Cloketa

Privacy policy

Last updated: 18 October 2026

This policy explains how Be The Wave SRL processes the personal data collected on the website www.cloketa.eu, in particular when you contact us or request a quote. The data that customer companies and their workers record in the Cloketa application is governed by the general terms and conditions and their data processing agreement.

Controller

The controller for website data and prospect data is:

  • Be The Wave SRL, rue Albert et Louis Curvers 34, 4053 Embourg, Belgium;
  • company number (CBE) 0839.986.742, VAT BE 0839.986.742;
  • general contact: [email protected];
  • data protection enquiries: [email protected].

Data processed and purposes

Contact and quote form. When you use the contact form, we receive the subject of your request, your company name, the size of your team, your first and last name, your professional email address, your telephone number if you provide it, and your message. This data is used solely to reply to your request and, where applicable, to prepare an offer or the steps prior to entering into a contract. It is stored in the Cloketa back office (« Leads » module) and a copy is sent by email to the platform team.

Technical logs. As with any website, our hosting records server logs (IP address, date and time, page requested, browser, response code). They are used to ensure the security and proper functioning of the website, to detect abuse and to analyse incidents.

Audience measurement. If you agree, we measure visits to the website in an anonymised way, as described in the Audience measurement section.

We do not sell your data, we do not use it for advertising profiling and we do not take any automated decision concerning you.

Legal bases

  • Contact and quote requests: pre-contractual steps taken at your request and the legitimate interest of Be The Wave SRL in replying to companies that contact it (Article 6(1)(b) and (f) GDPR).
  • Technical logs: legitimate interest in securing the website and preventing abuse (Article 6(1)(f) GDPR).
  • Audience measurement: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

Data in the Cloketa application

For the workers' data recorded in Cloketa (time records, schedules, corrections, audit logs, etc.), the customer company is the controller and Be The Wave SRL acts as processor. This processing is governed by the general terms and conditions and their data processing agreement, which cover in particular documented instructions, confidentiality, security, subprocessors, assistance with data subjects' rights, breach notification, and the return and deletion of data. If you are a worker of a customer company, please address your requests to your employer in the first instance.

Be The Wave SRL remains the controller for its own processing related to the Service: management of access accounts, authentication and platform security, the contractual relationship, invoicing and debt recovery, prevention of fraud and abuse, communications about the Service and compliance with its legal obligations. This processing relies on the performance of the contract, legal obligations and the legitimate interest in securing the platform. Payments are processed by Stripe and transactional emails by Brevo.

Audience measurement

We use Matomo, an audience measurement tool self-hosted on our infrastructure with OVHcloud, in the European Union. No measurement data is passed on to third parties.

  • Only after your consent. Matomo is loaded only after you have clicked « Accept » in the audience measurement banner. If you click « Decline » or make no choice, nothing is loaded or sent.
  • No cookies. Even when accepted, Matomo works without analytics cookies and respects your browser's « Do Not Track » setting.
  • Limited data. Matomo receives only the page viewed, the date and time, limited technical information (browser type, screen size, language), certain clicks on the website's buttons and links, and an anonymised IP address. No user identifier, no advertising profile and no data entered in a form is sent to it.
  • Retention periods. Raw visit data is deleted after 90 days; aggregated reports are kept for 13 months.
  • Your choice. Your choice is remembered for 180 days in your browser's local storage, after which you are asked again. You may change it or withdraw your consent at any time using the « Audience measurement » button at the bottom of every page. Withdrawing your consent does not affect the lawfulness of the measurement carried out before.

Cookies and local storage

The website www.cloketa.eu sets no advertising or analytics cookies and embeds no third-party tracking, social media or video service: the demonstration video is hosted on the website itself.

Your browser's local storage is used solely to remember your choice regarding audience measurement. The free tools on the website (check, calculator) run in your browser and neither store nor send your answers. You can clear this choice at any time in your browser settings.

The Cloketa application, accessible after logging in, uses cookies that are strictly necessary to maintain the session and for security.

Recipients and processors

Your data is accessible only to members of the Be The Wave SRL team who need it to handle your request. We use the following service providers, bound by contractual data protection commitments:

  • OVHcloud (OVH SAS, France): hosting of the website, the application, the databases and Matomo in the European Economic Area;
  • Cloudflare: DNS resolution, reverse proxy, TLS termination and protection against attacks; Cloudflare processes traffic in transit, including IP addresses, possibly outside the European Economic Area, on the basis of the EU–US Data Privacy Framework and standard contractual clauses;
  • Brevo (Sendinblue SAS, France): sending of emails, including the copy of your request sent to the platform team.

The list of subprocessors handling application data is set out in Annex 2 to the general terms and conditions. We may also disclose data where required by law, for example to a competent authority.

Retention periods

  • Contact and quote requests: for as long as necessary to handle your request, and at most three years after the last contact, unless a contract is concluded; the data is then kept according to the rules applicable to the contractual relationship.
  • Technical logs: for a limited period, as necessary for the security of the website and the analysis of incidents.
  • Audience measurement: 90 days for raw visits, 13 months for aggregated reports; your choice is remembered for 180 days in your browser.

Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction of processing, objection and data portability. Where processing is based on your consent, you may withdraw it at any time.

To exercise these rights, write to [email protected]. We may ask you to prove your identity and will reply within the one-month period laid down by the GDPR. Some data cannot be erased immediately where a legal obligation or the integrity of the audit trail requires it to be kept.

If you consider that your rights have not been respected, you may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels (www.autoriteprotectiondonnees.be).

Security

Exchanges with the website are encrypted (TLS), access to data is restricted to authorised staff, administrator access to the infrastructure is protected by strong authentication, and backups are encrypted. As no connected system is invulnerable, we cannot, however, guarantee that all risk is excluded.

Changes

We may update this policy to reflect changes to the website, our service providers or the regulations. The date of the last update appears at the top of the page. For any question, please also see our legal notice or contact us.