through the Belgian Mediation Commission. If mediation fails within 60 days, disputes shall be submitted to the exclusive jurisdiction of the courts of Brussels, Belgium.