Nederlands
Français
English
Deutsch
This policy explains which personal data we process when you visit our website, request a demo, contact us or use Lisso, why we do it and what your rights are. It is written under the General Data Protection Regulation (GDPR).
1. Who we are
The controller for the processing described in this policy is Ulixes Consulting, [to be completed], enterprise number [to be completed].
For any question about your personal data, write to [to be completed].
2. What we collect and why
Demo and contact requests
When you request a demo or contact us through the website, we collect your name, your business, your email address, your phone number and your message. We use them to answer you and to organise the demo.
Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering questions about Lisso.
Marketing emails
If you tick the optional box on the form, we may send you news about Lisso by email. We only do this with your consent. You can withdraw it at any time by writing to [to be completed]. Withdrawing your consent does not affect what we did before.
Legal basis: your consent.
User accounts
When you use Lisso, we process your name, your email address, your password (stored hashed, never readable), your two-factor authentication and passkey data, and your preferences (language, display, sound on scanning). We need these to give you access and to provide the service agreed with your business.
Legal basis: performance of the contract.
Security logs and sessions
We keep your active sessions with the IP address and browser, so you can see where you are logged in and log out other devices. Our servers also keep technical logs. We use them to keep Lisso secure, to detect abuse and to solve problems.
Legal basis: our legitimate interest in a secure and working service.
VAT number lookups
When a user looks up a supplier's VAT number in Lisso, that number is sent to the VIES service of the European Commission, which checks it and may return the company's name and address.
Legal basis: our legitimate interest, and that of our customer, in recording correct supplier details.
3. Data that customers put into Lisso
Customers put their own data into Lisso: their staff, the contact persons of their suppliers (names, email addresses, phone numbers) and their orders. For that data, the customer is the controller and Ulixes Consulting acts as processor on the customer's behalf, under our data processing agreement.
If your data was entered into Lisso by one of our customers, for example because you are a supplier's contact person, the privacy notice of that customer applies. Please contact them first. We will help them answer your request.
4. Who receives your data
- Our subprocessors, the providers that help us run Lisso, such as our hosting provider. They only act on our instructions.
- The European Commission's VIES service, for VAT number lookups.
- Authorities, when the law requires us to share data.
We do not sell personal data.
5. Transfers outside the EU
Lisso is hosted in the European Union. Today we use no providers outside the European Economic Area. If that changes, we will use appropriate safeguards, such as the standard contractual clauses of the European Commission, and update the list of subprocessors.
6. How long we keep your data
- Demo and contact requests: as long as needed to follow up on your request, then deleted. [retention period to be set]
- Marketing consent: until you withdraw it.
- Account data: as long as your account exists. [retention period to be set]
- Sessions and technical logs: [retention period to be set]
The exact periods are still to be set and will be added to this policy.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data erased;
- restrict the processing of your data;
- object to processing based on our legitimate interest;
- receive your data in a structured, commonly used format (portability);
- withdraw your consent at any time, where we rely on it.
To exercise these rights, write to [to be completed]. We may ask you to confirm your identity first.
8. Complaints
If you think we do not handle your data correctly, please tell us first at [to be completed]. You can also file a complaint with the Belgian Data Protection Authority, www.dataprotectionauthority.be.
9. Security
We protect your data with technical and organisational measures: HTTPS everywhere, hashed passwords, two-factor authentication and passkeys, and strict separation between locations. Read more on our security page.
10. Cookies
Lisso only uses strictly necessary cookies. See our cookie notice.
11. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the current version. If we make an important change, we will let you know.