Privacy Policy of Digi Company (trading as Digi Hosting)

At Digi Company, we are committed to protecting your personal data. In this privacy policy, we explain what data we collect, why, how we process it and what rights you have. We treat your data with care and in accordance with the General Data Protection Regulation (AVG).

1. Who we are (Controller).

Digi Company, trading as Digi Hosting, is the Controller of the processing of your personal data. We are a web hosting company based in Belgium. Contact details:

• Legal Entity: Digi Company

• CBE number: BE0749.684.888

• Address: A. Van Ooteghemstraat 7, 9050 Ghent Belgium

• E-mail: support@digi.hosting

2. What data do we process?

We process the following categories of personal data necessary for the performance of our Services:

• Contact and identification information (name, address, e-mail address, phone number);

• Login credentials (encrypted passwords, usernames);

• Technical data (IP addresses, domain names, server logs);

• Financial data (Order history, billing information, payment method);

• Communication via email, chat or support requests;

• Analysis and usage data from our Services;

• Data about posted content (images or texts on websites). We may additionally process additional data if you voluntarily provide it to us.

3. For what purposes do we process your data?

We process personal data for the following purposes:

• Providing, managing and optimizing our Services (including domain registration and email hosting).

• Customer service and technical support.

• Billing, administration and fulfillment of Agreements.

• Ensuring network security and countering fraud.

• To comply with legal and tax obligations.

• For marketing purposes (provided you have given permission, e.g., for newsletters).

• To analyze and improve our services.

4. What is the legal basis for processing?

We process your data only on the following legal bases:

• Execution of an agreement with you (Art. 6(1)(b) AVG).

• Meeting a legal obligation (Art. 6(1)(c) AVG).

• Legitimate interest (Art. 6(1)(f) AVG), for example for fraud prevention, network security and product improvement.

• Your consent (Art. 6(1)(a) AVG), for example for sending marketing communications.

5. Do we share your data with third parties (Processors)?

We only share your personal data with parties necessary for the provision of our services. These include:

• Subprocessors: Those needed for hosting infrastructure (data centers and domain name registrars).

• Government agencies: If required by law, such as for tax or criminal justice purposes.

• External Advisors: Such as accountants or legal advisors.

We enter into a Processor Agreement (VWO) to ensure that they treat your data confidentially and securely. Our current sub-processors are: OpenProvider (Netherlands), CBA Lochristi (Belgium) and Bill To Box (Belgium).

6. Is data processed outside the EEA?

In principle, we process personal data within the European Economic Area (EEA). If it is necessary to process data outside the EEA, we provide appropriate safeguards, such as the approved standard contract provisions of the European Commission.

7. How do we protect your information (Amplified)?

We take appropriate technical and organizational security measures to protect your personal data. These measures include, but are not limited to:

• Network monitoring to detect intrusions and misuse.

• Encryption of sensitive data, such as encrypted storage of passwords.

• Access control to our systems so that your data is only accessible to strictly necessary personnel.

• The use of secure connections (TLS/SSL) for our website and services.

We emphasize that absolute security on the Internet cannot be guaranteed. However, we strive for the highest possible level of security.

8. How long do we keep your data? (New and Required)

We retain your personal data no longer than is strictly necessary for the purposes for which the data was collected.

• Contract details: We keep data for as long as you are a Customer with us.

• Legal deadlines: After the termination of the agreement, we retain billing and contract data for the statutory retention period (in Belgium usually 7 years for tax documents).

• Logs and Backups: Technical logs and backups are kept for a short period of time for security and are then automatically deleted.

9. Do we collect data from minors?

We do not knowingly collect data from persons under the age of 18. If we discover that we have collected such data, we will delete it immediately. If you suspect that we have collected data from a minor, please contact us at support@digi.hosting.

10. What are your privacy rights? (Amplified)

You have the following rights regarding the processing of your personal data. You can exercise these by contacting us at support@digi.hosting.

• Right of inspection (knowing what data we have on you).

• Right of rectification (correcting incorrect data).

• Right to data erasure (deletion of your data, provided there is no legal retention requirement).

• Right to restriction of processing (temporary cessation of processing).

• Right to transferability (receiving your data in a structured format).

• Right to object (against processing based on legitimate interest).

• Right to withdraw consent (as applicable).

• Right not to be subject to automated decision-making.

Filing a complaint with the Supervisor: You also have the right to file a complaint with the supervisory authority if you believe that we are not properly complying with the AVG. For Belgium, this is the Data Protection Authority (GBA)..

11. Do we support "Do-Not-Track" signals?

Currently, we do not respond to "Do-Not-Track" signals from Web browsers because a uniform standard has not yet been developed.

12. Changes to this privacy policy.

We reserve the right to change this privacy policy. We recommend that you consult this statement regularly. In case of material changes, we will notify you via our website or by e-mail (see Article 11 of the Terms and Conditions).