GENERAL TERMS & CONDITIONS - Lesterius - V.01/2026 (under construction)

The general terms and conditions (T&Cs) of a company serve to outline the rules and guidelines that govern the relationship between the company and its customers. Their primary goal is to clarify expectations, protect the rights of both parties, and ensure a smooth transaction process. The T&Cs help establish legal protections, provide information on services and obligations, and foster trust between the company and its customers. The below T&Cs are valid for the Lesterius entities of the group and the holding of the Lesterius group. We have a more detailed T&C’s for our hosting activities, you’ll find these T&C’s further on this page.

The binding T&Cs are published in English. For the comfort we have an automatic technical translation in the local language for the different companies of the Lesterius Group on this page. If for some reason there would be a discrepancy between the local language technical translation and the English version, the English version is the valid and binding version.

T +32 497 55 00 00
E legal@lesterius.com

1.    General

1.1.  These general terms and conditions for the provision of services (hereafter ‘GTC’) apply to all offers and Order Forms for the provisions of services as described therein (hereafter the ‘Services’) performed by the Lesterius entity which has provided the Order Form (hereafter ‘Lesterius’) for the customer (hereafter ‘Customer’).

1.2.  It is expressly agreed that solely the Lesterius entity that has emitted the Order Formis to be considered the service provider and no other Lesterius entity shall have any liability or obligations arising out of a breach by the service provider of one of its representations, warranties and obligations under these GTC.

1.3.  The Customer expressly rejects the application of its own general or specific terms and conditions, or other such terms that are otherwise implied by law, trade, practice or dealing, even where such general terms and conditions are issued after these GTC and regardless of any statement to the contrary in any quotation/Order Form, acknowledgement, confirmation, release or other form submitted by Lesterius.

1.4.  Business day means a day other than a Saturday, Sunday or a legal holiday in the territory where Lesterius has its registered office (hereafter ‘Business Day’). All capitalized and other defined terms have the meaning set out in these GTC or in the Order Form.

1.5.  These GTC shall automatically apply to all future commercial relations and legal transactions regarding the performance of the Services between the parties without it being necessary to expressly refer to these GTC.

2.    Offers, Order Form and acceptance

2.1  Lesterius will provide the Customer with an offer for the delivery of the Services, the software and the fees. Unless stated otherwise in the offer, the latter remains valid for a period of one (1) month following the date specified in the offer.

2.2  Lesterius shall only be bound if the offer in which the Services to be performed by Lesterius, the term of the Services, the payment terms and fees are specified, is accepted by the Customer by providing confirmation thereof in writing (via e-mail) and/or if the latter is signed by the parties (hereafter ‘Order Form’).

2.3  The Order Form, these GTC and applicable annex(es) – together are considered the agreement (‘Agreement’).

2.4  Any variation or amendment to an Order Form or Services requested by the Customer shall only be valid when accepted by Lesterius in writing and signed by a duly authorised representative of Lesterius. Such amendments shall be subject to appropriate adjustment in the fees, hourly rates and other commercial terms.

2.5  If any information, including but not limited to product, technical or commercial information, supplied by or on behalf of the Customer is insufficient, incorrect, not delivered in a timely manner, inaccurate or misleading, Lesterius shall be entitled to (i) amend the fees, the terms of payment and/or delivery within the limits of fairness and reasonableness; or (ii) terminate the Order Form with immediate effect and without being due any indemnities, compensation or damages, by giving written notice to the Customer.

2.6  Lesterius will qualify as an intermediary for the provision of the Software. Lesterius does not qualify as the owner or licensor of the Software. In order to access and use the Software, the Customer recognizes and agrees to enter into an agreement with the relevant Software provider, i.e. Claris, to obtain the necessary usage and access rights regarding the Software (hereafter ‘Software Provider’).

2.7  The Order Form shall include a description of the requested Software the Customer wants to order and of the respective subscription fees and payment milestones.

 

3.    Obligations of the Customer

3.1.  The Customer shall:

  • collaborate proactively with Lesterius, maintain responsive and timely communication, and ensure constructive cooperation throughout the term of the Agreement with Lesterius;

  • inform Lesterius of any applicable on-site security policies within five (5) Business Days following the signing of the Agreement;

  • provide a secure and safe working environment for Lesterius personnel at all relevant locations;

  • ensure that any required VPN connection is properly maintained and kept up to date;

  • be responsible for performing and maintaining regular backups of its data. The Customer shall ensure that backups are conducted frequently and that multiple copies are retained to safeguard against data loss. The Customer remains fully and solely responsible for all backups, including maintaining routine backup copies;

  • keep the Software and information systems up-to-date or upgraded as needed, or upon reasonable request by Lesterius, in order to maintain optimal service quality;

  • refrain from issuing direct instructions to Lesterius personnel. All communications regarding scope and/or specific deliverables or priorities shall be channeled through Lesterius' project manager;

