Privacy policy
This privacy policy explains which personal data Gibbon processes when you visit this website, use the contact form or are a customer of ours, why we do so and what your rights are.
Last updated: 16 October 2026
01 Who is responsible?
The data controller is iReboot BV, trading as Gibbon, located at Rue Marguerite Bervoets 59, 1190 Forest (Belgium), registered with the Crossroads Bank for Enterprises under number BE 0562.736.194.
For any privacy question or to exercise your rights, email us at info@gibbon.ooo.
02 Which data do we process and why?
Contact form and email
When you fill in the contact form or email us, we process your name, your email address, the name of your company (if you provide it), the content of your message and the language in which you viewed the site.
We use this data only to answer your question, follow it up and, if you ask for it, send you a proposal or quote. We do not use it for newsletters or advertising.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering questions (Article 6(1)(f) GDPR).
The form sends your message to us by email; the website does not store it in a database. To prevent abuse, we temporarily keep your IP address for one minute to limit the number of messages per visitor.
Retention: we keep your message and our correspondence for as long as needed to handle your request, and at most two years after our last contact. If you become a customer, the periods in section 2.4 apply.
Visiting the website
When you visit the website, the server processes technical data such as your IP address, browser and device type, the page requested and the time. This is needed to display the website, keep it secure and solve technical problems.
Legal basis: our legitimate interest in a secure and properly working website (Article 6(1)(f) GDPR).
Retention: session data is deleted once your session has expired (two hours after your last visit). We keep server logs for at most 30 days.
Google Analytics
Only if you explicitly consent do we use Google Analytics 4 to understand how visitors use the website, for example which pages are viewed and for how long, which website referred you, which type of device and browser you use and roughly which country or region you are in.
Google Analytics 4 does not store IP addresses. We have disabled Google Signals and the use of data for personalised advertising, and we do not link the data to other Google services. This data does not allow us to identify you personally.
Legal basis: your consent (Article 6(1)(a) GDPR). If you do not consent, Google Analytics is not loaded. You can change your choice or withdraw your consent at any time through the , also available at the bottom of every page.
Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a processor. Google may also process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which provides adequate protection for that transfer.
Retention: Analytics data is deleted automatically after at most 14 months.
Customers
If you are a customer, we process the contact, billing and project data needed to perform our agreement, invoice you and support you. Legal basis: the performance of the contract (Article 6(1)(b) GDPR) and our legal obligations, including accounting and tax obligations (Article 6(1)(c) GDPR).
We keep this data for as long as we work together and afterwards for as long as the law requires, for example for invoices and accounting records. You can read more about our services in our terms and conditions.
Where we process personal data on your behalf in a project, for example the customers of your webshop, we act as a processor. We then make separate arrangements in a data processing agreement.
04 Who do we share your data with?
We never sell your data. We only share it with service providers we need to run the website and our services, and only as far as necessary:
- our hosting provider, which manages the website and the server;
- our email service MailerSend, which delivers the messages from the contact form;
- Google, only for Google Analytics and only if you consented;
- for customers: our accountant and the services we use for invoicing;
- public authorities, where the law requires it.
These parties may only use your data according to our instructions and are contractually bound to confidentiality and security. Where data is processed outside the European Economic Area, this only happens with appropriate safeguards, such as an adequacy decision (for example the EU-US Data Privacy Framework) or the European Commission’s standard contractual clauses.
05 Security
We take appropriate technical and organisational measures to protect your data, including an encrypted connection (HTTPS), limited access to data and protection of the contact form against spam and abuse.
06 Your rights
You have the right to:
- access your personal data;
- have inaccurate data corrected;
- have your data erased;
- have the processing restricted;
- object to processing based on our legitimate interest;
- receive your data in a common format or have it transferred (portability);
- withdraw your consent at any time, without affecting processing that took place before.
To do so, email info@gibbon.ooo. We reply within one month. If we are unsure of your identity, we may ask you to confirm it.
We do not take decisions about you based solely on automated processing.
07 Filing a complaint
If you are not happy with how we handle your data, please let us know first so we can find a solution together. You always have the right to file a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.
08 Changes
We may update this privacy policy, for example when we start using new services. The date at the top shows when it was last updated.