Privacy Policy

This Privacy Policy governs the processing of your personal data in connection with your use of our Website (the “Website”) and the services associated with it (collectively referred to as the “Services”). This processing is carried out by Hippolima as the data controller, with its registered office at Luikersteenweg 50 - 3920 Lommel  (“we”, “us”), registered with the Crossroads Bank for Enterprises (KBO) under number BE0666.892.420, in accordance with the applicable legislation on the protection of personal data.

By using our Website and/or our Services, you acknowledge that you have read this Privacy Policy carefully and that you agree to it without reservation. We reserve the right to amend the Privacy Policy from time to time at our discretion. Any such amendments will be communicated via the Website.

By ticking the checkbox stating: “I confirm that I have read and understood the Privacy Policy in full and that I agree to it without reservation. I consent to the processing of my personal data as set out in this Privacy Policy’, you confirm that you have indeed read this Privacy Policy and agree to it. You confirm that you understand the purposes for which your personal data is processed. You also agree that your continued use of the Website shall be deemed to constitute continued consent. You may withdraw your consent at any time by emailing info@hippolima.be.

Please note that we may use so-called ‘cookies’ or similar technology as part of the Website and/or the Services. Cookies are small text files placed on a device’s hard drive, which contain certain information, including, in some cases, personal data. For further information regarding our use of cookies, please read our cookie policy.
This Privacy Policy was last updated on 14/09/2026.

What & nd why we process data

When you use the Website and/or Services, we process personal data relating to you. Such personal data includes:

When? Completing the contact form
What? Name, email address, telephone number, company and message
Why (purpose)? Processing the enquiry
Retention period: Two years if not a customer, five years if a customer
Legal basis? Consent

When? Signing up for the newsletter
What? Email address
Why (purpose)? To send the newsletter
Duration: five years
Legal basis? Consent

In principle, we obtain the personal data mentioned above directly from you. However, if you choose to register via a social media account (for example, Facebook or Google Plus), this data is collected via your social media profile. We recommend that you consult the privacy policy of your social media service provider to check which data is processed by your social media service provider when you use the social media login function. We do not pass on any of the personal data you provide via the Website to social media providers, unless you consent to this. In addition to the purposes mentioned above, we may also process your personal data:

To provide you, in a personalised and efficient manner, with information about the products and services you request, whether via the Website, email, telephone or social media channels.

To process your personal data so that we can provide the Services.

For direct marketing purposes, i.e. to provide you with targeted communications, promotions, offers and other advertisements from us or our selected partners. We will seek your prior consent for this. 

To carry out statistical analyses to improve our Website and/or Services, or to develop new products or services.

To provide to a financial institution or payment service provider, to enable your financial institution and the payment service provider to comply with their legal obligations.  

To transfer to the police or judicial authorities as evidence of possible criminal offences or where there are reasonable grounds to suspect that you have committed a tort or criminal offence through your registration with or use of the Website or the Services.

In the context of a potential merger with, acquisition of or by, or demerger by a third party, even if that third party is located outside the EEA.

If and when your registration on the Website or your use of the Website or Services may be regarded as (a) a breach of the terms and conditions or the intellectual property rights or any other right of a third party, (b) a threat to the security or integrity of the Services, (c) a risk to the Website or Services or to our systems or those of our subcontractors as a result of viruses, Trojan horses, spyware, malware or any other form of malicious code, or (d) is in any way illegal, unlawful, discriminatory or offensive, we may process your data in the interests of ourselves, our partners or third parties.

Who we share data with

We do not disclose your personal data to third parties in a way that allows you to be identified, unless this is necessary to provide the Services, without your explicit consent. 

We may engage external processors to provide you with the Website and/or Services. We ensure that third-party processors may only process your personal data on our behalf and in accordance with our written instructions. We guarantee that all third-party processors are selected with due care so that we can rely on the security and integrity of your personal data. 

