Version 1.0 · Last updated: September 29, 2026
YUCA ("Your Ultimate Collection Agent") is the data collection and monitoring platform of iFLUX. The data controller for the personal data described in this policy is:
iFLUX NVFor all questions about privacy or this policy you can contact us at dpo@iflux.be .
This policy applies to the YUCA web application, its REST API and the public API. It describes how we process personal data of the people who use YUCA (our employees, our customers and their contacts) and of visitors of its public pages.
YUCA mainly processes environmental sensor data (e.g. groundwater levels, flows, weather data) that in itself does not relate to persons. Where we process data on behalf of a customer as part of a monitoring project, we act as a processor on the customer's instructions, as laid down in the agreement with that customer. In that case the customer's privacy policy applies as well.
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Giving you access to YUCA and providing the services agreed with your organisation | Performance of a contract |
| Securing the platform: authentication, preventing abuse, investigating security incidents | Legitimate interest (information security) and legal obligation |
| Keeping an audit trail of changes to measurement data and metadata, to guarantee data quality and traceability | Legitimate interest and performance of a contract |
| Sending service e-mails (password reset, account notifications, alerts you subscribed to) | Performance of a contract |
We do not use your data for marketing, we do not sell it and we do not use it for automated decision-making or profiling.
YUCA only uses cookies that are strictly necessary for the application to work:
We do not use analytics, advertising or tracking cookies. Because these cookies are strictly necessary, no consent is required.
We only share personal data with service providers that help us operate YUCA, and only to the extent needed. They process the data on our behalf under a data processing agreement:
Some features load content directly from third parties in your browser. These providers then receive your IP address and browser information:
When you search for an address, the search query is sent by our server to the Nominatim service of OpenStreetMap. No account data is sent along.
Measurement data may be forwarded to external systems (for example of the customer or a public authority) when the customer has asked us to do so. We may also disclose data when required by law or by a court order.
We store YUCA data within the European Economic Area. Some of the providers listed above are established outside the EEA or may process data outside it. In that case we rely on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on the Standard Contractual Clauses of the European Commission.
iFLUX operates an information security management system following ISO/IEC 27001. Among other measures:
Under the General Data Protection Regulation (GDPR) you have the right to:
To exercise these rights, contact us at dpo@iflux.be . We will answer within one month. We may ask you to confirm your identity first.
If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be).
We may update this policy, for example when we add new features or providers. The version number and date at the top of this page show when it was last changed. We will inform users by e-mail or in the application about significant changes.