Privacy Policy
1. GENERAL
1.1 Data Controller
The controller responsible for the processing of your personal data through this website is: Beam Consult BV, Geuzenstraat 22/401, 2000 Antwerp, Belgium. Crossroads Bank of Enterprises: BE1021.776.818. Email: hello@monro.eu
1.2 Scope
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit monro.eu or interact with our services. It applies to all visitors and users of the website.
1.3 Definitions
In this policy, "personal data" refers to any information that can directly or indirectly identify a natural person, including but not limited to names, email addresses, IP addresses, and online identifiers. "Processing" covers any operation performed on personal data, such as collection, storage, use, or deletion.
2. PERSONAL DATA WE COLLECT
2.1 Data You Provide Directly
When you interact with our website, you may voluntarily provide personal data through the following channels:
Contact forms: When you submit a contact form, we collect your name, email address, and any information you include in your message.
Newsletter subscriptions: When you subscribe to our newsletter, we collect your email address and, where provided, your name.
Meeting bookings: When you schedule a meeting through our booking tool, we collect your name, email address, and any additional details you provide when booking.
2.2 Data Collected Automatically
When you visit our website, certain data is collected automatically through cookies and similar tracking technologies.
This includes:
- IP address (full or anonymized, depending on the service)
- Browser type and version
- Operating system
- Referring URL and pages visited
- Date, time, and duration of your visit
- Screen resolution and device type
- Click behavior, scroll depth, and interaction patterns
2.3 Website Analytics
We use analytics services to understand how visitors interact with our website. These services process data such as page views, session duration, and traffic sources. Data may be transferred to servers outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
2.4 Session Recording and Behavioral Analysis
We use session recording and heatmap tools to analyze how visitors navigate and interact with our website. These tools may record mouse movements, clicks, scrolls, and page interactions. Personal data entered into forms is masked or excluded from recordings. The purpose is to improve user experience and website usability.
2.5 Business Identification
We use a business identification service that matches IP addresses of website visitors to publicly available company data. This processing is limited to identifying the organization associated with a visit and does not identify individual persons. The legal basis for this processing is our legitimate interest in understanding which businesses visit our website for B2B commercial purposes (Article 6(1)(f) GDPR).
3. LEGAL BASIS FOR PROCESSING
We process your personal data only when we have a valid legal basis to do so under the General Data Protection Regulation (GDPR). The legal bases we rely on are:
Consent (Article 6(1)(a) GDPR): For the placement of non-essential cookies and tracking technologies on your device. You can manage your preferences at any time through our cookie consent manager.
Performance of a contract (Article 6(1)(b) GDPR): When processing is necessary to respond to your inquiry or to take steps at your request prior to entering into a contract.
Legitimate interest (Article 6(1)(f) GDPR): For website analytics, session recording, business identification based on IP addresses, and direct marketing to existing business contacts. Our legitimate interest is to improve our website, understand our audience, and develop our B2B commercial activities. We have conducted balancing tests to ensure these interests do not override your rights and freedoms.
Legal obligation (Article 6(1)(c) GDPR): Where we are required to process personal data to comply with a legal obligation, such as tax or accounting regulations.
4. COOKIES AND TRACKING TECHNOLOGIES
4.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They serve various purposes, from enabling basic website functionality to providing detailed analytics about visitor behavior.
4.2 Types of Cookies We Use
Strictly necessary cookies: These are essential for the website to function and cannot be disabled. They include cookies that remember your cookie consent preferences.
Analytics cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often. This data helps us improve our website.
Functional cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences.
Marketing cookies: These cookies may be set to build a profile of your interests and show you relevant content on other websites.
4.3 Managing Your Preferences
When you first visit our website, a cookie consent banner is displayed, allowing you to accept or decline non-essential cookies. You can change your preferences at any time by clicking the cookie settings link in the footer of our website or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the website.
5. DATA SHARING AND RECIPIENTS
We do not sell your personal data to third parties. We may share your data with the following categories of recipients:
Analytics and tracking service providers: Third-party services that help us measure website performance and user behavior.
Session recording service providers: Tools that help us understand how visitors interact with our website through heatmaps and session replays.
Business identification service providers: Services that match visitor IP addresses to publicly available company information for B2B lead identification purposes.
Email marketing platforms: To manage and send newsletter communications to subscribers.
Scheduling service providers: To facilitate the booking of meetings and consultations.
Tag management service providers: To manage the deployment of tracking scripts and tags on our website.All third-party processors are bound by data processing agreements (DPAs) and are required to process your data in accordance with applicable data protection law.
6. INTERNATIONAL DATA TRANSFERS
Some of the third-party services we use may process personal data outside the European Economic Area (EEA), including in the United States. Where such transfers occur, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) as approved by the European Commission
- Adequacy decisions by the European Commission for countries deemed to offer an adequate level of data protection
- The EU-U.S. Data Privacy Framework, where the recipient is a certified participantYou may request further details about the specific safeguards applied to international transfers by contacting us at the address listed in Section 1.1.
7. DATA RETENTION
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The following retention periods apply:
Contact form submissions: 36 months after the last interaction, unless a contractual relationship is established, in which case data is retained for the duration of the contract plus any legally required retention period.
Newsletter subscription data: Until you unsubscribe. Upon unsubscription, your email address is removed from active mailing lists within 15 days.
Meeting booking data: 36 months after the last interaction, unless a contractual relationship is established.
Analytics and cookie data: In accordance with the retention periods set by the respective service providers. Most analytics cookies expire within 13 months.
Business identification data: Retained in accordance with the service provider's data retention policy, typically for a limited period for B2B lead follow-up.
8. YOUR RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
Right of access (Article 15): You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
Right to rectification (Article 16): You have the right to request correction of inaccurate personal data.
Right to erasure (Article 17): You have the right to request deletion of your personal data, subject to legal retention obligations.
Right to restriction (Article 18): You have the right to request that we restrict the processing of your personal data under certain circumstances.
Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object (Article 21): You have the right to object to processing based on legitimate interest, including profiling. You also have the right to object to processing for direct marketing purposes at any time.
Right to withdraw consent (Article 7(3)): Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal.To exercise any of these rights, please contact us at hello@monro.eu. We will respond to your request within 30 days. If we need additional time, we will inform you of the reason and the expected timeframe.
9. DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include the use of encrypted connections (SSL/TLS), access controls, and regular security reviews. While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or business practices. The "Last updated" date at the bottom of this policy indicates when the most recent revision was made. We encourage you to review this page periodically. Material changes will be communicated through a prominent notice on our website.
11. COMPLAINTSIf you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit):
Gegevensbeschermingsautoriteit (GBA). Drukpersstraat 35, 1000 Brussels, Belgium. Phone: +32 (0)2 274 48 00. Email: contact@apd-gba.be. Website: www.gegevensbeschermingsautoriteit.be. We encourage you to contact us first so that we can try to resolve your concerns directly.
Last updated: March 2026
