Last updated 18 October 2026.
1. Who we are
Teneo BV, Legendaledreef 58, 8020 Oostkamp, Belgium, company number BE 0809.520.032, runs the SMTP relay service, the console at console.teneo.be and this website. For your account data, your invoices and your use of our website we are the controller. For the content of the messages you send through the relay we act as processor on your instructions; you remain the controller towards your recipients. Questions about privacy: the contact page or privacy@teneo.be.
2. What we process, why, and on what basis
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Account data: name, company, work e-mail, phone (optional), billing address, VAT number, login and two-factor settings | Running your account, support, invoicing | Contract | Duration of the contract plus the legal retention period for accounting records (7 years in Belgium) |
| Payment card | Billing | Contract | Handled entirely by Stripe; we never see or store the card number |
| Relay credentials, sending domains, DKIM keys, IP assignments | Delivering your mail | Contract | Until you delete them or the account closes |
| Messages in transit: envelope, headers, recipient addresses, content | Delivering your mail | Processor, on your instructions | Until delivered or bounced; queued at most 48 hours, then dropped and reported as a bounce |
| Delivery logs: recipient address, timestamps, size, sending IP, delivery or bounce result | Showing you what happened, troubleshooting, abuse prevention | Contract and our legitimate interest in a working, non-abusive relay | 365 days |
| Contact form: name, company, e-mail, phone (optional), your message | Answering you | Your request (pre-contractual steps) | Delivered to our mailbox; kept as long as the conversation is relevant, at most two years |
| Website analytics: pages viewed, device, country, referrer, the language you used, which buttons you clicked | Understanding how the site is used | Your consent (cookie bar) | Google Analytics 4, 14 months, then aggregated |
| Server and security logs of the console: IP address, time, request | Security, abuse prevention | Legitimate interest | 90 days |
We do not sell data, we do not build advertising profiles, and we do not read your messages except when you ask us to look at a delivery problem or when abuse reports oblige us to.
3. Sub-processors and recipients
The companies below process data for us. We have a data processing agreement with each of them. We add to this list before a new sub-processor touches customer data; customers with a DPA are told in advance.
| Who | What | Where |
|---|---|---|
| Amazon Web Services EMEA SARL | Hosting of our mail servers (queues, delivery logs, IP reputation), the console and this website; the servers are run by Teneo | Ireland (eu-west-1) |
| Stripe Payments Europe Ltd | Card payments and the billing portal | Ireland; card networks worldwide |
| CoManage BV | Invoicing and Peppol e-invoicing | Belgium |
| Google Ireland Ltd | Website analytics, only after your consent | Ireland; Google may transfer to the US under the EU–US Data Privacy Framework |
| Microsoft Ireland Operations Ltd | Single sign-on with Microsoft Entra ID, only if your organisation enables it | EU |
| DRH Internet Inc. (GreenArrow) | Supplier of our mail-transfer software; may access our servers over SSH for support, only after our approval in their support-ticket system, per case | United States |
Your mail itself leaves the EU only when the recipient's mail server is outside the EU, which is inherent to e-mail and under your control.
4. Cookies and similar storage
- Necessary: the console uses a session cookie and a CSRF token to keep you logged in and safe. This website stores your cookie choice in your browser (
teneo_consent) and nothing else without your consent. - Analytics, only with your consent: Google Analytics 4 cookies (
_ga,_ga_*), used with Google Consent Mode. You can withdraw consent at any time by clearing the site's storage in your browser; the bar then appears again.
We use no advertising cookies and no third-party trackers.
5. Your rights
You can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on our legitimate interest. Write to us through the contact page; we answer within one month. If you believe we handle your data wrongly, you can complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be.
6. Data processing agreement
Business customers who need a signed data processing agreement under article 28 GDPR can ask for ours through the contact page. It names the sub-processors above and our security measures.
7. Security, in short
TLS on every connection to the relay, the console and this site; encrypted storage of credentials; two-factor authentication available on every console account; access to production systems limited to Teneo staff; backups inside the EU. We report personal-data breaches to the affected customers without undue delay.
8. Changes
When this page changes, the date at the top changes with it. For material changes affecting customers we also send a notice to the account e-mail address.