VIARIS

Privacy Policy

How Viaris processes personal data under the GDPR: controller identity, GA4 behind consent, logs, your rights and the Belgian APD/GBA complaint route.

Last reviewed
11 October 2026

In brief

  • RAENBI GROUP BV is the controller for viaris.eu; the site has no accounts or payments, so processing is limited to connection logs, on-device consent state and consent-based GA4.
  • No DPO is required under GDPR art. 37; privacy queries go to privacy@autovig.eu; the only named browser-side consent third party is Google Analytics 4.
  • You can exercise GDPR rights at privacy@autovig.eu and lodge a complaint with the Belgian APD/GBA (or your local authority under art. 77).

This Privacy Policy describes how personal data is processed when you visit viaris.eu (the "Site"). It is provided under articles 12–14 of Regulation (EU) 2016/679 (the "GDPR") and the Belgian Loi du 30 juillet 2018.

Viaris is a corporate brand of RAENBI GROUP BV. The Site publishes corporate and legal information. It does not host user accounts, does not process payments and does not host user-generated content.

1. Controller identity

  • RAENBI GROUP BV
  • Registered office: Lindestraat 42, 1640 Sint-Genesius-Rode, Belgium
  • Enterprise number (KBO/BCE): 0738.879.880
  • VAT: BE 0738.879.880
  • Privacy contact: privacy@autovig.eu
  • Company website: raenbi.com

The controller is established in the European Union; no representative under GDPR article 27 is required.

2. Data Protection Officer

RAENBI GROUP BV has not appointed a Data Protection Officer. The processing described here does not meet the thresholds of GDPR article 37(1). Privacy queries, including data-subject rights requests, go to privacy@autovig.eu.

3. Categories of data and sources

Connection data

Examples IP address, timestamp, URL, status, user-agent, referrer
Source Generated when your browser requests a page

Consent state

Examples Necessary / analytics choice
Source Stored in your browser (localStorage) via the cookie banner

Audience measurement

Examples Analytics events
Source Art. 6(1)(a) consent — loads only after you accept analytics
Google Ireland Limited (processor); may be onward-transferred to Google LLC (United States)
Retention period set in our analytics property, at most 14 months (Google’s maximum for standard properties)
Yes — United States, under the EU–US Data Privacy Framework (EU) 2023/1795, on which Google LLC self-certifies, and the SCCs (EU) 2021/914 in Google’s data processing terms

Correspondence / vulnerability reports

Examples Email address and message content
Source Provided by you when you write to privacy@ or security@

We do not process special categories of data under GDPR article 9, nor criminal-conviction data under article 10. We do not perform automated individual decision-making with legal or similarly significant effects under article 22.

4. Purposes, lawful bases, recipients, retention, transfers

Delivering the Site

Data Connection data, consent state
Lawful basis Art. 6(1)(f) legitimate interest — operating a public corporate site
Recipients Our EU hosting provider
Retention Logs up to 12 months; consent state on your device until cleared
Transfers outside the EEA None

Operational security

Data Connection data
Lawful basis Art. 6(1)(f); art. 6(1)(c) where a competent authority requires preservation
Recipients Our EU hosting provider; authorities on lawful request
Retention Up to 12 months
Transfers outside the EEA None

Audience measurement

Data Analytics events
Lawful basis Art. 6(1)(a) consent — loads only after you accept analytics
Recipients Google Ireland Limited (processor); may be onward-transferred to Google LLC (United States)
Retention Default 14 months at event level
Transfers outside the EEA Yes — United States under SCCs (EU) 2021/914 and the EU–US Data Privacy Framework (EU) 2023/1795

Answering messages / CVD reports

Data Correspondence / report data
Lawful basis Art. 6(1)(f)
Recipients Internal handlers; mailbox host in the EU
Retention Up to 24 months for general mail; up to 5 years for closed CVD reports
Transfers outside the EEA None

Remembering your cookie choice

Data Consent state
Lawful basis Not transmitted to us; strictly necessary storage under art. 5(3) ePrivacy and art. 10/2 of the Loi du 30 juillet 2018
Recipients Stored only on your device
Retention Until you clear storage or change your choice
Transfers outside the EEA None

Named browser-side consent third party: Google Analytics 4 only. Hosting and mailbox hosts are described as categories established in the EU; we do not invent additional vendor legal names here.

5. Your rights

You may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is based on consent. Write to privacy@autovig.eu. We may ask for information strictly necessary to confirm your identity (art. 12(6)). We respond within one month (art. 12(3)).

6. Complaint to a supervisory authority

You may lodge a complaint with the Belgian data protection authority:

You may also complain to the supervisory authority of your habitual residence or place of work (GDPR art. 77).

7. Cookies

Cookie and tracker details are in the Cookie Policy and Cookie preferences.

8. Security and vulnerability reports

We apply technical and organisational measures under GDPR art. 32. Security reports: security@autovig.eu and the Responsible Disclosure page (including the published PGP public key).

9. Children

The Site is not directed at children. In Belgium the digital-consent age for information-society services based on consent is 13 (Loi du 30 juillet 2018, art. 7(1)).

10. Changes

The frontmatter updatedAt reflects the last revision. Material changes are signalled at the top of this page for at least 30 days before they take effect where practical.

Sources

Related legal pages