GDPR Compliance

Last updated: 1 January 2025

Our Commitment to GDPR

SC LINKHIPU S.R.L. is fully committed to compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Belgian Act of 30 July 2018. This page summarises our GDPR position. Full details are in our Privacy Policy.

1. Data Controller

SC LINKHIPU S.R.L. is the Data Controller for personal data processed in connection with this website and our business activities.

Contact: office@linkhipu.be • +40-721-292-841 • Brussels, Belgium

2. The Six GDPR Principles We Apply (Article 5)

Principle	How We Apply It
Lawfulness, fairness and transparency	We always have a documented lawful basis and inform individuals about processing through this policy
Purpose limitation	Data is collected for specified purposes and not reused incompatibly
Data minimisation	We collect only what is necessary — our contact form collects no personal data by design
Accuracy	We take reasonable steps to keep data accurate and up to date
Storage limitation	Data is retained only as long as necessary — see retention table in our Privacy Policy
Integrity and confidentiality	ISO/IEC 27001 certified security controls; TLS encryption; access controls

3. Lawful Bases

• Contract (Art. 6(1)(b)) — delivering contracted services
• Legal obligation (Art. 6(1)(c)) — Belgian statutory accounting and invoicing requirements
• Legitimate interest (Art. 6(1)(f)) — responding to business enquiries; website security monitoring

We do not rely on consent as a lawful basis for any current processing activity. No consent pop-ups or banners are used on this website.

4. Your Rights Under GDPR

Right	Article	What It Means
Access	Art. 15	Obtain a copy of personal data we hold about you
Rectification	Art. 16	Have inaccurate data corrected
Erasure ("right to be forgotten")	Art. 17	Have data deleted where no overriding legal reason exists to retain it
Restriction	Art. 18	Limit processing while a dispute is resolved
Data portability	Art. 20	Receive your data in a structured, machine-readable format
Object	Art. 21	Object to processing based on legitimate interest
Lodge a complaint	Art. 77	Complain to the Belgian Data Protection Authority

To exercise any right: office@linkhipu.be. We respond within 30 calendar days.

5. Data Processor Agreements

All third-party processors are bound by written Data Processing Agreements (DPAs) requiring them to: process data only on our instructions; implement appropriate security measures; not engage sub-processors without consent; and delete or return data on termination.

6. Security Certification

LINKHIPU holds ISO/IEC 27001:2022 certification for Information Security Management — providing an independently audited framework of controls.

7. Belgian Supervisory Authority