Privacy Policy
Last updated: 3 November 2026
This Privacy Policy explains how BOS! Belgium Outdoor Shack ("BOS!", "we", "us") collects, uses and protects personal data of visitors and members through belgiumoutdoorshack.be and its award programme sections (BCA, TOTA, BELMOTA, BLHA). We process personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
BOS! Belgium Outdoor Shack is the data controller for the personal data described in this policy. For any privacy-related question, request, or complaint, contact us at info@belgiumoutdoorshack.be.
2. What personal data we collect
Contact form
Name, email address, callsign (optional) and the content of your message, when you use a contact form on this website.
Award programme accounts
Callsign, email address, a securely hashed password and, if you add one, your second callsign, when you register for a BOS! account (one shared account for BCA, TOTA, BLHA, BELMOTA, the Agenda and the spots page).
Uploaded activation logs
ADIF log files you upload contain callsigns, dates, times, bands/modes and reference numbers of your contacts — the same information amateur radio operators traditionally exchange and publish as part of an award programme.
ONFF logs
When you send an ONFF (WWFF Belgium) log through this website: your name, email address, callsign, your ADIF log, your photo(s) and your message. These are emailed to the ONFF log approval team, with a copy to you and to BOS!; the photos are not published.
Spots, agenda and stories
Spots you post (your callsign, the activator, frequency, mode, reference, comment), activations you announce in the Agenda, and Activation Stories with photos and comments you post. These are public by nature and shown on this website.
Shop orders
Name, email address, shipping address and order details, when you order merchandise or an award plaque by email.
Technical data
Standard web server logs (such as IP address, browser type, and access times) may be recorded automatically by our hosting provider for security and troubleshooting purposes.
3. Why we process your data
- Award administration — verifying activations/contacts, calculating rankings, and issuing digital or physical awards (legitimate interest / performance of the award programme you voluntarily take part in).
- Communication — replying to messages sent through a contact form (legitimate interest / consent).
- Public ranking — callsigns and activation/hunt counts are shown on public ranking pages and on the QRZ.com stats card (qrz.html), consistent with the long-standing practice in amateur radio award programmes of publishing callsign-based results (legitimate interest).
- Orders — processing and delivering shop or award-plaque orders (performance of a contract).
4. Who we share data with
We do not sell or rent personal data. We only pass data on where that is the purpose of a function you use:
- ONFF / WWFF — ONFF logs (with name, email address and photos) are emailed to the ONFF log approval team (onfflogapproval@gmail.com). ONFF activations you announce in the Agenda, and spots you tag with WWFF, are also sent to WWFF (wwff.co).
- ONBOTA — bunker activations you announce in the Agenda are put on the ONBOTA calendar (onbota.be).
- GMA — spots you tag with GMA (or with a programme GMA also lists) are sent to gma.rocks. Activation logs may be cross-checked or shared in summary form with partner award programmes such as GMA and WCA for mutual award verification, as described in the relevant programme's rules.
- World Wide TOTA — TOTA activation logs are exchanged with wwtota.com so your towers count there too.
- BOS! mailing list — activations announced in the Agenda are emailed to the BOS@groups.io mailing list.
- Hosting — our website is hosted by a hosting provider (Easyhost, Belgium), which processes data on our behalf strictly to operate the website.
The data we send is limited to what the receiving programme needs (callsign, reference, date/time, band/mode, QSOs — and for ONFF logs your name, email address and photos).
When your browser shows a map or loads a program library, it contacts other servers (OpenStreetMap, OpenTopoMap, Esri, cdnjs.cloudflare.com, unpkg.com), which receive your IP address. See our Cookie Policy.
5. How long we keep your data
We keep account and activation data for as long as the award programme is active and for a reasonable period afterwards, to allow award history to remain verifiable. Contact form messages are kept only as long as needed to handle your request. You can ask us to delete your account and associated data at any time (see Section 6).
6. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Request erasure of your data (subject to legitimate reasons for retaining award-history records);
- Restrict or object to certain processing;
- Receive a copy of your data in a portable format.
To exercise any of these rights, email info@belgiumoutdoorshack.be. If you believe we have not handled your data properly, you also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.gegevensbeschermingsautoriteit.be.
7. Cookies
Our website only uses strictly-necessary cookies (for logging in). See our Cookie Policy for details on which cookies we use and why.
8. Children
This website is not directed at children under 16. If you believe a child has provided us with personal data without appropriate consent, please contact us so we can remove it.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date above will reflect the most recent revision. Significant changes will be announced on this website.
Language note: this policy is provided in English, the working language of this website. A translation into Dutch or French is available on request via info@belgiumoutdoorshack.be.