  • ensure adequate protection of all data, files, and systems provided to or accessed by Lesterius, and implement appropriate user management, version control, and backup mechanisms;

  • agree that Lesterius may use the Company's infrastructure and documentation necessary for the provision of the Services, these will, under any circumstances, remain the property of the Customer;

  • monitor and regularly review the access rights of all persons within its organization to ensure that only authorized individuals have access to the Software, Services, and related systems. The Customer shall promptly update or revoke access rights as necessary to maintain appropriate security and compliance with the Agreement;

  • be responsible for providing Lesterius personnel with timely and sufficient access to its premises, systems, and information, insofar as necessary for Lesterius to perform the Services under the Agreement. It is the responsibility of the Customer to evaluate when such access would no longer be necessary.

3.2.  The Customer warrants and represents that:

  • it has full power and authority to execute, deliver and perform its obligations under this Agreement;

  • there are no other rights or agreements that would impede the performance of its obligations and responsibilities under the Agreement;

  • it is not a party, whether directly or indirectly, to litigation proceedings or disputes which could have a material adverse effect upon its ability to perform its obligations and responsibilities under this Agreement;

  • it has sufficient rights as a licensee of up-to-date Software as required to provide the Services;

  • its data does not infringe the Intellectual Property Rights or any other right of a third party or does not contain any hostile or intrusive software, including computer viruses, worms, trojan horses, ransomware, spyware, adware, scareware, and other malicious programs.

3.3.  The Customer undertakes to ensure an efficient collaboration with Lesterius – by providing correct, adequate information in a timely manner. The Customer acknowledges that the provision of information or other data requested is of crucial importance in order for Lesterius to provide its Services. The Customer undertakes to provide Lesterius with all data and information that Lesterius indicates in advance are necessary or requests during the term of the Agreement or that the Customer should reasonably know are necessary for the performance of the Services, in a timely manner (and in writing). If such data and information are not provided to Lesterius in a timely manner, Lesterius shall be entitled to suspend the performance of the Services and to charge the Customer for the additional costs arising from such negligence on the part of the Customer according to the agreed hourly rates.

4.    Delivery of Services

4.1. Lesterius shall:

  • perform its Services with due care, diligence, and professionalism, in accordance with industry standards and any specifications taken up in the Order Form and assign qualified personnel with appropriate skills and experience to carry out the Services and ensure adequate supervision and quality control;

  • make commercially reasonable efforts to comply with timelines as outlined in the Agreement, while noting that all timelines are indicative unless expressly agreed otherwise. The Customer agrees that its input and provision of requested data is essential for Lesterius to deliver its Services in conformity with the indicative timelines. In the event that Lesterius determines that it is impossible to commence/perform the Services within the specified period, Lesterius shall inform the Customer as soon as possible. Lesterius will then agree on a new term in agreement with the Customer. Except in cases of gross negligence, intent or fraud, Lesterius shall not be liable for any deviations from the specified timelines;

  • store and manage backup data for a period of thirty (30) calendar days, after which such data may be deleted, unless otherwise agreed in writing.

4.2. The Services agreed upon constitute a best-efforts obligation for Lesterius and do not in any way guarantee a specific result or outcome.

4.3. If and to the extent required for the proper execution of the Services, Lesterius has the right to outsource and/or subcontract certain Services and have them carried out by third parties/subcontractors (including Lesterius’ affiliates).

4.4. Lesterius warrants and represents to the best of its knowledge that:

  • it has full power and authority to execute, deliver and perform the Services under the Agreement;

  • there are no other rights or agreements that would impede the performance of its Services under the Agreement.

4.5. To the maximum extent permitted by applicable law, Lesterius disclaims all other representations and warranties, including (without limitation) warranties and representations of satisfactory quality, condition, quality, performance, security, non-infringement, merchantability or fitness for a particular purpose, of its Services. The Services are provided to the Customer “as is”, and may be subject to delays, interruptions, errors, defects or other problems resulting from factors outside of Lesterius’ control, for which it shall not be liable.

4.6. The Order Form shall include a description of the requested Services and of the respective Services fees and payment milestones.

4.7. Lesterius shall do its best efforts to ensure an efficient collaboration with the Customer and to request the input of the Customer in a timely manner. In light thereof, the Customer acknowledges that Lesterius relies on information to be provided by the Customer in due time and in conformity with article 3.

5.    Complaints

5.1.  The Customer is obliged to verify the Services on the moment of the performance thereof with regard to their conformity and quality. Complaints regarding the aforementioned elements are only valid if they are communicated by the Customer to Lesterius immediately – and at the latest within ten (10) Business Days as of the delivery of the Services by indicating the alleged defect.

5.2.  The absence of complaints about the Services within the aforementioned terms and conditions automatically implies the acceptance of the Services by the Customer.

