Privacy notice
Version 0.1 (draft), 6 October 2026
This notice explains what personal data Gforce Networks collects through this website and in the course of its consulting work, why, and what your rights are.
Who is responsible
Gforce Networks is operated by Gilberto Torres, trading as Gforce Networks, Belgium.
Data protection contact: Gilberto Torres, [email protected].
What this notice does not cover
When Gforce Networks works for a client, for example as external DPO, fractional IT manager or security consultant, it handles personal data that belongs to that client. In those cases the client is the controller and Gforce Networks acts as processor under a data processing agreement. This notice covers only data for which Gforce Networks itself is the controller.
What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Contact form and email enquiries: name, email, company, your message | Answering your question and preparing a proposal if you ask for one | Steps before a contract at your request; legitimate interest in answering enquiries | 12 months after the last contact if no engagement follows |
| Client and business contact details: name, role, email, phone, billing details | Delivering the engagement, invoicing, accounting | Contract; legal obligation | Duration of the engagement, then 10 years for accounting records, as Belgian accounting law requires |
| Technical data: IP address, browser type, time of request | Delivering the website securely and blocking abuse | Legitimate interest in a secure website | Held by our hosting provider in short-lived logs; we keep no separate logs |
| Security vulnerability reports: reporter contact details and report content | Investigating and fixing the reported issue | Legitimate interest in security | 3 years after the report is closed |
We do not collect special categories of personal data through this website and ask you not to send any in the contact form.
Cookies and tracking
None of our own. Details are in the cookie policy.
Who receives your data
We use a small number of service providers, each bound by a data processing agreement:
| Provider | Role | Location and safeguard |
|---|---|---|
| Cloudflare | Website hosting and content delivery | EU and global network; EU-US Data Privacy Framework and Standard Contractual Clauses |
| Google Workspace | Data stored in the EU (data region set to Europe). Any access from outside the EU is covered by the EU-US Data Privacy Framework and Standard Contractual Clauses |
We share data with authorities only where the law requires it.
Transfers outside the EEA
Some providers are based in the United States. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, and on Standard Contractual Clauses otherwise.
Your rights
You can ask us for access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest. Write to the contact address above. We answer within one month.
You can also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.
Changes
We post changes on this page and update the version date above.