embuild.be

Context

efacturatie.embuild.be is the electronic invoicing portal (e-invoicing / Peppol) of Embuild asbl, Belgium’s construction sector federation. Controller: Embuild asbl. The privacy policy is extensive (roughly 32,700 characters). The site is hosted on the Odoo.sh platform. Measurement: 10 requests, a single domain, captured on a clean browser.

Declared versus actual

The measurement shows a fully self-sufficient page. All resources — markup, styles, scripts, images, translations — load from the proprietary domain efacturatie.embuild.be. Fonts, notably, are served locally: despite the resource name google-font-DM_Sans,Kumbh_Sans, the font file is served by the site itself (this is a built-in Odoo platform feature that downloads and hosts Google Fonts locally), and there is no request to Google domains anywhere in the measurement. The Font Awesome icon set is likewise hosted locally.

There are no external domains in the measurement at all: no analytics, no Google, no maps, no advertising pixels, no session recording. No cookies are set (zero Set-Cookie). There is no consent manager — but none is required, since there is not a single third-party service or non-technical cookie for which consent would be needed. Embuild’s general policy describes cookies and consent in general terms; the page’s actual behavior does not contradict it, since there is no third-party processing.

Timing relative to consent

All requests go to the proprietary domain. No third-party resources requiring consent are present on the page; no cookies are set. For a self-sufficient page, this is the expected and correct behavior.

What cannot be claimed from the measurement

The measurement covers the e-invoicing portal page. Authorization forms and Peppol invoice submission may involve additional processing that this measurement of the public page does not cover. Server-side processing is not visible in a browser-based measurement.

Conclusion

Embuild’s e-invoicing portal is implemented exemplarily from a privacy standpoint: all resources, including Google Fonts and Font Awesome, are hosted locally on the proprietary domain, there are no external requests whatsoever, and no trackers or cookies are present. Local font hosting — precisely the measure that eliminates IP transfer to third-party recipients — is applied here by default. No violations recorded in this measurement.