5.3.  Complaints regarding hidden defects and non-conformity are only valid if they are communicated in writing to Lesterius within three (3) Business Days after discovery of the flaw, and under the express condition that such Services remain available for Lesterius’ inspection effected by its representatives. Such complaints shall only be admissible within three(3) months after the delivery of the Services.

5.4.  A complaint shall be deemed unfounded in case of (i) insignificant deviations from the agreed quality, (ii) only minor impairment of usability, (iii) damage arising after the passing of the risk, (iv) faulty or negligent handling, (v) unsuitable equipment, (vi) failure on behalf of the Customer to give notice of the alleged defect within the terms as referred to in this clause (vii) failure on behalf of the Customer to allow Lesterius to inspect the Services in the state they were upon delivery, etc.

5.5.  In the event a complaint is founded, such Services shall, at Lesterius’ sole discretion, either be offer a solution or alternative in collaboration with the Customer., excluding any compensation for damages.

5.6.  The Customer cannot make any complaints to suspend or refuse payment.

6.    Intellectual Property Rights

6.1.  ‘Intellectual Property Rights’ means any intellectual property rights, including copyrights, trade and service marks, trade names, rights in logos, inventions, registered designs, design rights, patents, database rights, all rights of whatsoever nature in computer software and data, all intangible rights and privileges of nature similar or allied to any of the foregoing, in every case in any part of the world and whether or not registered; and including all granted registrations and all applications for registration, all renewals, reversions or extensions, the right to sue for damages for past infringement and all forms of protection of a similar nature which may subsist anywhere in the world.

6.2.  All actual and future Intellectual Property Rights vested in the Services or created by Lesterius during or in context of the Agreement shall remain the exclusive property of Lesterius. No transfer or assignment of any Intellectual Property Rights to the Customer shall occur under this Agreement unless as expressly stated in this article.

6.3.  The Customer is granted a perpetual, non-exclusive, transferable, sublicensable right to use the specific Services and the Intellectual Property Rights created in the context of the provision of the Services, worldwide. This right to use includes any purpose for which the Customer deems it fit. It includes, but is not limited to, internal business purposes, the ability to distribute, exploit, resell or sub-license and to adapt the Intellectual Property Rights.. All rights not expressly granted to the Customer are reserved by Lesterius including, but not limited to, know-how, (general) skills and knowledge created by Lesterius in the context of the Services.In any event,Lesterius maintains the right to use such know-how, skills and knowledge in the context of other agreements and customers to the extent no Customer-specific or Confidential data would be used.

6.4.  The Customer acknowledges and agrees that Lesterius is entitled to grant, license, assign, or otherwise exploit its Intellectual Property Rights, templates, tools, and materials to third parties without restriction and however it deems fit. The Customer shall not challenge or assist any third party in challenging the validity or ownership of Lesterius’ Intellectual Property Rights.

6.5.  The Customer shall promptly notify Lesterius of any actual or suspected infringement or unauthorized use of Lesterius’ Intellectual Property Rights in relation to the Services. Lesterius shall have the exclusive right to determine whether and how to enforce its Intellectual Property Rights, and the Customer shall provide reasonable assistance in any enforcement action if requested by Lesterius.

6.6.  The Customer grants Lesterius the right to use the Customer's name, logo, and Trademarks as a reference for marketing and promotional purposes, including but not limited to use on Lesterius' website, presentations, and marketing materials, provided that such use is in accordance with reasonable professional standards and does not disparage the Customer.

6.7.  The Customer shall ensure that its employees, agents, affiliates and contractors comply with the obligations set forth in this Agreement. The Customer shall remain liable for any breach of these obligations by such persons.

7.    Confidentiality

7.1.  ‘Confidential Information’ means all information disclosed by either party to the other Party (the "Receiving Party"), before or after the signing of the Agreement, which is designated in writing or orally as confidential, restricted, or proprietary or would appear to a reasonable person to be confidential, whether or not marked or disclosed orally. This includes information relating to the disclosing party’s business including its software, services, products, operations, price setting, processes, plans or intentions, developments, trade secrets, know-how, design rights, market opportunities, personnel, source code(s) of software, methodologies, business and financial plans, drawings, specifications, Intellectual Property Rights, manuals, all technical and business information, all data, and all information derived from any of the above.

7.2.  During the term of the Agreement, and for a period of ten (10) years after the termination or expiry thereof, each party shall keep confidential any and all Confidential Information disclosed by the other party which it receives pursuant to the performance of the Agreement and shall not divulge such Confidential Information to any third party other than to persons in its organization on a need-to-know basis, and to the extent they are bound by an obligation of confidentiality at least as strict as the confidentiality obligation defined herein.

7.3.  The receiving party shall use at least the same degree of care in protecting the disclosing party’s Confidential Information as it uses to protect its own Confidential Information, which shall in any event include the highest reasonable degree of care applicable within the sector. Each Party shall be responsible for the performance of the obligations set forth in the present article by any person to whom Confidential Information is disclosed.

