Vigilant
Privacy & cookies
This notice covers vigilant.be and both practices on it. The short version: the site has no forms and sends no mail. It cannot collect anything about you, and it does not try to. The one exception is website analytics, and only if you say yes. It is written to be read, not to be survived — if anything here is unclear, write to the address below and you will get a straight answer.
Last updated: 22 September 2026
Who is responsible
The controller of your personal data is VIGILANT SRL, a société à responsabilité limitée incorporated in Belgium on 14 November 2002, with its registered office at 21 Avenue du Martin-Pêcheur, Box 70, 1170 Watermael-Boitsfort, registered with the Belgian Crossroads Bank for Enterprises and for VAT under number BE 0478.802.391.
Both practices on this site are run by the same company. Write to whichever adviser your question concerns — arnaud.goossens@vigilant.be for corporate finance, pvdbogaert@vigilant.be for facility, real estate and procurement — or to either of them if you are not sure.
What the site collects
There is no contact form anywhere on this site, and no page of it sends email. Every contact link is a plain mailto: link, which opens the mail application on your own device — your message is never posted to this site and never passes through it.
That leaves two things.
Analytics, and only if you allow it. Google Analytics 4 records aggregate usage: pages viewed, approximate location derived from a truncated IP address, device type, and how you arrived. It tells us whether the site is useful. The legal basis is your consent, and the tag is not loaded at all until you give it.
Server logs, kept by the host. Like any web server, ours records IP addresses and request metadata so the site can be kept available and secure. That happens at the hosting layer, not in anything we built. The legal basis is our legitimate interest in keeping the site running.
If you email us
Once your message arrives in our mailbox we hold it, so it is only fair to say what happens to it — even though the site had no part in sending it.
We use your name, address and whatever you chose to write to answer you and, if it goes further, to prepare and perform an engagement. The legal basis is our legitimate interest in replying to someone who has written to us, and — once a mandate is in view — the steps taken at your request before entering into a contract.
Cookies
No cookie is set when you arrive. The banner asks first, refusing is one click, and refusing is the outcome if you ignore it — no analytics tag is loaded in that case.
Your choice itself is stored in your browser's local storage under the key vigilant-consent. It never leaves your device and is not a tracking identifier.
If you accept, Google Analytics sets the cookies below. You can change your mind at any time through “Cookie settings” in the footer; withdrawing is as easy as consenting.
| Cookie | Set by | Purpose | Retention |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes one visitor from another | 2 years |
| _ga_G-9KRKEQY4JZ | Google Analytics | Maintains the session state | 2 years |
Who else sees the data
Two processors, and no more than two. The site is hosted by Hostinger on a server whose address block is registered in France, so the site and its logs stay within the European Union. Google Ireland Limited processes analytics on our behalf, and only if you have consented; Google may transfer data to the United States, relying on the EU–US Data Privacy Framework and, where that does not apply, on the European Commission's standard contractual clauses.
Our email is a separate matter from the site, and our mail provider handles it as any mail provider does.
Where an engagement requires it, we work with external partners — M&A specialists, lawyers, auditors — and share only what is necessary, under confidentiality. We do not sell personal data, we do not use it for advertising, and we run no advertising or marketing tags on this site.
How long it is kept
Correspondence. Held in our mailbox, not on this site. Kept for the duration of the exchange, then for up to 5 years where it relates to an engagement, in line with Belgian limitation periods.
Analytics. Retained by Google for 14 months, then deleted automatically.
Server logs. Kept for a short period by Hostinger — see their own privacy notice for the exact term.
Your consent choice. Stored in your browser until you clear it or 12 months pass, after which the banner asks again.
Your rights
Under the GDPR you may ask for access to your data, correction of anything inaccurate, erasure, restriction of processing, or portability. You may object to processing based on our legitimate interest, and you may withdraw consent to analytics at any time without affecting what was lawful before.
Write to arnaud.goossens@vigilant.be or pvdbogaert@vigilant.be. We answer within one month.
Complaints
If you believe your data has been mishandled, you can lodge a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — www.dataprotectionauthority.be.
Changes
If this notice changes materially, the date below changes with it and, where the change concerns cookies, the banner will ask again.