Last Updated: October 8, 2026
This website, digilabseu.com, is operated by DigiLabs, a sole trader (eenmanszaak) established in Belgium. For the purposes of the EU General Data Protection Regulation (GDPR), DigiLabs is the data controller for the personal data described in this policy. Our registration and contact details are in section 12. We have not appointed a Data Protection Officer, as we are not required to do so.
This policy covers this website: the contact form, the newsletter sign-up, job applications through our careers page, and the client project portal. The apps we publish have their own privacy policies:
Your name, email address, the service you are interested in, your message, and how you heard about us (including a referral code if you used one).
Your email address.
Your name, email address and phone number, your location, your experience and motivation, any LinkedIn or portfolio links you share, and how you heard about the role.
The project details we enter in the client portal — the project name, your name and, if you give it to us, your email address — and the progress updates we post. Anyone with your project's access code can view its status page, so keep the code private.
Our hosting provider receives your IP address, browser type and the pages you request, as part of delivering the site and protecting it from abuse. We use your IP address briefly to rate-limit our forms; we do not use analytics or advertising tools on this website. The cookies we set are described in our Cookie Policy.
We do not sell your personal data.
We use the following service providers, which process data on our behalf:
Within DigiLabs, enquiries may be handled by a member of our sales team, who sees only the enquiries assigned to them. We may also disclose data where the law requires it, or to protect our rights.
Vercel, Resend, Google and Convex are established in the United States or may process data there. Where personal data is transferred outside the European Economic Area, the transfer is made on the basis of the EU-US Data Privacy Framework where the provider is certified, or otherwise under the European Commission's Standard Contractual Clauses.
Traffic to this website is encrypted, our internal tools require their own credentials, and access to personal data is limited to the people who need it. No security measure is perfect; if a breach ever affects your rights, we will notify the supervisory authority within 72 hours and tell you directly where the law requires it.
You have the right to:
To exercise these rights, email us at the address in section 12. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In Belgium this is the Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35, 1000 Brussels — www.gegevensbeschermingsautoriteit.be. You may also complain to the authority in the EU country where you live or work.
This website is intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.
We may update this policy from time to time. The "Last Updated" date above shows the latest revision.