7.4.  The obligations set out above shall not apply to any Confidential Information or part thereof which:

  • is already in the public domain or comes into the public domain through no fault of, or breach of this Agreement by the receiving party, its agent or representative;

  • is disclosed to the receiving party by a third party having a legal right to do so;

  • the receiving party is obliged to disclose by law, statutory order or governmental body having the force of law, in which case the receiving party shall give the disclosing party prompt advance written notice of the disclosure (where lawful and practical to do so) so as to give the disclosing party the opportunity (where possible) to prevent or control the manner of disclosure.

7.5.  Any disclosed Confidential Information may only be used by the receiving party for the purposes of the Agreement and may not be reproduced without the disclosing party’s explicit written consent.

7.6.  Upon termination or expiry of the Agreement, the disclosing party may, at its sole discretion, require the receiving party to either (i) return all Confidential Information and any copies thereof provided under this Agreement, or (ii) irreversibly delete such Confidential Information from its systems and confirm in writing that such deletion has taken place.

8.    Processing of Personal Data

Lesterius shall only process Personal Data (as defined in Annex 1) on behalf of the Customer in accordance with a data processing agreement as required in article 28.3 of the General Data Protection Regulation (“GDPR”). This may be a data processing agreement provided by the Customer or, to the extent the Customer does not provide one, the Data Processing Agreement as attached in Annex 1 can be signed by the Parties upon their agreement.

9.    Fees and payment terms

9.1.  The fees payable for the provision of Services and software and the payment terms are agreed upon between the parties in the Order Form.

9.2.  The fees are quoted exclusive of VAT, any accessory charges, such as transport and insurance charges, customs duties, sales tax, etc. All such costs, taxes, levies or rights imposed by any authority on the software or Services provided by Lesterius are for the account of the Customer.

9.3.  Lesterius remains entitled to adjust the applicable prices from time to time, it being understood that any such changes have to be notified by written notice by Lesterius to the Customer thirty (30) calendar days prior to the implementation of such new prices.

9.4.  Invoices are payable in the currency stated on the invoice, without deduction or discount, to the bank account and on the due date indicated in the invoice.

9.5.  In case of partial or non-payment of an invoice at its due date, the amount due will automatically and without prior notice be increased in conformity with the EURIBOR interest rate . Without prejudice to payment of these interests, the Customer will also owe compensation to Lesterius for applicable legal and extralegal recovery expenses, including any cost relating to bills of exchange, reminders and protest or legal costs.

9.6.  In case of partial or non-payment of an invoice at its due date: (i) Lesterius is entitled to immediately suspend the execution of all pending orders and deliveries without prior notice; (ii) any other non-expired debt of the Customer will become due automatically and without prior notice and/or (iii) Lesterius may decide to, going forward, demand guaranties and securities (such as but not limited to advance payments and bank guarantees) of the Customer which it deems appropriate in view of the good execution of the Customer’s obligations. Should the Customer omit to give such a guarantee, Lesterius is entitled to immediately suspend the execution of all pending Orders and deliveries without prior notice.

10.    Force Majeure and hardship

10.1.   A ‘Force Majeure Event’ means any event or combination of events beyond the reasonable control of a party, including, without limitation, acts of God, war, riots, public disorder, civil commotion, economic sanctions, fire, floods, explosions, epidemics, terrorism, governmental measures or restrictions, system interruption or lock-outs, power outages, internet failures, cyber-attacks or hacking incidents, supply chain disruptions resulting in the non-performance or delay in performance of a party’s obligations.

10.2.   Neither party will be in breach of the Agreement or otherwise liable to the other Party for any failure to perform or delay in performing its obligations to the extent that such failure or delay is due to a Force Majeure Event.

10.3.   If a Force Majeure Event occurs, the affected party will notify the other party in writing without delay, and at the latest within forty-eight (48) hours setting out details of the nature, extent and expected duration of the Force Majeure Event.

10.4.   The affected party will use its reasonable efforts to mitigate the effects of the Force Majeure Event, to continue to perform the Agreement notwithstanding the occurrence of the Force Majeure Event and to ensure the Force Majeure Event comes to an end.

10.5.   In the event of a Force Majeure Event continuing for a period of more than 3 months, the other party shall be entitled to terminate the Agreement, having given no less than 14 days notice in writing to that effect to the party affected by a Force Majeure Event.

10.6.   Equal to a Force Majeure Event beyond Lesterius’ control, which substantially change the economic importance or contents of the delivery, considerably affects Lesterius’ business or render Lesterius’ contractual duties excessively onerous. In such circumstances, the Agreement shall be adapted taking into account the principles of reasonableness and good faith. To the extent this is not economically justifiable, Lesterius shall have the right to rescind the Agreement/Order Form without being due any indemnification to the Customer.

