Privacy Policy of Digi Company (Digi Hosting).

At Digi Company, we are committed to protecting your personal data. In this privacy policy, we explain what data we collect, why we do so, how we process it and what rights you have. We treat your data with care and in strict accordance with the General Data Protection Regulation (AVG/GDPR).

1. Who we are (Controller vs. Processor).

1.1 Controller: Digi Company, trading as Digi Hosting, is the Controller for processing your customer data (billing, administration, support).

• Legal Entity: Kwinten Braet (Digi Company)

• CBE number: 0749.684.888

• Address: A. Van Ooteghemstraat 7, 9050 Ghent, Belgium

• E-mail: support@digi.hosting

1.2 Processor: With respect to the content (data, emails, databases) that the Customer places on Digi Hosting's infrastructure, the Customer acts as 'Processor' and Digi Hosting acts exclusively as 'Processor'. The agreements in this regard are set forth in the separate Processing Agreement (VWO). which is an integral part of our services.

2. What data do we process?

We process the following categories of personal data necessary for the performance of our Services:

• Contact and identification information: Name, address, e-mail address, phone number.

• Login credentials: User names and encrypted (hashed) passwords.

• Technical data: IP addresses, domain names, server logs (including visitor IPs to customer websites for security monitoring).

• Financial data: Order history, billing information, payment method (excluding full credit card information).

• Communication: Correspondence via email, chat or ticket support.

• Data on posted content: We store the data you place on our servers, but we do not process this content for our own purposes.

3. Purposes and Legal Bases.

We process your data only on the following legal bases:

• Performance of the Agreement (Art. 6.1.b AVG): Provision of hosting, domain registration, support and billing.

• Legal Obligation (Art. 6.1.c AVG): Tax retention obligations and cooperation with court orders.

• Legitimate Interest (Art. 6.1.f AVG): Ensuring network security, misuse detection (DDoS/hacking), and improving our services.

• Consent (Art. 6.1.a AVG): For opt-in marketing communications (newsletters).

4. Data Sharing and Subprocessors.

We only share your data with partners necessary for the performance of the Service:

• Infrastructure: CBA (Lochristi, Belgium) for data center facilities.

• Domain registration: OpenProvider (Netherlands) and relevant registries (such as DNS Belgium, SIDN, ICANN). The Customer acknowledges that certain registries are required to publish personal data in public WHOIS databases.

• Accounting: Bill To Box (Belgium) for billing processes.

• Government agencies: Only if there is a legal obligation or court order to do so.

5. Data processing outside the EEA.

We aim to process data only within the European Economic Area (EEA). For certain domain extensions (.com, .net, etc.), transfer to registries outside the EEA (e.g. United States) is necessary. In such cases, we provide appropriate safeguards in accordance with the European Commission's Standard Contractual Clauses (SCCs).

6. Security measures

Digi Hosting takes far-reaching technical and organizational measures:

• Physical security: Servers in secure Belgian data centers with 24/7 monitoring.

• Encryption: Use of TLS/SSL connections and encrypted storage of sensitive data.

• Network monitoring: Active monitoring to detect intrusions, misuse and malware.

• Access Control: Strict separation of customer data and access based on the need-to-know principle.

7. Retention periods

We do not retain data longer than necessary:

• Contract details: As long as the agreement is in place.

• Fiscal data: 7 years after invoice date in accordance with Belgian law.

• Technical logs: Server logs are maintained for up to 90 days retained unless an incident requires longer retention.

• Backups: Backups of customer data are kept according to the agreed retention cycle and then overwritten.

8. Your Privacy Rights.

You have the right to inspection, rectification, erasure (to be forgotten), restriction, portability and the right to object against the processing. Requests to do so can be addressed to support@digi.hosting. We will respond within the statutory period of 30 days.

9. Minors and DNT

We do not knowingly collect data from minors (-18 years of age). Our systems do not currently respond to "Do-Not-Track" signals from web browsers in the absence of a uniform industry standard.

10. Complaints and Supervisor

If you believe that Digi Hosting is not properly complying with the AVG, you have the right to file a complaint with the:Data Protection Authority (GBA). Press Street 35, 1000 Brusselshttps://www.gegevensbeschermingsautoriteit.be

11. Changes

Digi Hosting reserves the right to unilaterally modify this privacy policy. Substantial changes will be communicated in accordance with Article 19 of our Terms and Conditions.