Here you can read which data we process when you visit www.grey-investigations.be or fill in a form, who receives that data, which cookies the site uses and what your rights are.
Grey Investigations (www.grey-investigations.be) is a website of Engels & Partners. Engels & Partners is responsible for what happens to your personal data on this website. In this text, ‘we’ and ‘us’ mean Engels & Partners. Varamedia BV builds and hosts the website on behalf of Engels & Partners.
For questions about your data, or to exercise your rights, email dpo@engels-partners.be.
In the intake form, you enter your first name, your surname and your email address. If you wish, you also enter your phone number, your company and a short description of your situation. Your first name, your surname, your email address and the tick box are needed to send the form.
If you request the free guide, you enter your email address and, if you wish, your first name. Your email address and the tick box are needed to send the request.
With your consent, your request reaches us by email, so that we can contact you. We also keep your request in the website's database, and you receive a confirmation by email. Varamedia BV receives a copy of the email that delivers your request to us, in its mailbox at Google.
If you use the VAT check, our server looks up the number with VIES, the European Commission's service. We do not keep that search. If you use the Google reputation check, our server sends the company name and, if you enter it, the city to Apify, which looks up that company's public listing on Google Maps. We do keep that search and its result in the website's database, so that we can answer the same search within 14 days straight away. We do not delete them automatically.
With your consent, this website loads Google Tag Manager, a Google service, and Microsoft Clarity. No measurement services are currently set up in Google Tag Manager. Clarity records, among other things, where visitors click and can make recordings of this. You give your consent in the cookie notice. Without your consent, Google Tag Manager and Microsoft Clarity do not load.
For Microsoft Clarity, Engels & Partners and Microsoft are each a controller under Microsoft's terms. Under those terms, Microsoft may also use the data Clarity collects for its own purposes, including to improve its products and to build user profiles, also for advertising. You can read more about this in Microsoft's privacy statement. According to Microsoft, Clarity recordings are kept for 30 days, and for up to 9 months for recordings saved as favourites or included in a random sample.
The site sets these cookies:
You can change your choice at any time via Cookie settings at the bottom of every page. Your choice is then deleted, together with the cookies of Microsoft Clarity, and the cookie notice appears again. You can also delete cookies through your browser settings.
The website counts how often each page is viewed. When you leave a page, your browser also sends us how long you stayed, how far you scrolled, how often you clicked and how you arrived, for example through a search engine or a link on another website. We only keep totals per page and per day. To avoid counting a page twice when you reload it, and to prevent abuse, the server briefly keeps a code derived from your IP address. That code is deleted automatically after about an hour. The counts themselves contain no data about you.
With every visit, Vercel and Supabase keep technical logs, for the operation and security of the website. Your browser loads images from Supabase's storage, through Cloudflare's network. Supabase and Cloudflare see your IP address when this happens.
To handle your request, we rely on your consent (Article 6(1)(a) GDPR), which you give by ticking the box under the form. That we also keep your request in the website's database and email you a confirmation is based on our legitimate interest (Article 6(1)(f) GDPR): handling your request properly and being able to show that you gave your consent.
For Google Tag Manager and Microsoft Clarity, we rely on your consent, which you give in the cookie notice. You can withdraw any consent at any time. What we did with your consent before you withdrew it remains lawful.
For counting visits, the code derived from your IP address and the technical logs, we rely on our legitimate interest (Article 6(1)(f) GDPR): running and securing the website, counting visits correctly and seeing how the pages are used. For the VAT check and the Google reputation check, we rely on our legitimate interest (Article 6(1)(f) GDPR): carrying out the search you ask for.
These parties process data on behalf of Engels & Partners:
In addition, Microsoft receives data for its own purposes, see Statistics and cookies. Google sees your IP address when Google Tag Manager loads. Our privacy policy on engels-partners.be explains to whom we may pass on the data from your request, for example if you hire us.
Vercel, Supabase, Cloudflare, Brevo, Apify, Google and Microsoft may also process data outside the European Economic Area, for example in the United States. For Vercel, Supabase, Cloudflare, Brevo and Apify, that transfer is based on the European Commission's standard contractual clauses or on an adequacy decision of the Commission. Google relies on the EU-US Data Privacy Framework for this. For Microsoft Clarity, standard contractual clauses apply between Microsoft Ireland and Microsoft Corporation in the United States.
You have these rights over your data. You can:
Send your request to dpo@engels-partners.be. We may ask you to confirm your identity.
If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (contact@apd-gba.be).
If we change this text, the new version will appear here. Last updated on 7 October 2026.
