NLBook now
Buulse · Herchiva nv

Privacy statement

Last updated: 4 November 2026

At Buulse we handle your personal data with care. In this statement we explain which data we collect, why we do so, how long we keep it and what rights you have.

1. Who is responsible for your data?

The data controller is:

Herchiva nv (trading as Buulse)
Puntstraat 7a, 2250 Olen, Belgium
Company and VAT number: BE 0443.488.057
Email: info@buulse.be

For any questions about privacy, contact us at info@buulse.be.

2. Which data do we process and why?

Visiting our website

DataIP address, device and browser data, pages visited
PurposeOperation and security of the website; anonymous visitor statistics
Legal basisLegitimate interest (Art. 6(1)(f) GDPR)
Retention periodOnly as long as technically necessary; server logs are deleted automatically

Ad measurement via Meta (only with consent)

DataCookie IDs, pages visited, clicks on booking buttons, IP address, browser data
PurposeMeasuring which ads work and showing more relevant ads
Legal basisConsent (Art. 6(1)(a) GDPR)
Retention periodCookies up to 90 days; at Meta according to Meta’s policy

Bookings via our booking system (Nostium)

DataName, email address, phone number, date, number of people, comments
PurposeHandling your booking or request
Legal basisPerformance of a contract (Art. 6(1)(b) GDPR)
Retention periodUp to 2 years after your last booking; invoices 7 years (accounting law)

Contact by email or phone

DataName, contact details, content of your message
PurposeAnswering your question
Legal basisLegitimate interest or pre-contractual measures
Retention periodUp to 2 years after the last contact

Invoicing and accounting

DataName, address, VAT number, invoice data
PurposeLegal accounting and tax obligations
Legal basisLegal obligation (Art. 6(1)(c) GDPR)
Retention period7 years

Free guest Wi-Fi (no login)

DataDevice ID (MAC address), IP address, time and duration of the connection
PurposeProviding Wi-Fi and preventing misuse
Legal basisLegitimate interest (Art. 6(1)(f) GDPR)
Retention periodUp to 12 months

Camera surveillance in our venue

DataCamera footage (image, date and time)
PurposeSafety of people and property, preventing and establishing theft, vandalism and violence
Legal basisLegitimate interest (Art. 6(1)(f) GDPR) and the Belgian Camera Act
Retention periodUp to 1 month, unless the footage is needed as evidence of a crime or nuisance

We do not use your data for automated decision-making or profiling and we never sell it to third parties.

4. Who do we share your data with?

We only share data when this is necessary for the purposes above, and only with parties that comply with privacy legislation:

  • Nostium, our booking system. From our website you are redirected to their portal. Nostium acts as our processor for your booking data. Their own privacy statement also applies on their portal.
  • Cloudflare, for hosting and securing our website and for the anonymous visitor statistics.
  • Meta Platforms Ireland Ltd., only if you accept advertising cookies (see section 3). Meta also processes this data under its own privacy policy.
  • Google, which provides the fonts of our website (Google Fonts). Google receives your IP address in the process; no cookies are set.
  • Our accountant and IT supplier, for accounting and technical maintenance.
  • Police, judicial or other government authorities, when required by law (e.g. camera footage in case of a crime).

Some of these parties (such as Cloudflare, Meta and Google) may process data outside the European Economic Area, for example in the United States. This only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.

5. How do we protect your data?

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website runs over a secure connection (HTTPS). Only staff who need it for their work have access to personal data, and camera footage is only accessible to designated persons.

6. Camera surveillance

There are security cameras in and around our premises. This is indicated with a pictogram at the entrance. The cameras film the entire venue, except for the toilets. The cameras have been registered with the police, as required by the Belgian Camera Act. Footage is kept for a maximum of 1 month, unless it is needed as evidence of a crime, damage or nuisance. In that case it may be kept longer and handed over to the competent authorities.

7. Your rights

You have the right to:

  • request access to the data we hold about you;
  • have incorrect data corrected;
  • have your data erased when there is no longer a reason to keep it;
  • have the processing restricted;
  • transfer your data to another party;
  • object to processing based on our legitimate interest;
  • withdraw your consent where processing is based on it. Processing up to that point remains lawful.

Want to exercise one of these rights? Email info@buulse.be. We may ask you to confirm your identity and will reply within 1 month.

8. Filing a complaint

You can always contact us first, so we can look for a solution together. If you are not satisfied, you have the right to file a complaint with the supervisory authority:

Gegevensbeschermingsautoriteit (Belgian Data Protection Authority)
Drukpersstraat 35, 1000 Brussels
Tel. +32 (0)2 274 48 00
contact@apd-gba.be
www.dataprotectionauthority.be

You can also take the matter to the competent court.

9. Changes

We may update this statement, for example when our website or the law changes. The most recent version is always available on our website, with the date of the last update at the top.