1. Controller and contacts
Commercial data is processed for The Drum Essentials, administratively hosted by Productions Associées ASBL, Rue Coenraets 72, 1060 Saint-Gilles, Belgique, CBE 0896.755.397.
For a data request, use the contact form and state “Privacy”. Administrative questions may be sent to bruxelles@smart.coop.
2. Data processed
We process data required for requests and orders: name, email address, authenticated account, payment reference, product, date, amount, taxes, refund, billing country or region, contractual consents, downloads and support exchanges. Stripe processes card data directly; this site does not store it.
3. Purposes and legal bases
- Fulfil the order and secure and deliver access: performance of the contract.
- Maintain supporting documents, the revenue ledger and administrative reports: legal and accounting obligations.
- Prevent fraud, secure the service and defend legal rights: legitimate interests, subject to individuals’ rights.
- Measure audience with Google Analytics: consent, withdrawable at any time.
4. Recipients and providers
Data is accessible only to authorised project staff and required providers: Stripe for payment and tax, Clerk for authentication, Resend for email, Neon for the private database, Vercel for hosting and private storage, Google for consented analytics, and Smart for administrative and accounting processing. These providers may process data outside the European Economic Area under their applicable transfer mechanisms and safeguards.
5. Retention
Sales evidence and accounting data are retained for the applicable statutory period, which may reach ten years. Account and access data is retained while the program and related rights are provided. Support requests are deleted or anonymised when no longer needed, subject to legal obligations or the defence of legal rights.
6. Cookies and analytics
Essential storage remembers language, cookie choice and items required for security and authentication. Google Analytics 4 loads only after consent. It measures visits, sources, devices, pages, product interactions, checkout starts, purchases and downloads without receiving names, emails, card details or Clerk account identifiers. Advertising features remain disabled. Consent can be withdrawn using the Cookie settings button in the footer.
7. Your rights
Subject to GDPR conditions, you may request access, correction, deletion, restriction or portability, object to certain processing and withdraw consent without retroactive effect. Proof of identity may be requested where necessary to secure the request.
You may also lodge a complaint with the Belgian Data Protection Authority.