Privacy Policy
Last updated: March 24, 2026
1. Data Controller
The data controller for personal data collected on the EKRAN platform is:
- Name: [TO BE COMPLETED]
- Legal form: [TO BE COMPLETED]
- Address: [TO BE COMPLETED]
- Enterprise number (BCE): [TO BE COMPLETED]
- Email: admin@ekran.be
2. Data Collected and Purposes
| Purpose | Data collected | Legal basis |
|---|---|---|
| Account creation | Email, name | Contract performance |
| Payment | Payment data (processed by Stripe) | Contract performance |
| Streaming and viewing statistics | Film ID, viewing duration, device, country | Legitimate interest |
| Transactional emails | Email (via Resend) | Consent / Contract performance |
3. Sub-processors
We use the following sub-processors for the operation of the platform:
- Supabase — Database and authentication (hosted on AWS eu-central-1, Frankfurt)
- Stripe — Payment processing (servers in the European Union)
- Bunny.net — CDN and video streaming (servers in the European Union)
- Vercel — Platform hosting (global Edge network)
- Resend — Transactional email delivery
- Google Fonts — Typography (Google servers)
4. Cookies
EKRAN uses cookies for the operation of the platform. On your first visit, a consent banner allows you to accept or reject optional cookies.
- Essential cookies: Supabase authentication session. These cookies are necessary for the operation of the service and cannot be refused.
- Analytics cookies (optional): used only with your express consent to improve the service.
5. Data Retention
- Account data: retained until the user requests account deletion.
- Viewing history: anonymized upon account deletion.
- Payment data: retained in accordance with Belgian legal obligations (10 years — accounting requirement).
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: obtain a copy of your personal data.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: request the deletion of your data.
- Right to restriction of processing: restrict the processing of your data in certain cases.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to the processing of your data in certain cases.
To exercise these rights, contact us at admin@ekran.be. You can also delete your account directly from your personal space.
7. Supervisory Authority
If you believe that the processing of your data constitutes a violation of the GDPR, you have the right to lodge a complaint with the Data Protection Authority (DPA):
- Data Protection Authority (APD/GBA)
- Rue de la Presse 35, 1000 Brussels
- Email: contact@apd-gba.be
- Website: www.autoriteprotectiondonnees.be
8. International Transfers
Some of our sub-processors may process your data outside the European Union:
- Vercel: the Edge network may process requests on servers located outside the EU. Vercel complies with the EU-US Data Privacy Framework.
- Google Fonts: loading fonts involves transferring your IP address to Google servers.
9. Changes to this Policy
We reserve the right to modify this privacy policy at any time. In case of a substantial change, we will inform you by email or via a notification on the platform. The last update date is shown at the top of this page.