1. Data controller
The data controller is GuavaLight, Rue de Boussoit 4, 7110 Maurage, Belgique. For any question about your data, contact support@guavalight.com.
2. Data collected
We collect only strictly necessary data:
- Account data: name, e-mail address, (encrypted) password;
- Billing data: name, address, VAT number where applicable;
- Licence data: key, edition, activated devices;
- Technical data: connection logs and IP addresses, for security purposes.
3. Purposes and legal bases
- Performance of the contract: managing orders, licences and billing;
- Legal obligation: retention of invoices (accounting, VAT);
- Legitimate interest: service security and fraud prevention;
- Consent: audience measurement and any marketing communications.
4. Recipients
Your data may be shared with our strictly necessary processors: payment provider (transaction processing), host, and e-mail service. These providers act on our instructions and offer GDPR-compliant guarantees.
5. Retention period
Account data is kept as long as the account is active. Billing data is kept for the legal accounting retention period (7 years in Belgium). Technical logs are kept for a limited time.
6. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access, rectification and erasure;
- Right to restriction and objection to processing;
- Right to data portability;
- Right to withdraw your consent at any time.
7. Transfers outside the EU
Where data is processed by providers located outside the European Union, appropriate safeguards (standard contractual clauses) are put in place.
8. Cookies
The use of cookies is detailed in our Cookie Policy.
9. Complaint
You can exercise your rights by writing to support@guavalight.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (DPA).