Privacy policy
Privacy policy.
Data controller
Data collected through this site is processed by Work-Out, sole trader (natural person), registered with the CBE under number 1042.712.782, with its registered office at Avenue Benjamin Jansen 9, 1160 Auderghem (Brussels-Capital Region), Belgium.
For any question about your data, or to exercise your rights : zacharie.cook@workoutbe.be or jules.geskens@workoutbe.be.
Data collected
This site collects nothing without your knowledge. The only collection happens when you deliberately fill in a contact form.
The fields concerned are :
- your name ;
- your company name ;
- your work email address ;
- your phone number, if you choose to provide it ;
- the nature of your need and the headcount concerned ;
- the content of your message ;
- the date and time of submission.
Our host additionally records, for technical reasons and to guard against automated submissions, the IP address from which the form was sent.
No browsing is tracked : no audience measurement, no profiling, no advertising. See the Cookies page.
Purposes and legal basis
Your data is used solely to :
- answer your enquiry and prepare a proposal ;
- follow up on the commercial exchange that may result ;
- meet our accounting and tax obligations if a service is agreed.
The legal basis is legitimate interest (art. 6(1)(f) GDPR) : you contact us in a professional capacity, with a view to a business-to-business service, and the processing is limited to what that exchange requires.
We will send you no unsolicited marketing. Should we ever set up a newsletter, it will rest on your explicit consent, collected separately and withdrawable at any time.
Recipients
Your data is neither sold, rented nor transferred. It is accessible to the two founders of Work-Out and to the technical providers strictly necessary to run the site :
- Netlify, Inc. — site hosting and form processing (Netlify Forms). Company established in the United States.
- Google Ireland Limited — business email (Google Workspace), through which notification messages pass. Data processed within the European Union.
Transfers outside the European Union
Form submissions are stored on Netlify servers in the United States. This transfer is governed by the Standard Contractual Clauses adopted by the European Commission and incorporated into the data processing agreement entered into with Netlify. These clauses are the appropriate safeguard provided for in article 46 of the GDPR.
No other transfer outside the European Union takes place. The site calls on no third-party service : the typefaces are hosted on our own domain, so that no connection data is passed to an external provider when you simply browse the pages.
Retention periods
- Enquiry with no follow-up : three years from the last contact, after which the data is deleted.
- Established commercial relationship : the duration of the relationship, then ten years for accounting records, in accordance with article III.86 of the Belgian Code of Economic Law.
Your rights
The GDPR grants you the following rights over your data :
- access : obtain a copy of the data concerning you ;
- rectification : correct inaccurate data ;
- erasure : request its deletion ;
- restriction : freeze its use ;
- portability : receive it in a reusable format ;
- objection : object to processing based on legitimate interest ;
- withdrawal of consent, where processing rests on it, without affecting what was done beforehand.
To exercise these rights, write to zacharie.cook@workoutbe.be or jules.geskens@workoutbe.be. We reply within one month. Proof of identity may be requested in case of reasonable doubt.
Complaints
If you consider that your data is not being processed lawfully, you may lodge a complaint with the Belgian supervisory authority :
- Data Protection Authority (APD / GBA)
- Rue de la Presse 35, 1000 Brussels
- contact@apd-gba.be
- www.dataprotectionauthority.be
Last updated : 9 October 2026.