We may transfer anonymised and/or aggregated data to other organisations, which may use this data to improve products and services and to organise the marketing, presentation and sale of tailored products and services.

Where we process data

We and our external processors will only process your identifiable personal data within the EEA.

We may transfer your anonymised and/or aggregated data to organisations outside the EEA. Should such a transfer take place, we will ensure that appropriate safeguards are in place to guarantee the security and integrity of your personal data, and that all rights relating to personal data which you might enjoy under applicable mandatory law are guaranteed.

(IF APPLICABLE) Should a transfer of your personal data and/or anonymised and/or aggregated data take place, the following legal protection mechanism will be implemented:

Campaign Monitor 
Country outside the EEA: United States 
Legal transfer mechanism: Standard contractual clauses 

HubSpot 
Country outside the EEA: United States 
Legal transfer mechanism: Standard contractual clauses

How we process data

We will do our utmost to process only the personal data necessary to achieve the purposes set out in this Privacy Policy. We will process your personal data in a lawful, fair and transparent manner. We will do our utmost to keep your personal data accurate and up to date.

 Your personal data will only be processed for as long as is necessary to achieve the purposes set out in this Privacy Policy or until you withdraw your consent to its processing. Please note that withdrawing your consent may mean that you are no longer able to use the Website and/or Services, either in whole or in part. If you have registered on our Website, we will delete your personal data when you delete your profile, unless a legal or regulatory obligation or a court or administrative order prevents us from doing so.

We will take appropriate technical and organisational measures to keep your personal data secure against unauthorised access or theft, and against accidental loss, alteration or destruction. Access by our staff or the staff of our external data processors is only permitted on a need-to-know basis and is subject to strict confidentiality obligations. However, you understand that ensuring safety and security are merely best-effort obligations, which can never be guaranteed. 

Your rights

You have the right to request access to all personal data that we process about you. However, requests for access that are clearly made with the intention of causing nuisance or harm to us will not be processed.

You have the right to request that any personal data about you that is incorrect or inaccurate be rectified free of charge. If you have registered on our Website, you can correct much of this data yourself via your profile. If such a request is made, you must also include evidence with your request that the personal data for which correction is requested is incorrect.

You have the right to withdraw the consent you have given us for the processing of data, but this withdrawal will not affect the data we have already collected via cookies or similar technologies on the basis of your prior consent. If you no longer wish us to collect data via cookies or similar technologies, you may change your browser settings or delete cookies at any time.
If the intended processing constitutes direct marketing, you have the right to object to such processing free of charge and without having to provide a reason.

You have the right to request that personal data relating to you be deleted if it is no longer necessary for the purposes set out in this Cookie Policy or if you withdraw your consent to its processing. However, please bear in mind that a request for erasure will be assessed by us in the light of any legal or regulatory obligations, or administrative or court orders, which may prevent us from erasing the personal data in question.

Instead of erasure, you may also request that we restrict the processing of your personal data if (a) you contest the accuracy of that data, (b) the processing is unlawful, or (c) the data are no longer necessary for the stated purposes, but you require them to defend yourself in legal proceedings.

Where your personal data is processed on the basis of consent or a contract and the processing is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, you have the right to transmit this data directly to another service provider. The technical feasibility of this is assessed solely by us.

If you wish to submit a request to exercise one or more of the rights listed above, please send an email to info@hippolima.be. This request must clearly state which right you wish to exercise and why. It must also be dated and signed, and accompanied by a digitally scanned copy of your valid identity document proving your identity. We will notify you immediately upon receipt of such a request. If the request is found to be valid, we will comply with it as soon as reasonably possible and no later than thirty (30) days after receipt of the request.

If you have a complaint about our processing of your personal data, you can always contact us via the email address info@hippolima.be. If you remain dissatisfied with our response, you are free to lodge a complaint with the relevant data protection authority. 

For further information, please visit the data protection authority’s website.