Privacy policy

Status, scope and contact

Review draft · Version 2026-11-05.1 · 5 November 2026. This document covers MOVERA’s English-language corporate website and the processing described below. It is not a statement of complete legal compliance. Supplier locations and transfer arrangements, retention approval and operational privacy procedures still require MOVERA’s confirmation.

The controller is MOVERA, as confirmed by the website owner, registration number BE1025.691.262, at Interleuvenlaan 62, 3001 Leuven, Belgium. The responsible privacy contact is info@movera.global; you may also call +32 16 394 700. A designated DPO has not been established in the available configuration; this does not establish that one is not required.

Information and sources

For enquiries you provide your name, email and message, and optionally organisation and telephone. For privacy requests you provide a reply email, request type and description, with an optional name. The service records a random submission reference, receipt time, notice version, language, processing status and necessary case evidence. We do not ask for identity documents in the initial privacy form. Avoid sending sensitive information that is not needed to explain your request.

Your browser communicates an IP address and request metadata to the website’s hosting and delivery services. Theme choices, navigation restoration and privacy choices may be saved on your device. These are not automatically anonymous simply because a name is absent. The website does not offer newsletter, recruitment, CV upload, gated downloads, account creation or chat collection in its current public pages.

Purposes and legal basis

Enquiries are used to understand and reply to your request and maintain necessary correspondence. The proposed basis is legitimate interests in responding to business enquiries (GDPR Article 6(1)(f)); steps at your request before a contract may instead use Article 6(1)(b) where applicable. These bases require confirmation for MOVERA’s actual handling, including a legitimate-interest assessment where used. You are not asked to consent to the policy or subscribe to marketing to submit an enquiry.

Privacy requests are collected to assess and fulfil applicable rights and maintain necessary accountability evidence, principally legal obligation under GDPR Article 6(1)(c) when applicable. Proportionate verification may be requested later before disclosure or erasure. Website security and delivery serve the legitimate interest in a safe functioning service, subject to the actual provider arrangements. Optional third-party media relies on your affirmative choice before an embedded provider receives a request.

Required and optional information

Name, email and message are required for the contact form. Organisation and telephone are optional. A reply email, request type and description are required for the privacy form; name is optional. Without the required details the form cannot route your request. You can instead contact MOVERA by email or telephone. Rejecting optional media does not prevent either form from working.

Recipients, processing locations and transfers

Contact details and messages are stored in the website’s restricted Lovable Cloud enquiry records. The configured Lovable managed email service sends the enquiry to info@movera.global and sends an acknowledgement to the visitor. That creates business-mailbox and email-service copies as well as the website record. Privacy requests are stored as restricted cases in Lovable Cloud for review; the current form does not send privacy-request contents by email.

The website uses Lovable hosting and asset delivery, with Cloudflare delivery/security evidenced on the public domain. The public deployment also contains hosting-added events code whose purposes, payloads and controls remain under review. Fonts are bundled with the website rather than loaded from Google Fonts after this update. YouTube and Google Maps are supported only through the optional media gate; neither is currently embedded in a published page. A normal external news link contacts its publisher only when you follow it.

Supplier contracts, subprocessors, processing/support/backup locations and any international-transfer safeguards have not been confirmed. MOVERA must verify these arrangements, including applicable GDPR Chapter V safeguards, before this review draft is approved. A hosting-region setting alone would not establish every recipient’s location. No EU-only hosting or transfer protection is asserted here.

Retention and disposal

Enquiry and correspondence retention must be limited to the period justified by responding to and following up the request, any resulting relationship, and specific applicable legal duties or claims. Privacy-case evidence must be limited to what is needed to fulfil rights and demonstrate the response. MOVERA has not yet approved exact periods or a disposal owner; no automated destructive cleanup of existing data has been enabled. These criteria require an operational review and schedule, not indefinite retention by default.

Privacy choices on this origin expire after 180 days or cease to grant permission when their policy version changes. A saved theme preference has no application-defined expiry. Navigation restoration is session storage. See the Cookie policy for the observed storage register. Mailbox copies, supplier records, backups and versions require their own verified disposal processes. A browser reset or unsubscribe is not erasure of these records.

Your rights and requests

Where GDPR applies, you may request access, correction, erasure, restriction, portability where applicable, or object, including to processing based on legitimate interests, subject to the conditions in Articles 15–22. Withdraw optional media permission through Cookie preferences; withdrawal does not affect the lawfulness of earlier processing. Use the dedicated Privacy requests page or contact info@movera.global. No optional-cookie or marketing consent is required.

MOVERA must verify the request proportionately before releasing personal data or carrying out erasure. Receipt is not completion. Under GDPR Article 12(3), the ordinary response period is one month, with a possible further two months where justified; any extension and reasons must be communicated within the first month. Saudi implementing rules use a different period where applicable; UAE timing and applicability require legal confirmation. You may complain to the Belgian Data Protection Authority (dataprotectionauthority.be) or another competent authority. Applicable rights, exceptions and complaint channels depend on your circumstances.

Security, profiling and children

The enquiry and rights-case records have no public or ordinary signed-in read access. Inputs are validated on the server, same-origin protections apply, and repeated submissions are restricted. These controls do not eliminate all risk. Access to business mailboxes, hosting logs and supplier systems remains subject to separate organizational controls requiring review.

No advertising personalization, customer matching, analytics SDK or automated decisions about website visitors is configured in the reviewed application code. Descriptions of mobility research in news articles do not establish automated decision-making on this website. The website is directed at business audiences and does not intentionally offer a children’s service. Contact MOVERA if you believe unnecessary children’s data has been provided.

Jurisdictions and changes

The EU GDPR is relevant to this Belgium-based website’s personal-data processing. The applicability of UAE Federal PDPL, DIFC or ADGM rules, and Saudi PDPL depends on establishments, individuals and actual processing activity, not merely a globally accessible website. Gulf operations, free-zone status and relevant data flows have not been established and require MOVERA’s review.

Material changes to purposes or providers require review of this notice and the consent registry before optional integrations are enabled. Earlier notice versions are retained in the project’s policy history. This review draft must be updated when the outstanding organizational facts are confirmed.