Your data, handled the way we would build it for a client.

Next Frontier Innovation BV, trading as /second, with its registered office at Leeuwkenshof 13, 3370 Boutersem, Belgium and enterprise number 0799.480.631 (RPR Leuven), is the controller of the personal data collected through this website. For anything about your data, write to thomas@slashsecond.com or use the privacy request form. We have not appointed a data protection officer, as the law does not require one for us; this address reaches the person responsible.

When you contact us through the form, the /second brain box or by email: your name, role, email address, company, its website, industry and size range if you give them, what you are looking for, where you are with it, the offer you picked if any, your message, and the fact and time of your consent. If you arrived through a campaign link, the campaign tags from that link (never personal data). We use this only to reply to you and, if it leads somewhere, to prepare a possible collaboration. Legal basis: your consent, and steps you ask us to take before a contract. Name, email, company, role, size, stage and message are needed to reply properly; without them we cannot handle the enquiry.

The /second brain box is not an AI system today. What you type is added to the contact form and reaches a person on our team, like any enquiry. No software analyses it and no model is trained on it. Before /second brain goes live, this notice will describe exactly how it works.

When you exercise a privacy right: your name, email address, the request and any details you add. We use them to handle the request and to show we handled it. Legal basis: our legal obligation under the GDPR.

To protect the forms against abuse: a salted, irreversible hash of your IP address, used only to count requests, and deleted within 24 hours. Legal basis: our legitimate interest in keeping the site secure.

Technical logs: our hosting keeps standard technical logs; our own application logs record reference numbers and the type of request, never your name, email address or message. Legal basis: legitimate interest in running a secure, working website.

/second analytics, only if you switch on Analytics: our own measurement tool, not a third party. It records the pages you view and in which order, the website or campaign that brought you here, whether you visited before and how often, how long you engage with each page and how far you scroll, clicks on key buttons and links, which form steps you complete (never what you type), page speed measurements, your browser, operating system and device type, screen and window size, language and time zone. It uses a random visitor id stored in your browser for 13 months and a visit id that ends with your visit. It does not store your IP address, does not identify you by name, and shares nothing with anyone. Legal basis: your consent. If you withdraw it, measuring stops and the ids are deleted from your browser, so earlier data can no longer be linked to you.

Details of every tool are in the cookie notice.

We do not add you to a newsletter, sell your data, build a profile to target you, or make automated decisions about you.

• Microsoft (Microsoft Ireland Operations Limited, Microsoft Azure): stores enquiries, privacy requests, consent records, analytics events and logs in the West Europe (the Netherlands) region, and sends the notification and confirmation emails through Azure Communication Services Email with its data kept in Europe, from an Azure-managed sending domain (azurecomm.net). The website pages themselves are served by Azure Static Web Apps, served from Microsoft's global edge network; pages contain no personal data. Microsoft acts as our processor under its Data Protection Addendum, including the EU standard contractual clauses for any support access from outside the EU.
• Combell NV (Belgium): hosts our mailbox thomas@slashsecond.com, where your enquiry arrives and where we answer it.

We share nothing with anyone else, unless the law requires it.

• Enquiries: deleted automatically after 24 months at the latest, sooner if you ask. We clear enquiry emails from our mailbox on the same schedule.
• Privacy requests: kept 36 months, to show how we handled them, then deleted automatically.
• Consent records: kept 12 months, then deleted automatically.
• /second analytics events: kept 13 months, then deleted automatically.
• Abuse-protection hashes: deleted within 24 hours.
• Application logs: 90 days.
• If we end up working together, what becomes part of that relationship is kept as long as the relationship and our legal obligations require, for example accounting rules.

You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, to stop any direct marketing, and to withdraw consent at any time without affecting what happened before. Use the privacy request form or email thomas@slashsecond.com. We reply within one month. To make sure a request really comes from you, we may ask you to confirm it from the email address we have on file; we will not ask for identity documents unless there is no other way.

You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, dataprotectionauthority.be (opens in a new tab).

See the cookie notice for everything this site stores or loads on your device, and use Cookie settings at the bottom of any page to change your choice.

If this notice changes, the new version is published here with a new date. Material changes never apply retroactively to data you have already shared. Questions: thomas@slashsecond.com.