10.7.   However, in any case, an event of hardship shall be understood to mean an increase in the fees of any component or materials of the Services and/or software including labour and/or transport costs. The increase must at least result in an increase in the original fees by 15% or more. If such an event of hardship occurs, the fees taken up in the Order Form will be amended and the unforeseen costs will be charged to the Customer.

11. Early termination

11.1.   The Customer is entitled to terminate the Services at any time, subject to the payment of: (i) all costs and fees incurred by Lesterius up to that date; and (ii) a Fee corresponding to the Services actually provided and all amounts that Lesterius could have obtained from the performance of the Services during the term of the Agreement which is estimated at a flat rate of 30% of the Services which were not performed, without prejudice to Lesterius’ right to prove the actual damage if it were higher.

11.2.   Notwithstanding the above, each Party has the right to terminate the Agreement immediately and automatically, without prior court intervention and without any compensation being due, upon written notice to the other Party, in the event:

  • Except for the payment obligation of the Customer – the other Party commits any material breach of any of the terms of the Agreement, and (if such a breach is remediable) fails to remedy that breach within thirty (30) calendar days of that other Party being notified in writing of the breach (for example: failure to (timely) upgrade or keep the software up to date by the Customer, thereby preventing Lesterius from performing its Services, lack of payment by the Customer or lack of the Customer to provide required information to Lesterius and to collaborate as specified in article 3);

  • the other Party becomes subject to bankruptcy or similar proceedings, or generally fails to pay, or admits its inability to pay, all or a substantial part of its debts as they become due, or applies for, or is granted a moratorium;

  • a receiver, manager, administrator, liquidator, or other similar officer or practitioner is appointed over the whole or any substantial part of the other Party’s business or assets, or any steps are undertaken to that effect (typically, it becomes the subject of a bankruptcy, insolvency, or other similar proceeding);

  • the other Party has committed an act involving dishonesty, disloyalty, bribery or fraud with respect to such Party or its business.

11.3.   In the event that the Customer undergoes a change of control (for the purpose of this clause, ‘control’ means the ownership of the majority (> 50 %) of the total voting shares within a company)),it should notify Lesterius thereof. If Lesterius reasonably determines that such change of control could adversely affect its interests under the Agreement, Lesterius may terminate the Agreement by providing written notice within thirty (30) calendar days of becoming aware of the change of control.

 

12. Consequences of termination

12.1.   Upon termination of the Agreement, regardless of the reason for termination, Lesterius will immediately cease performing its Services to the Customer.

12.2.   Upon the Customer’s request, Lesterius will return or delete all relevant data of the Customer unless it is legally obliged to retain it for a longer period. Any costs associated with transferring data to a new system or performing other related tasks will be invoiced by Lesterius based on the applicable hourly rates as set out in the Order Form.

12.3.   The agreed fees are fully due; there will be no refund of fees already paid for unused Services or for incurred and planned costs.

12.4.   The termination or expiry of the Agreement shall be without prejudice to any other rights, claims, or remedies available to the Customer under applicable law or the Agreement itself.

12.5.   Termination of the Agreement will have no effect on the contract that is concluded between the Customer and the Software Provider.

12.6.   Upon termination of the Agreement, the Parties can negotiate in good faith whether and to what extent Lesterius shall assist the Customer with transitioning to another service provider at the agreed upon rates.

13. Liability

13.1.   Nothing in the Agreement attempts to limit or exclude any liability that cannot be legally limited, including any liability for: i) death or personal injury caused by negligence (whether physical or psychological); ii) fraud or fraudulent misrepresentation; iii) gross or willful misconduct.

13.2.   Notwithstanding the above, Lesterius shall have no liability for any indirect damage, special, incidental or consequential damage or loss including i) loss of profits, ii) loss of production, iii) loss of business, iv) loss of data, (v) loss of productivity, vi) recall.

13.3.   For the avoidance of doubt, Lesterius is not liable for i) the functioning or performance of the software or hosting services, ii) the resolution of any issue or problem relating to the software or hosting services, and/or iii) the content, accuracy or integrity of the Customer's data, or any manipulation of such data by the Customer or third parties.

13.4.   Lesterius liability for non-conforming Services is limited to the remedy taken up in article 5.5. For any other liability, Lesterius shall only be liable to pay damages for gross failure to perform its obligations or for its wilful misconduct or fraud. In any event, the total liability of Lesterius arising from this Agreement shall in no case exceed the projected or total fees, whichever is lower, of the order placed that gave rise to the damage.

13.5.   Any claim for damages of the Customer must be duly documented and must clearly demonstrate the loss suffered by the Customer, the amount of the damages and the causal link between the two.

