1. Who is responsible for your data
This website (gembaworks.be) is operated by:
- Brazelton, trading as GembaWorks
- Waregem, Belgium
- VAT: BE 0764.903.101
- Email: daniel@gembaworks.be
GembaWorks is the data controller for personal data processed through this website, within the meaning of the EU General Data Protection Regulation (GDPR).
2. The short version
This is a static website. It has no contact forms, no user accounts, no advertising, no analytics or tracking scripts, and it sets no tracking cookies. The Audit Readiness Tools run entirely inside your own browser — nothing you type into them is ever sent to GembaWorks or to anyone else.
3. What data is processed, and why
3.1 When you simply visit the site
GembaWorks does not run analytics or tracking software on this website. However, like any website, pages are delivered by a hosting provider whose servers automatically record technical log data — typically your IP address, browser type, the page requested, and a timestamp. This happens at the hosting level and is standard practice for security, abuse prevention, and keeping the service running.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating and securing the website.
- Processor: the website is hosted by [hosting provider — e.g. Bluehost]. Server log retention is governed by that provider’s own policy.
3.2 When you email or contact GembaWorks
If you email daniel@gembaworks.be, or click a “book an intro call” link that opens your email client, the message and any details you choose to include are processed in order to reply to you and, where relevant, to discuss a possible engagement.
- Data: your name, email address, and whatever you write.
- Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b)), and legitimate interest in responding to enquiries (Art. 6(1)(f)).
- Retention: correspondence is kept only as long as needed for the enquiry or the business relationship, and any legal or accounting retention obligations that apply.
3.3 When you use the Audit Readiness Tools
The ISO 9001, IATF 16949 and VDA 6.3 Audit Readiness Tools are self-contained pages that run entirely in your browser.
- Everything you enter — company name, auditor name, scores, evidence notes, gaps, owners and dates — stays on your own device.
- The tools save your progress in your browser’s local storage so your work is still there if you close the tab. This is a technical storage function on your own machine; it is not a tracking cookie and it is not readable by GembaWorks.
- No assessment data is transmitted to GembaWorks, to any server, or to any third party. Export, import and print all happen locally.
- You can clear this stored data at any time with the tool’s Reset button, or by clearing your browser’s site data.
Because the assessment content never leaves your device, GembaWorks has no access to it and cannot recover it for you. If the results matter, use Export JSON or Print / PDF to keep your own copy.
4. Cookies
This website sets no cookies of its own — no analytics cookies, no advertising cookies, no tracking pixels. The only browser storage used is the local storage described in section 3.3, which exists solely to preserve your own work inside the Audit Readiness Tools on your own device.
5. Third-party services
5.1 Google Fonts
Pages on this site load typefaces from Google’s font servers (fonts.googleapis.com and fonts.gstatic.com). When your browser requests those files, your IP address is transmitted to Google, which may process it outside the EU. This is used to deliver the fonts; GembaWorks receives no data from it.
- Legal basis: legitimate interest (Art. 6(1)(f)) in consistent presentation of the site.
- Google’s handling of this data is described in its own privacy policy at policies.google.com/privacy.
5.2 Outbound links
This site links to LinkedIn and may link to other external sites. Once you follow such a link you are on that organisation’s platform, subject to their privacy policy and their tracking. GembaWorks has no control over, and takes no responsibility for, what they collect.
5.3 Hosting
The website is hosted by [hosting provider]. As described in section 3.1, the provider processes technical server logs on GembaWorks’ behalf.
6. Data sharing
GembaWorks does not sell personal data, does not rent it, and does not share it for advertising. Data is disclosed only where necessary to the service providers described above (hosting, email), or where required by law.
7. Your rights under GDPR
If you are in the EU/EEA you have the right to:
- request access to the personal data held about you;
- have inaccurate data corrected;
- request erasure of your data;
- restrict or object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these, email daniel@gembaworks.be. You are also entitled to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) at gegevensbeschermingsautoriteit.be.
8. Data security
The site is served over HTTPS. Because the site collects no data through forms and the tools keep assessment content on your own device, the amount of personal data in GembaWorks’ hands is deliberately minimal — which is the strongest protection there is.
9. Children
This website offers professional services to businesses and is not directed at children. GembaWorks does not knowingly collect personal data from anyone under 16.
10. Changes to this policy
This policy may be updated if the website changes — for example if a contact form, booking system, or analytics is added. The effective date below always reflects the current version.
11. Contact
Questions about this policy or about how your data is handled: daniel@gembaworks.be.