PRIVACY POLICY

1. General

1.1. Your data is collected and processed by Dokapi, an activity of Dok-api BV, located at Schuttersvest, 2800 Mechelen, Belgium, registered in the Belgian Crossroads Bank for Enterprises under VAT number BE 1016.764.193 (hereinafter: "Dokapi", "we", "us"). You can reach us at dpo@ixor.be.

1.2. Any term that starts with a capital letter should be understood as defined in this Privacy Policy. Where necessary, singular words will also include the plural and vice versa.

1.3. Dokapi reserves the right to modify, supplement, or replace this Privacy Policy. Changes will be communicated via our website. If you do not agree with these changes, we ask you to contact us via the email address mentioned in Article 1.1.

2. Categories of Personal Data we Process

2.1. When using our services, we collect the following personal data:

• Technical Data: such as IP address, browser type, visited pages, and device information.
• Identity Data: name, company name, gender.
• Account Data: username and password.
• Contact Data: email address, phone number.
• Financial Data: bank account number, payment method.
• Sensitive Data: data on invoices that may contain sensitive personal data (e.g., health, trade union membership). We request explicit consent for the processing of such data.

3. Purposes and Legal Basis for Processing

• Registering and managing your account.
• Providing our services.

• Processing sensitive data as described above.
• Sending commercial communications. You can withdraw your consent at any time.

• Complying with legal requirements and responding to requests from government authorities.

• Improving our services and performing statistical analyses.
• Protecting our infrastructure from abuse or illegal activities.

4. Data Sharing

• Subcontractors and partners involved in the provision of our services
• Government authorities, if legally required.

4.2. We will not sell or share your data with third parties without your consent, unless legally required.

5. Your rights

• Access: Request access to your data.
• Correction: Request correction of incorrect data.
• Deletion: Request deletion of your data unless we are legally required to retain it.
• Restriction: Request restriction of processing under certain circumstances.
• Objection: Object to processing based on our legitimate interests.
• Portability: Receive your data in a structured and commonly used format.

To exercise these rights, you can contact us at dpo@dokapi.be.

6. Security

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse. Although we strive to ensure maximum security, we cannot guarantee absolute protection.

7. Retention Periods

Your data is retained as long as necessary for the purposes described in Article 3. After this period, your data will be anonymized or deleted, unless otherwise required by law.

8. Complaints

If you have a complaint about the processing of your personal data, you can contact us at dpo@ixor.be. If necessary, you can also file a complaint with the Belgian Data Protection Authority via https://www.gegevensbeschermingsautoriteit.be.