Last updated: 23 August 2026
1. Introduction
This policy explains how L'Œil au Trésor collects, uses and protects the personal data you provide when you use this website, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation, or GDPR), the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and Directive 2002/58/EC concerning privacy in the electronic communications sector.
2. Data controller
Julian Lafosse, sole trader, operating under the business name L'Œil au Trésor
Uccle, Brussels, Belgium
Enterprise and VAT number: BE 1039.108.441
Email:
Telephone: +32 472 98 56 03
Given the size and nature of the activity, no Data Protection Officer has been appointed. Any question relating to your data can be addressed directly to the contact details above.
3. What data we collect, and why
Contact requests
When you write to us through the contact form or by email, we collect your name, your email address, your telephone number if you provide it, and the content of your message.
Purpose: replying to your request. Legal basis: your consent, and the steps taken at your request prior to entering into a contract.
Appointment bookings
When you book an appointment, we collect your name, your email address, your telephone number, the date and time chosen, and any details you enter about the reason for your visit including, where applicable, the reference of a piece you wish to see.
Purpose: organising and confirming the appointment. Legal basis: the steps taken at your request prior to entering into a contract.
Browsing data
When you visit this website, technical data may be collected: IP address, browser type, pages viewed, date and time of the visit, and the site you arrived from.
Purpose: measuring audience and improving the website. Legal basis: your consent, given through the cookie banner.
4. Who has access to your data
Your data is never sold, rented or exchanged.
It may be processed by the service providers required to operate this website, acting on our instructions:
- our hosting provider, for the storage of the website and its database;
- our email provider, for the transmission of messages;
- the appointment booking service, for managing the calendar and confirmations;
- our audience measurement provider, for anonymised statistics.
Data may also be disclosed where we are required to do so by law.
Where a provider processes data outside the European Union, that transfer is governed by the safeguards provided for in Chapter V of the GDPR.
5. How long we keep it
- Contact requests: three years from the last exchange.
- Appointment data: three years from the appointment.
- Accounting records relating to a transaction: seven years, as required by Belgian law.
- Browsing statistics: a maximum of twenty-five months.
6. Security
Appropriate technical and organisational measures are taken to protect your data against loss, misuse and unauthorised modification. This website is served over an encrypted HTTPS connection, and access to the administration area is restricted and protected.
7. Cookies
This website uses cookies. Cookies that are strictly necessary for the site to function are placed without your consent; all others, in particular those used for audience measurement and for embedded third-party content, are placed only after you have consented through the banner shown on your first visit.
You may withdraw or change your choice at any time, and you may also disable cookies in your browser settings. Note that embedded content from third-party platforms, such as a social media feed, may place its own cookies and is governed by that platform's own privacy policy.
8. Your rights
Under the GDPR, you have the right to access your data, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time where processing is based on consent.
To exercise these rights, write to . We may ask you to confirm your identity before responding, and will reply within one month.
If you consider that your rights have not been respected, you may lodge a complaint with the Belgian Data Protection Authority: Autorité de protection des données, Rue de la Presse 35, 1000 Brussels, autoriteprotectiondonnees.be.
9. Changes to this policy
This policy may be amended at any time. Any change is published on this page, and the date at the top indicates the most recent update.