Privacy Policy

1. Introduction

LexiStar Alliance B.V. (“LexiStar”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This notice explains how we collect and process personal data when you visit our website, request a connection, or use our internet services, and describes your rights under the EU General Data Protection Regulation (GDPR).

2. Who we are

LexiStar Alliance B.V. is the controller responsible for your personal data.

• Legal entity: LexiStar Alliance B.V.
• Privacy contact: info@lexistaralliance.com

You have the right to lodge a complaint at any time with your national data protection authority. For the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl); if you live in Austria, Germany, France, Italy or the United Kingdom you may also contact your local supervisory authority. We would appreciate the chance to address your concerns first, so please contact us before approaching a regulator.

3. The data we collect about you

Personal data means any information about an individual from which that person can be identified. Depending on how you interact with us, we may collect:

• Identity data — first name, last name and title.
• Contact data — service address, billing address, email address and telephone number.
• Financial data — bank account (IBAN) and payment details, processed by our payment providers.
• Transaction data — details about payments and the products and services you have purchased from us.
• Technical data — IP address, browser type and version, device and operating system, and how you use our website.
• Marketing and communications data — your preferences in receiving marketing from us.

We do not collect any special categories of personal data (such as details about your race, religion, health or biometric data), and we do not collect information about criminal convictions or offences.

4. How your data is collected

• Direct interactions — when you fill in a coverage or connection request, contact form, or correspond with us by email.
• Automated technologies — as you use our website we collect technical data via server logs.
• Third parties — installation partners, payment providers and address-validation services may share data with us to deliver your service.

5. How we use your personal data

We only use your personal data when the law allows us to — most commonly:

• To perform the contract we are about to enter into or have entered into with you (checking availability, activating and operating your connection, billing).
• Where it is necessary for our legitimate interests (running and securing our network, improving our services, preventing fraud) and your rights do not override those interests.
• To comply with a legal or regulatory obligation.

For direct marketing by email we rely on your consent, which you can withdraw at any time using the opt-out link in any message or by contacting us.

6. Disclosures of your personal data

We may share your personal data with:

• Service providers who support our IT systems, billing and customer support;
• Certified installation partners in the country where your service is delivered;
• Professional advisers such as lawyers, auditors and insurers;
• Tax authorities, telecom regulators and other authorities where required by law.

We require all third parties to respect the security of your personal data and to process it only for specified purposes and in accordance with our instructions.

7. International transfers

Your personal data is stored and processed within the European Economic Area. Where a service provider processes data outside the EEA (for example for United Kingdom customers), we ensure an equivalent level of protection through adequacy decisions or standard contractual clauses.

8. Data security

We apply appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way. Access is limited to employees and contractors with a business need to know, who are subject to confidentiality obligations. We have procedures to deal with any suspected personal data breach and will notify you and the applicable regulator where legally required.

9. Data retention

We retain personal data only as long as necessary for the purposes it was collected for, including legal, accounting and reporting requirements. Customer records are generally kept for seven years after the end of a contract, in line with Dutch fiscal retention rules. In some circumstances we anonymise data for statistical purposes, in which case we may use it indefinitely.

10. Your legal rights

Under the GDPR you have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request erasure of your personal data;
• Object to processing based on legitimate interests, and to direct marketing at any time;
• Request restriction of processing in certain scenarios;
• Request transfer (portability) of your data in a structured, machine-readable format;
• Withdraw consent at any time where consent is the legal basis.

To exercise any of these rights, contact info@lexistaralliance.com. You will not have to pay a fee, and we aim to respond to all legitimate requests within one month.