1. Data Controller vs. Data Processor 

• We are the Data Controller for the personal data we collect from you to manage your account (e.g., name, email, billing info). 

• You are the Data Controller for your Client Data. When you use our Service to process your Client Data, we act as the Data Processor on your behalf, strictly following your instructions. 

2. Information We Collect (as Data Controller) 

• Account & Payment Information: Your name, company details, contact information, and billing details, collected for the performance of our contract with you. 

• Communications: Information you provide during support requests, processed based on our legitimate interest to assist you. 

• Usage Data & Logs: Technical data like your IP address and browser type, collected based on our legitimate interest in securing and improving the Service. 

3. How We Use Your Information 

We use your data to provide and maintain the Service, process payments, communicate with you, ensure security, and comply with our legal obligations. 

We use essential cookies to operate the Service and may use other cookies for analytics and performance. For detailed information, please see our Cookie Policy. 

4. Data Sharing and International Transfers 

We do not sell your personal data. We may share it with trusted third-party sub-processors (e.g., cloud hosting, payment gateways, analytics) or third party sub-contractors under strict data protection terms. If data is transferred outside the EEA, we ensure it is protected by legal safeguards like the EU's Standard Contractual Clauses. 

5. Data Retention 

We retain your account data as long as your account is active and for a subsequent period as required by law (e.g., for tax and accounting purposes). Client Data is deleted per Section 11.3. 

6. Your GDPR Rights 

You have the following rights regarding your personal data:

• Access, Rectification, and Erasure 

• Restrict Processing 

• Data Portability 

• Object to Processing 

To exercise these rights, please contact us at inf@devnation.be. 

We take the security of your data very seriously. We use appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. These measures include data encryption, access controls, and regular security assessments.