Skip to content

OCTO and the GDPR

This overview answers common privacy questions. Our Privacy Policy provides full information about data, purposes, retention, providers and rights.

What is the GDPR

The General Data Protection Regulation (GDPR) governs the use of personal data and gives people rights over their data. Its protection is not limited to EU citizens.

How does OCTO handle privacy

Axel Van Mechelen and Robbe Heynderickx are joint data controllers for the website and free waitlist. We limit data and access to what is needed, use encrypted connections and apply retention and deletion rules.

Registration, marketing and analytics have separate choices. This page is not an independent certification.

How do you use my data

For registration and availability notifications, answering enquiries, security and recording choices. Your name and optional form answers are voluntary. We send marketing emails only after separate, confirmed consent. We do not sell personal data or use waitlist data for advertising audiences. We will provide separate privacy information before introducing product accounts, uploads, AI chats or payments.

Which cookies do you use

cookie_consent remembers your choice for six months. Only with consent do we use GA4 with _ga and _ga_<id>, both with a lifetime of six months from initial setting. Ordinary revisits do not extend these periods. Analytics remains blocked before consent and after rejection or withdrawal, including cookieless signals.

Change or withdraw your choice at any time through “Cookie settings” in the website footer, without losing access. Other functional cookies are exempt from consent only where strictly necessary. The inventory and separate analytics data retention periods are in the Privacy Policy.

Do you have data processing agreements

We enter into the required data processing agreements with providers processing personal data on our behalf. Joining the waitlist does not appoint OCTO as your processor or mean accepting a separate data processing agreement with OCTO.

Where are data processed

Our Privacy Policy identifies providers, locations and transfer safeguards. Google Analytics may process data outside the European Economic Area, including in the United States. We use applicable adequacy decisions or contractual safeguards and supplementary measures where required.

What control do I have

Use email preferences to manage marketing, waitlist participation and optional answers. You can withdraw consent and, subject to GDPR conditions, request access, correction, deletion, restriction or portability, and object to processing. Withdrawal does not make earlier processing unlawful. We normally respond within one month.

Contact: admin@octo-tool.com, or OCTO, Isabellakaai 60, 9000 Ghent, Belgium. You may complain directly to the Belgian Data Protection Authority or another competent supervisory authority.