LogîsKeyPrivacy policy
This policy explains which personal data LogîsKey processes, why, how long we keep it and what your rights are. The controller is BIOSCO BV, Kapelweg 18, 3680 Maaseik, België, company number BE0899.429.827. Questions or requests: support@logiskey.com.
Updated on
1. What data and why
| Whose | What data | Purpose | Legal basis |
|---|---|---|---|
| Users (hosts and their team) | Name, email address, password (only as an unreadable hash), time of last login, two-step verification settings, changes in the activity log | Your account, logging in, security, support | Contract and legitimate interest (security) |
| Users | Company details you enter (name, VAT number, address, email, phone), billing address and payments. You enter card and bank details at Stripe; we do not see or store them | Subscription and invoices | Contract and legal obligation |
| Users | Content of your guides, including photos and the host contact details you enter yourself (name, phone, email). These are visible to anyone with the guide’s link | Showing the guest guide | Contract |
| Invited people | Email address and role | Sending the invitation | Legitimate interest of the person inviting |
| Guests who open a guide | No personal data in the counters. We count per property and per day how often a guide and an activity are opened. To slow down bots we use the IP address as the key of a counter for at most 2 days, separate from the statistics | Statistics and protection against abuse | Legitimate interest |
| Visitors and users | Technical server logs (such as IP address and time) and security logs with an irreversibly shortened version of email address and IP address | Operation, security, detecting abuse | Legitimate interest |
The host writes the content of a guide. For data a host puts in it, the host is responsible; LogîsKey processes it as a processor under the data processing agreement.
2. Who we share data with
We do not sell data. We use these processors:
- Railway Corp. (VS) – hosting van applicatie en database
- Resend, Inc. – verzending van e-mails (verzending vanuit Ierland, gegevens opgeslagen in de VS)
- Stripe Payments Europe, Ltd. (Ierland) – online betalingen en facturen (kan gegevens doorgeven aan Stripe, Inc. in de VS)
We have agreements with each processor on protecting your data. Where data leaves the European Economic Area, this is based on the European Commission’s standard contractual clauses.
3. How long we keep data
- Account data: as long as your account exists. If you delete your account, it is removed straight away, except what we must keep by law (such as invoices and payments, 7 years)
- Sessions: at most 30 days
- Links in emails (confirmation, password reset): 7 days after use or expiry
- Invitations not accepted: 30 days after expiry
- Photos no longer in use: 24 hours
- Abuse counters: 2 days
- Properties from a cancelled subscription: 30 days after the subscription ends
- Activity log: 24 months
- Anonymous statistics: without limit, as they contain no personal data
4. Cookies
We only use necessary cookies: one to keep you logged in and one that remembers your language. No advertising or tracking cookies. See the cookie policy.
5. Security
Connections are encrypted with HTTPS. Passwords are only stored as a hash. Logins and emails are rate-limited against abuse, and two-step verification is available to everyone and mandatory for administration. Data of different customers is kept separate and every access is checked against the account of the logged-in user.
6. Your rights
You can access, correct, delete or transfer your data, and object to processing. When logged in, you download your data and delete your account yourself under My account. For other requests, email support@logiskey.com; we reply within one month. If you are not satisfied, you can lodge a complaint with the Belgian Data Protection Authority, dataprotectionauthority.be.
7. Changes
If we change this policy, the new date is shown at the top. For important changes we let you know by email.