Privacy Statement | Liinx
Version 1.0
Liinx, located at Heresingel 4B, 9711 ES Groningen, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 68302878, is responsible for the processing of personal data as described in this privacy statement.
For questions about privacy or this statement, you can contact us at info@liinx.nl.
Last modified: 4-8-2026
Two roles: controller and processor
Liinx processes personal data in two different roles:
- As a data controller for the data of our own customers, users and website visitors. That is what this privacy statement covers.
- As a data processor for the data our customers have processed through the Liinx platform (for example webshop data such as orders and customer records belonging to our customers' customers). For this data, our customer is the data controller and the data processing agreement that forms part of our terms and conditions applies. Questions about this data should be directed to the relevant webshop or business; their privacy policy applies. If we receive a request from a data subject in our role as processor, we forward it to the responsible customer.
The remainder of this statement covers the processing for which Liinx itself is responsible.
Personal data we process
Liinx processes your personal data because you use our services and/or because you provide this data to us yourself. Below is an overview of the personal data we process:
- First and last name
- Email address
- Phone number (if you provide it to us)
- Company name and billing details
- Payment details (the payment itself is handled by our payment provider; we never see full payment card details)
- IP address
- Browser and device type
- Data about your activity on our website and in the platform
- Other personal data you actively provide, for example by creating an account, in correspondence or by phone
Purposes and legal bases
Liinx processes your personal data for the following purposes, based on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account and providing the Liinx platform and our services | Performance of the agreement |
| Handling your payment and invoicing | Performance of the agreement and legal obligation (tax administration) |
| Contacting you and handling questions and support requests | Performance of the agreement and legitimate interest |
| Informing you about changes to our services | Performance of the agreement |
| Analysing and improving our website and services | Legitimate interest |
Automated decision-making
Liinx does not use automated decision-making that produces legal effects concerning individuals or similarly significantly affects them.
How long we keep personal data
Liinx does not keep your personal data longer than strictly necessary to achieve the purposes for which your data is collected. We apply the following retention periods:
| Category | Retention period |
|---|---|
| Account and profile data | For as long as your account is active; deleted within 30 days after cancellation or removal |
| Invoices and administration | 7 years (statutory tax retention obligation) |
| Correspondence and support requests | Up to 2 years after the last contact |
| Analytical data about website visits | No longer than 14 months |
Data we process on behalf of customers as a processor is retained in accordance with the data processing agreement: for the duration of the agreement and according to the customer's instructions.
Sharing personal data with third parties
Liinx shares your personal data with third parties where this is necessary to perform the agreement or to comply with a legal obligation. With companies that process your data on our behalf, we conclude a data processing agreement to ensure the same level of security and confidentiality of your data. Liinx remains responsible for these processing operations. Beyond that, Liinx only provides your personal data to third parties with your explicit consent.
We use the following third parties:
| Party | Purpose | Data | Location |
|---|---|---|---|
| Google Cloud (Google Ireland Ltd.) | Hosting of the platform, databases and data storage | All platform data, stored in EU data centres | Ireland (EU) |
| Stripe (Stripe Payments Europe Ltd.) | Payment processing | Name, email address, payment details | Ireland (EU) |
| Moneybird B.V. | Invoicing and accounting | Name, company name, address and billing details | Netherlands |
| Resend Inc. | Sending transactional emails | Name, email address | United States |
| Google (Google Ireland Ltd.) | Website analytics (Google Analytics via Google Tag Manager) | IP address, browser and device data, website behaviour | Ireland (EU) |
Where data is transferred to countries outside the European Economic Area (such as the United States), this only happens on the basis of an adequate level of protection, such as an adequacy decision (including the EU-U.S. Data Privacy Framework) or the European Standard Contractual Clauses.
Minors
Our website and services do not intend to collect data about website visitors younger than 16 years of age, unless they have permission from a parent or guardian. However, we cannot verify whether a visitor is older than 16. We therefore encourage parents to be involved in their children's online activities, to prevent data about children from being collected without parental consent. If you are convinced that we have collected personal data about a minor without such consent, please contact us at info@liinx.nl and we will delete this information.
Cookies we use
Liinx uses functional and analytical cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit this website.
- Functional cookies ensure that the website works properly and that, for example, your preferences and login session are remembered.
- Analytical cookies (Google Analytics, loaded via Google Tag Manager) give us insight into how visitors use the website, so we can improve it.
We do not use third-party advertising or tracking cookies.
You can opt out of cookies by configuring your browser so that it no longer stores cookies. You can also delete all previously stored information via your browser settings.
Accessing, correcting or deleting your data
You have the right to access, correct or delete your personal data. You also have the right to withdraw any consent you have given for data processing, to object to the processing of your personal data by Liinx, and the right to data portability. This means you can submit a request to us to send the personal data we hold about you, in a computer file, to you or to another organisation named by you.
You can send a request for access, correction, deletion or transfer of your personal data, or a request to withdraw your consent or object to the processing of your personal data, to info@liinx.nl.
To make sure the request was made by you, we verify your identity via the email address known to us or via your account. Only if this does not provide sufficient certainty will we ask for additional proof. We will respond to your request as quickly as possible, and at the latest within one month.
Liinx would also like to point out that you have the option to file a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), via autoriteitpersoonsgegevens.nl.
How we protect personal data
Liinx takes the protection of your data seriously and takes appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification, including:
- Encrypted connections (TLS): all data is transmitted over a secure internet connection. You can recognise this by 'https' and the padlock in the address bar.
- Encryption of stored data: our databases and data storage are encrypted (encryption at rest).
- Secure credential management: access credentials and integrations are stored in a secure secret manager and are never visible in our system or our API.
- Access control: access to personal data is limited to those who need it for their work.
- Email authentication (SPF and DKIM): internet standards that help prevent you from receiving emails in our name that are spam or phishing.
If you believe that your data is not properly secured or there are indications of misuse, please contact us at info@liinx.nl.