13.6.   The Parties agree that the remedy for damages caused by the non-performance of any contractual obligation under the Agreement shall, within the statutory limits, be exclusively governed by the rules of contract law, even if the event leading to the damage also constitutes a tort. As far as acceptable under local legislation and within statutory limits, the Parties expressly acknowledge that any form of extra-contractual liability arising from the performance of the Agreement shall not be invoked. Moreover, the Customer expressly waives any extracontractual claims against the auxiliary persons of Lesterius, within the statutory limits. The Customer warrants that it will include a similar clause (exclusion of extra-contractual liability within a contractual relationship) in the contractual relationship with the Software Provider. In light thereof, the Customer will indemnify and hold Lesterius harmless against any claim of any kind from the Software Provider arising from the breach of the above obligation.

14. Indemnifications

The Customer shall indemnify, defend, and hold harmless Lesterius, its directors, officers, employees, agents, suppliers, and Affiliates from and against any and all fines, penalties, claims, actions, suits, liabilities, judgments, losses, damages, costs, and expenses (including reasonable legal fees and expenses), to the extent arising out of or resulting from (i) the Customer’s negligence, misconduct, or breach of its obligations under this Agreement; (ii) any infringement of third-party rights resulting from data, content, or specifications provided by the Customer; (iii) failure to comply with applicable laws or regulations in the context of the Services provided by Lesterius.

15. Non-solicitation

15.1.   For a period of twelve (12) months following the termination or expiration of this Agreement, the Customer agrees not to directly or indirectly solicit, induce, recruit, or encourage any Lesterius employee, subcontractor, or consultant to provide Services independently or to become employed by the Customer or any other person or entity.

15.2.   Furthermore, the Customer shall not solicit or entice away any customer, client, or supplier of Lesterius with whom the Customer had contact or dealings during the term of this Agreement for the purpose of competing with Lesterius, whether on the Customer's behalf or for any other entity.

16. Miscellaneous

16.1.   Entire Agreement/Amendments. The Agreement constitutes the entire agreement between the parties relating to its subject matter and supersedes all documents and/or agreements previously exchanged between them. No variation of this Agreement is valid unless it is in writing and signed by or on behalf of each party.

16.2.   Severability. If any obligation in this Agreement should be unenforceable or contrary to any provision of mandatory law or public policy, such unenforceability or invalidity shall not affect the validity and enforceability of any other provision of the Agreement, nor of that part of the relevant provision which is not contrary to mandatory law or public policy. In such case, the parties shall in good faith replace the invalid or unenforceable provision with valid and enforceable provisions that approximate the original intent of the parties as closely as possible with similar economic consequences for the parties.

16.3.   Assignment. The Customer’s rights and obligations under the Agreement cannot be directly or indirectly transferred or assigned in whole or in part to a third party without the prior written consent of Lesterius. However, Lesterius may assign or transfer its rights and obligations under the current Agreement to an affiliate upon written notification thereof to the Customer.

16.4.   Relations between the parties. In the performance of the Agreement, the parties are and shall remain independent parties. The parties are solely liable for their own operating costs and alone bear the risks inherent to their business. None of the provisions of the Agreement can be interpreted as indicating consent by the parties to form a partnership or joint venture. The parties shall be solely responsible for the employment, social security status, tax obligations, control and direction of their own employees.

16.5.   No waiver. No waiver of any provision, breach, or right under this Agreement shall be effective unless expressly made in writing and signed by the waiving party. Any failure or delay to exercise a right shall not be deemed a waiver, nor shall partial exercise preclude further or future exercise. A waiver of any breach shall not constitute a waiver of subsequent breaches, nor affect the waiving party’s right to enforce strict compliance thereafter. All waivers are subject to ongoing review and approval by the waiving party and shall not extend beyond their specific intent.

16.6.   Official language. In the event of inconsistencies or conflicts between the English version of the GTC and a local translation of the GTC, the English version shall prevail.

17.  Applicable law and jurisdiction

17.1 The GTC and the Agreement are exclusively governed by and will be interpreted in accordance with the laws of the registered office of the Lesterius entity that has concluded the Agreement with the Customer.

17.2 All disputes between parties relating to this Agreement shall be subject to the exclusive jurisdiction of the courts of the place of the registered office of the Lesterius entity that has concluded the Agreement with the Customer.

 

18. Country specific legislation

18.1.     Belgium

11.1 Article 1794 of the old Belgian Civil Code

11.3 Articles 1:14 to 1:20 of the Belgian Code on Companies and Associations

13.6 Article 6.3 of the Civil Code

18.2.     Spain

10 Article 1105 of the Civil Code

11.1 Article 1152 of the Civil Code

11.2 Article 1124 of the Civil Code

13.4 Article 1101, 1102, 1902 of the Civil Code

13.6 Article 1101, 1102, 1902 of the Civil Code

18.3.     The Netherlands

11.1 Article 7:408 of the Dutch Civil Code

11.3 Book 2 of the Dutch Civil Code

13.6 Book 6 of the Dutch Civil Code

18.4.     Sweden

Not yet defined.

