We use strictly necessary storage so the site works and remembers your choices. With your permission, we also use analytics cookies from Google Analytics 4 and our self-hosted Matomo to measure how the site is used. If you reject, only strictly necessary storage is used. You can change your choice at any time.

Read our cookie policy (opens in a new tab)

Cookie preferences

You can choose which cookies you want to allow. Some cookies are essential for the website to function correctly.

Strictly necessary Required for the website to function. They cannot be disabled.
Always active
 Skip to content
Vignette2027
Notify me

Privacy policy — Belgian road vignette 2027: latest decisions

Official announcements; the texts are still drafts. No obligation is in force yet.

Data controller

RAENBI GROUP BV is the data controller for the Belgian road-vignette information sites (vignet2027.be and vignette2027.be):

  • Registered office: Lindestraat 42, 1640 Sint-Genesius-Rode, Belgium
  • Company number (KBO/BCE): 0738.879.880
  • VAT number: BE 0738.879.880
  • Privacy contact: privacy@autovig.eu
  • General contact: contact@autovig.eu
  • Company website

We have not appointed a data protection officer (DPO): the processing described here does not fall within the cases in which Article 37 GDPR requires one. Please send questions and data-subject requests to privacy@autovig.eu.

This notice is provided under Articles 12 to 14 GDPR and the Belgian Act of 30 July 2018. It describes the intended processing and is not legal advice.

Data we process

  1. Launch and tariff alerts: email address, language, hostname, optional tag, date and time of signup and the version of the consent text.
  2. Contact messages: email address, message content and the same consent details when you use the contact form.
  3. Security data: a truncated IP address to limit requests to the shared contact API (api.autovig.eu) (rate limiting). It is currently kept only in the API’s working memory (RAM) and cleared on every restart. If we store it later, at most 90 days.
  4. Strictly necessary cookie: vignette2027_root_locale_routed remembers that you were already redirected to your language on your first visit to /. It is a session cookie.
  5. Your cookie choice: stored locally in localStorage under vignette2027.cookie-consent and vignette2027.cookie-preferences. These data remain on your device for 182 days and then expire. You can change your choice at any time via Cookie preferences at the bottom of the page; clearing browser data also deletes this choice.
  6. Analytics (optional): Google Analytics 4 and our self-hosted Matomo instance measure visits only with your analytics consent; see the table below. Withdrawal stops collection and removes accessible analytics cookies.

We process no payment data, identity documents, number plates, user accounts or advertising profiles. Microsoft Clarity is not used on these sites. We take no decisions with legal effects based solely on automated processing (Article 22 GDPR).

Nature of providing data

Browsing the sites does not require an email address. Providing an email address for alerts or contact is voluntary and is neither a statutory nor a contractual requirement; it is needed only for the requested alert or reply.

  • Alerts: the email address is required to send you alerts. Without an email address, or without confirming the signup (double opt-in), alerts cannot be sent.
  • Contact form: email address and message are required to process and answer your request. Without them, the request cannot be processed via the form.

Purposes and legal bases

  • Alert signup (including double opt-in confirmation): consent (Article 6(1)(a) and Article 7 GDPR), which you may withdraw at any time.
  • Contact form (general or editorial questions): consent (Article 6(1)(a) and Article 7 GDPR), given when you submit the form.
  • General and editorial emails sent directly to contact@autovig.eu are processed on the basis of our legitimate interest in answering the requested correspondence (Article 6(1)(f) GDPR).
  • GDPR rights requests to privacy@autovig.eu: legal obligation (Article 6(1)(c) GDPR), where applicable.
  • API abuse prevention (truncated IP): legitimate interest (Article 6(1)(f) GDPR), to keep the service available and secure.
  • Language cookie and local storage of your cookie choice: strictly necessary for the site to operate (Article 5(3) of Directive 2002/58/EC and Article 10/2 of the Belgian Act of 30 July 2018).
  • Analytics cookies (GA4 and Matomo): consent (Article 6(1)(a) GDPR). You can change your choice or withdraw consent at any time via Cookie preferences at the bottom of the page. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a refusal of cookies that are not strictly necessary.

