Collect
State the purpose, minimum fields, audience, notice, choice, and sensitive-data boundaries.
Privacy and data
GDPR and Belgian electronic-communications requirements affect tracking, marketing, and device storage.
State the purpose, minimum fields, audience, notice, choice, and sensitive-data boundaries.
Name ownership, access roles, processors, AI use, automated decisions, and data-quality checks.
List hosting locations, vendors, transfers, subprocessors, backups, and remote access.
Set retention, deletion, account closure, legal holds, audit evidence, and recovery.
Assign rights requests, security events, breach decisions, escalation, and communications.
The Belgium microsite has its own GA4 property. That separation improves reporting; it does not remove any notice or consent duty that applies to the visitor. Advertising or profiling tags require a separate decision.
Next step
Good remote delivery depends on explicit ownership. Name the Belgium users, data, vendors, languages, approvals, and release constraints before estimating the build.