DATA PROCESSING AGREEMENT V.01/2026 (under construction)

Annex 1 to the General Terms & Conditions

We offer a template that could be used for a DPA agreement and our policy is to try to operate in the same fashion as the below DPA describes. It is our internal policy that on request of the client can be formalised.

This Data Processing Agreement (“DPA”) is entered into between:

1.     The Customer (hereinafter the "Controller");

and

2.     Lesterius (hereinafter the "Processor").

The Controller and Processor are referred to together as the "Parties" or individually as the "Party".

This DPA shall form a part of the Agreement.

1.    Definitions

In addition to the terms defined elsewhere in this DPA, capitalized terms used in this DPA shall have the meaning as set out below.

Agreement: means the Agreement concluded between the Parties, governing the provision of the Services by the Processor on behalf of the Controller.

Controller: means the Party who determines the purposes and the means of the Processing of Personal Data, as determined by article 4.7 GDPR.

Data Protection Legislation :means (i) the GDPR; (ii) local data protection legislation; and (iii) all other current or future applicable national laws relating to or impacting the Processing of Personal Data and privacy.

Data Subject: means an identified or identifiable natural person whose Personal Data is being processed. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

DPA: means this Data Processing Agreement, including the Schedules, in which the general rules are laid down with regard to the conditions pursuant to which the Processor will perform the activities for the Processing of Personal Data on behalf of the Controller.

Effective Date: means the date on which the Parties have signed the Agreement.

GDPR: means the EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC as from 25 May 2018.

Personal Data: means any information relating to a Data Subject. This includes, in particular but not limited to, identifiers such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Personal Data Breach: means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data transmitted, stored or otherwise Processed.

(to) Process:  means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Services: means the services, functions, responsibilities and outputs to be provided and fulfilled by Processor under the Agreement.

Schedule: means the Schedules to this DPA, which form an integral part thereof and which describe further the details with respect to the Processing of the Personal Data.

Sub-Processor: means a Third Party engaged by the Processor as a Sub-Processor to provide the Services or any part of them.

Third Country: means any country that is not a Member State of the European Economic Area.

Third Party: means any person or entity which is not a party to the DPA, including any contractors (including Sub-Processors).

2.    Scope of the DPA

The DPA is entered into in the context of the Agreement and governs all Processing of Personal Data by the Processor on behalf of the Controller in relation to the Processing activities as described in Schedule 1.

3.    Data Processing under the Agreement

With respect to the Processing of Personal Data by the Processor on behalf of the Controller in the context of the Agreement and the performance of the Services by the Processor, the Controller determines the purposes and means of the Processing (see Schedule 1).

The Processor confirms that it shall only process the Personal Data on behalf of the Controller. The Processor confirms that it has, amongst others, no say in determining (i) the purposes and the means of the processing, (ii) the duration of the processing, (iii) the recipients of the Personal Data, (iv) the transfer of Personal Data to countries outside the European Economic Area, etc

The Processor shall, without undue delay and at the latest within five (5) days after receiving the potentially infringing request, inform the Controller in writing (including e-mail) if, in its opinion, an instruction infringes the Data Protection Legislation or other EU or Member State data protection provisions.

The Processor Processes Personal Data as necessary for the provision of the Services. This includes processing by its Sub-Processors and employees. The Processor must ensure compliance with all agreed obligations and legal requirements hereunder. The Processor must ensure its Sub-Processors and employees (if applicable) abide by the same obligations:

  • only Process, disclose or permit the disclosure of the Personal Data to any Third Party on behalf of the Controller:

    •  i.         in accordance with the written (including those provided via e-mail) instructions of the Controller in the context of the Agreement, as stated in this DPA and Schedule 1; or;

    •   ii.         if required by EU or Member State law to which the Processor is subject, in which case Processor shall inform the Controller of:

      • a.     the applicable legal requirement;

      • b.     the concerned Personal Data; and

      • c.     the Processing required by the legal obligation or court order.

  • as far as the Processor is allowed to inform the Controller thereof. In any case, the Processor shall only make the Personal Data available to its employees, contractors, directors, agents and representatives who are directly involved in the performance of the Agreement and on a strict “need-to know” basis.

  • take reasonable steps to ensure that all employees, contractors, agents, representatives and Sub-Processors who may have access to the Personal Data:

    • i.         are informed of the confidential nature of the Personal Data; and

    • ii.         are subject to the same data protection standards or professional and statutory obligations of confidentiality that apply with respect to (the Processing of) the concerned Personal Data by the Processor;

  • notify a Personal Data Breach to the Controller in writing, without undue delay upon becoming aware of a Personal Data Breach. The Processor will provide all necessary assistance and information to the Controller; 

  • notify the Controller, without undue delay after receipt of a request by a Data Subject with respect to the exercise of its rights under the Data Protection Legislation with regard to Personal Data Processed by the Processor under the Agreement.