We do not sell vignettes and do not process payments on these sites.

Recipients and transfers

Processing within the European Economic Area

  • The contact API on Autovig infrastructure (api.autovig.eu), hosted in the EU, stores signup records (email, consent, confirmation status) in SQLite on our EU VPS.
  • Transactional email is sent from info@autovig.eu via LWS (Groupe LWS, email hosting in the EU), acting as a processor for email hosting. No alert email is sent until you confirm the signup (double opt-in).
  • Matomo on our own hosting in the EU: measurement data remain under our exclusive control and are never shared for advertising.
  • Hosting and email providers act as processors under the GDPR where applicable.

Transfers that may take place outside the EEA

  • Google Ireland Limited (Google Analytics 4), only with your analytics consent. According to Google’s published information on data transfers, transfers from the EEA to the United States rely on the EU–US Data Privacy Framework (DPF); for restricted transfers not covered by an adequacy decision, Standard Contractual Clauses (SCCs) apply under Google’s data-processing terms and Google’s SCCs. Copies or further details can be requested from privacy@autovig.eu.
  • Only when Cloudflare Turnstile is enabled for the contact form may Cloudflare process technical data for bot protection, including outside the EEA. According to the Turnstile privacy addendum and section 6 of the Cloudflare Data Processing Addendum, the DPF applies to eligible transfers to the United States; for restricted transfers, SCCs apply. Copies or further details can be requested from privacy@autovig.eu.

Retention

  • Contact details for alerts: until you unsubscribe or withdraw consent, otherwise at most 24 months after the last confirmed interaction.
  • Contact messages: at most 24 months.
  • Truncated IP addresses: working memory only; if stored later, at most 90 days.
  • Language cookie: session cookie, deleted automatically when you close the browser.
  • Cookie choice (localStorage): 182 days, or until changed / cleared in the browser.
  • Retention periods for GA4 and Matomo analytics cookies are listed individually in the table below.

Cookie and local-storage inventory

| Name | Purpose / category | Domain or origin | Path / scope | Lifetime | | ---------------------------------------------------------------- | ---------------------------------------- | ------------------------------------------------------ | ----------------------------- | --------------------------------------------------------- | | vignette2027_root_locale_routed | One-time language redirect, necessary | vignet2027.be, vignette2027.be (current host) | / | Session | | vignette2027.cookie-consent, vignette2027.cookie-preferences | User choice, necessary localStorage | Current origin of vignet2027.be or vignette2027.be | Entire origin; no cookie path | 182 days | | _ga, _ga_* | GA4 audience measurement, consent | Current Belgian host | / | 395 days | | _pk_id.* | Matomo visitor ID, consent | Current Belgian host | / | 13 months | | _pk_ref.* | Matomo visit-source attribution, consent | Current Belgian host | / | 6 months | | _pk_ses.* | Matomo visit/session, consent | Current Belgian host | / | 30 minutes | | mtm_consent_removed | Matomo refusal/opt-out, necessary | Current Belgian host | / | At most 182 days; may be removed earlier by site clean-up |

Tracking cookies are first-party cookies on the visited website. The Matomo collection server is separate (matomo.fast-dev.md). Optional Matomo iframe security or opt-out cookies such as matomo_sessid and matomo_ignore are not audience-measurement cookies; this integration does not embed the Matomo opt-out iframe. See the Matomo cookie list.

You can delete both cookies and site data/localStorage in your browser settings. Refusing analytics does not prevent browsing, alerts or contact.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to privacy@autovig.eu. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Do not send identity documents or payment data in your first message; we will ask only for what is needed to verify your identity.

You may also lodge a complaint with the Belgian supervisory authority:

Changes

If we make material changes, we will update this page. Please review it again when you next visit the sites.