Introduction

At Elausys, we prioritize your privacy and are dedicated to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and relevant data protection laws. It applies to our websites, to our mobile application HyperVisu and any other application of ours that links to this policy, to ElauPro, and to the cloud services we operate (see the dedicated sections below), as well as to any sales, marketing or events in which we engage with you. If you do not agree with this policy, please do not use our services.

Types of Personal Data We Collect

We may collect and process the following types of personal data:

Account Data: Username, password, and purchase history.

Identification Data: Name, surname and gender.

Payment Data: Credit card information and billing address (processed securely via payment processors).

Technical Data: IP address, browser type, and time zone settings.

Usage Data: Information about how you use our website, products, and services.

Contact Data: Email address, telephone number, and postal address.

Purpose of Data Processing

We process your personal data for the following purposes:

Customer Service: To respond to your inquiries and provide customer support.

Legal Compliance: To comply with legal obligations and protect our rights.

Marketing: To send you promotional materials and newsletters, only if you have provided your explicit consent.

Order Processing: To manage and fulfill your orders, including payment processing and delivery.

Website Improvement: To analyze website usage and improve our services.

Legal Basis for Processing Personal Data

We rely on the following legal bases for processing your personal data:

Consent: When you provide your explicit consent, such as for receiving marketing communications.

Contractual Necessity: To fulfill our contractual obligations when you make a purchase.

Legal Obligation: To comply with applicable laws and regulations.

Legitimate Interests: For purposes that are in our legitimate interests, provided that they do not override your interests or fundamental rights.

Mobile Applications (HyperVisu)

When you use our mobile application HyperVisu, or any other application of ours that links to this Privacy Policy, we may process the following information, only if you choose to provide us with access or permission:

All personal information that you provide to us must be true, complete and accurate, and you must notify us of any change.

Camera: we do not access your device's camera, except when you explicitly request our support to integrate a camera into your system. The camera is not accessed in any other circumstance.
Push notifications: we may ask to send you push notifications about your account, your installation or certain features of the application. You can turn them off at any time in your device settings.
Technical and account information: this information is primarily needed to maintain the security and operation of the application, for troubleshooting, and for our internal analytics and reporting purposes.
We do not process sensitive personal information (such as health, biometric or financial data) through the application.

Our Role: Data Controller and Data Processor

In legal terms, we are generally the data controller, under European data protection laws, of the personal data described in this Privacy Policy, since we determine the means and purposes of the processing. This Privacy Policy does not apply to personal data that we process as a data processor on behalf of our customers (for example an installer, integrator or company that operates an installation for its own clients). In that case, the customer is the data controller responsible for your personal data, we process it only on its instructions under a data processing agreement, and you should read the customer's privacy policy and direct your questions to that customer.

Children

Our services are not intended for children under 18 years of age and we do not knowingly collect data from, or market to, them. If we learn that personal data of a person under 18 has been collected, we will deactivate the account and take reasonable measures to delete that data promptly. If you become aware of any such data, please contact us.

Data Retention

We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.

Right to Lodge a Complaint: If you believe we are processing your personal data unlawfully, you may complain to your national data protection authority (in Belgium, the Autorité de protection des données / Gegevensbeschermingsautoriteit) or, in Switzerland, to the Federal Data Protection and Information Commissioner.

Right to Erasure: Request the deletion of your personal data under certain conditions.

To exercise any of these rights, or to review, update or delete the data we hold about you, please contact us using the contact page or at info@elausys.be.

Right to Data Portability: Receive your personal data in a structured, commonly used format.

Right to Rectification: Request corrections to any inaccurate or incomplete data.

Right to Restrict Processing: Request the restriction of processing your personal data in certain situations.

Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal data. This does not affect the lawfulness of the processing carried out before the withdrawal.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Sharing Your Data

We may share your personal data with:

Legal Authorities: When required by law or necessary to protect our rights.

Service Providers: Third-party vendors who assist us in operating our website, conducting our business, or servicing you (e.g., payment processors, delivery services).

International Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data, in accordance with GDPR.

Cloud Services (HyperVisu Remote Access, ElauPro, Alarm Gateways)

We operate cloud services that complement the products installed on site: HyperVisu remote access, the ElauPro configuration platform, and the connectivity of our alarm gateways. To provide them, we may process:

This data is used to provide, secure and maintain the services, to deliver notifications, to give support and to comply with the law. It is not sold. It is kept as long as your account or installation is active and as necessary afterwards for legal, security and accounting purposes, then deleted or anonymised. We rely on infrastructure and hosting providers that process it on our behalf under appropriate safeguards.

Account data: name, email address, credentials (stored in protected form) and the access rights granted to you on a project or installation.
Installation and device data: identifiers of your servers and gateways, project and building configuration, device states, schedules and scenarios.
Commands and events: the commands you send, the events and alarms generated by your installation, and the corresponding logs.
Connection data: IP address, connection times and push notification tokens, needed to route traffic, secure access and deliver notifications.
Support data: the information you give us when you request assistance, including, with your agreement, remote access to your installation for diagnosis.

Service Availability and Limitation of Liability

The cloud services are provided on an "as is" and "as available" basis. Unless a separate written agreement expressly states a service level, we do not guarantee uninterrupted, error-free or secure operation. In particular:

To the maximum extent permitted by applicable law, Elausys shall not be liable for any unavailability or interruption of the services, or for any delay, loss, missing or inaccurate information, command, notification or alarm, or for any resulting direct or indirect damage, including loss of profit, loss of data, property damage, or consequences of an alarm or a command not being received or executed. Where liability cannot be excluded, it is limited to the amounts you paid us for the service concerned during the 12 months before the event. Nothing in this policy excludes or limits liability that cannot be excluded or limited by law, in particular liability for fraud, intentional misconduct or gross negligence, for death or personal injury, or the mandatory rights of consumers.

Interruptions: the services may be unavailable, slowed down or degraded, in whole or in part, for a period of time, because of maintenance, updates, incidents, cyberattacks, failures of our infrastructure or of third parties (hosting, telecom operators, internet, DNS, mobile networks, push notification providers, Google, Apple, etc.), failures of your own internet connection, power or equipment, or events beyond our reasonable control (force majeure).
Missing information or commands: during or after an interruption, data, states, events, logs, notifications or alarms may be delayed, lost, incomplete or inaccurate, and commands you send may be delayed, not executed, executed late or executed more than once. You must not assume that a command was executed or that a notification was delivered unless you have verified it.
Not a safety system: the cloud services are a convenience. They must not be relied on for safety-critical, life-safety, health, security or emergency functions. Your installation must keep working locally, and you remain responsible for local safeguards (sirens, local alarms, manual controls) and, where required, for professional monitoring by a certified alarm receiving centre. Notifications from alarm gateways are complementary and are not a monitoring service.
Your responsibilities: you are responsible for your internet connection and equipment, for keeping your credentials confidential, for keeping the software and firmware up to date, for the accuracy of the information you provide, and for keeping your own backups or exports of your configuration. We do not guarantee that data stored in the cloud will never be lost.
Changes and suspension: we may modify, suspend or discontinue all or part of a service, for example for maintenance, security, legal reasons or non-compliant use, and we will try to give reasonable notice where practicable.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or by other means.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us using the form on the contact page or by email at info@elausys.be.

Elausys, Rue de la petite ferme 5c, 4218 Couthuin, Belgium.