Privacy Notice and Data Governance Framework

LUMENDA GROEP is committed to safeguarding the privacy and confidentiality of personal data processed through our landing page services. This Privacy Notice outlines our rigorous compliance protocols in alignment with enhanced digital regulations effective as of 2026-09-13. As a data controller, we determine the purposes and means of processing personal information, ensuring absolute transparency, accountability, and adherence to stringent continental privacy frameworks. By interacting with our digital assets, you acknowledge the practices and procedures described herein.

Information Collection Categories

We systematically collect various categories of information to facilitate our service offerings, optimize user experience, and fulfill contractual obligations. The specific data elements gathered depend upon your direct interactions with our landing page and voluntary submissions.

  • Identity and Contact Data: Includes first name, last name, professional title, corporate affiliation, email address represented by [email protected], telephone contact 32 491 27 90 33, and physical business address located at Raveschoot 22, 9080 Lochristi, Belgium.
  • Technical and Device Information: Comprises internet protocol addresses, browser types and versions, time zone settings, operating system environments, and hardware identifiers.
  • Interaction and Usage Metrics: Encompasses navigation paths, clickstream data, page response times, download errors, and duration of visits to specific service modules.
  • Marketing and Communication Preferences: Captures individual choices regarding promotional outreach, newsletter subscriptions, and preferred communication channels.

Purposes of Processing Operations

Every piece of data collected by LUMENDA GROEP is processed strictly for specified, explicit, and legitimate purposes. We do not engage in incompatible secondary processing. Our primary operational objectives include:

  • Executing specialized service agreements and managing pre-contractual commercial relationships initiated via our landing page.
  • Providing customer support, responding to inquiries, and delivering bespoke service documentation.
  • Optimizing landing page performance, enhancing structural security, and conducting technical diagnostics.
  • Fulfilling legal obligations, regulatory reporting requirements, and responding to lawful requests from competent public authorities.
  • Delivering targeted marketing communications, provided explicit prior consent has been granted by the data subject.

Legal Bases for Data Utilization

Our processing activities are strictly anchored in valid legal grounds recognized under applicable regulatory standards. We rely on the following primary legal foundations:

  • Performance of a Contract: Processing is strictly necessary for the execution of a service contract to which the user is a party or for implementing pre-contractual measures.
  • User Consent: Freely given, specific, informed, and unambiguous indication of agreement for processing personal data for one or more defined purposes, such as direct marketing.
  • Legitimate Interests: Pursuing our corporate goals of maintaining network security, preventing fraudulent activities, and improving commercial offerings, provided such interests are not overridden by fundamental user rights.
  • Legal Compliance: Processing required to satisfy statutory mandates imposed by applicable governing legislation.

Data Retention and Archival Lifespans

Personal information is retained only for the duration strictly necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Once the retention period expires, data is securely deleted or anonymized.

  • Contractual Records: Maintained for a statutory duration following the termination of the service agreement to address potential liability claims.
  • Marketing Consent Logs: Stored until the user withdraws consent or requests opt-out, following which minimal suppression data is retained to respect the preference.
  • Technical and Log Data: Automatically purged on a rolling cycle unless required for active security investigations.

Third-Party Disclosures and Data Transfers

LUMENDA GROEP maintains strict confidentiality protocols and shares personal data with external entities solely under strictly regulated conditions. Authorized third parties may include:

  • Trusted IT infrastructure providers, cloud hosting services, and technical contractors bound by stringent data processing agreements.
  • Professional advisors, including legal counsel, auditors, and financial consultants bound by statutory confidentiality duties.
  • Law enforcement or regulatory bodies when mandated by applicable legislation or court orders.

Any international transfer of data outside the European Economic Area is executed using approved contractual safeguards, such as Standard Contractual Clauses, ensuring an equivalent level of data protection.

Security Measures and Infrastructure Protection

We implement robust technical and organizational security measures designed to protect personal data against accidental, unauthorized, or unlawful destruction, loss, alteration, disclosure, or access. Our security framework incorporates encryption technologies in transit and at rest, multi-factor authentication protocols, continuous vulnerability assessments, and strict role-based access controls limiting data availability solely to authorized personnel.

Data Subject Rights and Exercise Protocols

Under contemporary privacy regulations, individuals possess comprehensive rights concerning their personal data processed by LUMENDA GROEP. You are entitled to exercise the following prerogatives:

  • Right of Access: Obtain confirmation regarding whether your data is processed, along with a copy of the specific information held.
  • Right to Rectification: Request the correction of inaccurate or incomplete personal data without undue delay.
  • Right to Erasure: Demand the deletion of personal data when it is no longer necessary for the purposes collected, or when consent is withdrawn.
  • Right to Restriction: Temporarily suspend processing activities under specific contested circumstances.
  • Right to Data Portability: Receive your provided data in a structured, commonly used, and machine-readable format.
  • Right to Object: Challenge processing operations grounded on legitimate interests or direct marketing profiling.

To exercise any of these rights, or for inquiries regarding this policy, please reach out to our privacy management team via email at [email protected] or through postal correspondence directed to Raveschoot 22, 9080 Lochristi, Belgium. We commit to responding to all legitimate requests within statutory timeframes.