Last updated: 14 October 2026

1. Who are we?

ES Systems and Aluplaza (aluplaza.be) are trade names of E.S. Systems BV. We are responsible for processing your personal data through this website, our client portal and our services.

E.S. Systems BV, registered office: Waterleidingstraat 1 bus 2, 3550 Heusden-Zolder, Belgium
Business address: Brancardiershof 13, 3550 Heusden-Zolder, Belgium
Company number: BE 0697.973.594 (RLE Antwerp, Hasselt division)
Email: info@essystems.be — phone: +32 470 10 12 12

For any privacy question, contact us at info@essystems.be.

2. What data do we process, why, and on what legal basis?

Contact and quote requests. Through the contact form, email or phone: name, email address, phone number, region, your VAT number if given, and your message. We use this to answer your question and prepare a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Dealer applications. Company name, contact person, email address, phone number, working region, VAT number and your message, to assess a possible partnership. Legal basis: Art. 6(1)(b) GDPR.

Customers and orders. Name, company details, VAT number, billing and delivery address, email address, phone number, order and payment details, and our correspondence, including orders placed through our webshop aluplaza.be. We use this to carry out, deliver and invoice your order and to provide service. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legal accounting and tax obligations (Art. 6(1)(c) GDPR).

Client portal. For dealers and customers with an account: name, email address, company, language, an encrypted password, your orders, notifications and when you viewed an order. This is needed to run the portal and keep it secure. Legal basis: Art. 6(1)(b) GDPR and our legitimate interest in security (Art. 6(1)(f) GDPR).

End-customer data. If you, as a dealer, enter details of your own customer (for example a name, phone number or delivery address), we only use them to carry out and deliver that order.

Job applications. Your CV, motivation and contact details that you email us, to assess your application. Legal basis: Art. 6(1)(b) GDPR.

Newsletters and commercial messages. Only if you subscribed, or as an existing customer about similar products. Every email contains an unsubscribe link. Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).

Visiting the website.

Cookie-free statistics through Plausible, on our own server. Plausible does not store IP addresses and does not build profiles. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Google Analytics and Google Ads, only if you consent through the cookie banner. Legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via "Cookie settings" at the bottom of every page.
Google reCAPTCHA against spam, only when you fill in a form. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Technical server logs (such as IP address and browser), kept briefly for security and troubleshooting. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Read more about cookies in our Cookie policy.

3. Who do we share your data with?

We never sell your data. We work with these service providers, who only process your data on our instructions:

Hetzner Online GmbH (Germany): hosting of the website, client portal, database and files.
Resend (United States): sending emails, such as contact form messages, order confirmations and account emails.
Google (Google Ireland Ltd. and Google LLC): Google Analytics, Google Ads and Google Tag Manager (only with consent) and Google reCAPTCHA.
onFact (Belgium): quotes, order forms and invoicing.
Carriers and installation partners: only what is needed for delivery or installation.

We may also share data with our accountant or with authorities when the law requires it.

4. Transfers outside the European Union

Google and Resend may process data in the United States. These transfers rely on the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.

5. How long do we keep your data?

Contact and quote requests with no follow-up: up to 2 years after the last contact.
Customer, order and invoice data: for the duration of the customer relationship; accounting records for 10 years (legal obligation).
Client portal account: for the duration of the partnership; afterwards we delete it within one year, except what we must keep by law.
Job applications: up to 6 months after the selection; longer (up to 2 years) only with your consent.
Google Analytics data: up to 14 months.
Cookies: see our Cookie policy.

6. Security

Our servers are located in the EU. The website and portal use an encrypted connection (HTTPS), passwords are stored encrypted, and only staff who need it have access to your data. If a data breach puts you at risk, we notify the Belgian Data Protection Authority within 72 hours and, where necessary, you as well.

7. Your rights

You have the right to access, correct or delete your data, to restrict processing, to data portability and to object to processing — always to direct marketing. Where you gave consent, you can withdraw it at any time; for cookies, use "Cookie settings" at the bottom of every page.

Send your request to info@essystems.be. We reply within one month and may ask you to confirm your identity.

If you are not satisfied, you can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be, or with the supervisory authority in your own country.

8. Other

We do not make decisions about you based solely on automated processing. Our website is not intended for children under 16. If we change this privacy policy, you will see it from the date at the top.

Privacy policy