The Processor shall upon written instruction of the Controller respond without undue delay to the request of the Data Subject, including but not limited to the rights of access, rectification, erasure or restriction of Processing.

The Processor shall assist the Controller by assuming appropriate technical and organizational measures, insofar as possible, for the fulfilment of the Controller’s obligation to respond to requests for exercising the Data Subject’s rights;

  • provide all assistance as requested in writing by the Controller in order to allow the Controller to (i) prepare a data protection impact assessment and submit any prior consultation to a supervisory authority where required by Data Protection Legislation and (ii) comply with any assessment, enquiry, notice or investigation under the Data Protection Legislation;

  • cease the Processing of Personal Data immediately and in any case within five (5) Business Days after termination or expiry of the Agreement or the Service to which the Processing relates. The Processor will, at Controller’s choice, either return the Personal Data by secure file transfer within a reasonable timeframe or delete the Personal Data and any copies and/or back-ups insofar possible under applicable legislation.

The nature and purpose of the Processing, type of Personal Data to be Processed and categories of Data Subjects affected by the Processing are further detailed in Schedule 1.

4.    Sub-Processors

The Controller hereby agrees that Processor will rely on the services of Sub-Processors, whose details are included in Schedule 2. The Controller accepts the appointment of these Sub-Processors for the Processing of Personal Data as stated in this DPA.

The Processor shall only engage Sub-Processors to Process Personal Data subject to:

  •  the same or similar standards and obligations as those set out in this DPA; and

  • the Processor shall remain fully liable to the Controller for the performance of that Sub-Processor’s obligations.

The Processor shall inform the Controller in writing, in case the Processor wishes to rely on the services of other Third Parties (new Sub-Processors) than those included in Schedule 2, or in the event of any changes to Schedule 2. The Controller can protest the appointment of a new Sub-Processor in writing within ten (10) Business Days upon receipt of the Processor’s notice. If the Controller does not protest the engagement of a new Sub-Processor within that period of time, the engagement thereof will be deemed accepted by the Controller. The Controller shall not unreasonably withhold consent to the appointment of a new sub-processor.

5.    Liability

A Party shall provide the other Party with a formal notice (including e-mail), in the event a Party fails to comply with its obligations under this Agreement and thereby causes damage to the other Party.

The Processor shall only be liable for direct damages resulting from its breach of obligations, fraud, or serious error or negligence. The maximum liability shall be capped as set forth in the Agreement.

The Processor shall not be liable for any damages or losses resulting from actions taken under the Controller’s instructions, where the Processor has formally objected in accordance with Article 3 of this DPA.

6.    Compliance and audit

The Controller has the right to carry out a documentary audit or rely on the services of third-party auditors to carry out such audit, in order to verify the Processor’s compliance with the terms of this DPA and Article 32 to 36 GDPR. The Processor shall provide all reasonable assistance and documents in order to ensure that this audit can be carried out without unreasonable delay. The Processor shall immediately inform the Controller if, in its opinion, an instruction infringes the GDPR or other Union or Member State data protection provisions.

The Controller may only carry out an audit, as described in this article with written notice to the Processor at least thirty (30) Business Days prior to the audit. Such audit may not be carried out more than once during two (2) calendar years.

In the event the Controller wishes to rely on the services of third-party auditors, the Controller shall provide the Processor with prior written notice at the latest thirty (30) Business Days prior to the audit. Such information shall at least contain the identity of the concerned third-party auditor. The Controller shall ensure that the appointed auditors have proven skills in the field of data protection. The Processor may, unless unreasonably, refuse a specific auditor in its own discretion and ask for the appointment of another auditor.

The cost for this audit will be borne by the Controller. The Processor is entitled to request a reasonable remuneration for the access to its premises, provision of information and related costs. Unless the audit shows that the Processor or any of its Sub-Processors has or is infringing the DPA or any Data Protection Legislation.

The Controller shall ensure that its employees or appointed Third Parties have committed themselves to confidentiality or are obliged as such by statutory obligation of confidentiality.

The Controller may address its questions or requests in relation to the processing of Personal Data by the Processor to: legal@lesterius.com.

At Controller’s first request, Processor will make those parts of Processor’s and its Sub-Processors’ records of processing activities within the meaning of Article 30 GDPR that relate to the processing of Controller’s Personal Data by Processor available to Controller in writing, including in electronic form.

If an audit or inspection reveals that the Processor or any of its Sub-Processors do not comply with their obligations under Data Protection Legislation or this DPA, the Processor will, including with regard to its concerned Sub-Processors, remedy the non-compliance promptly and ultimately within thirty (30) Business Days after having been notified of the non-compliance after having been notified of the non-compliance by the Controller.

The Processor may request that the Controller sends the final audit report to the Processor at no cost. This report shall be treated as confidential by the Controller and any auditor mandated by the Controller and shall not be published, unless otherwise provided by Data Protection Legislation or any other applicable law.

7.    Security of Processing

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the Processor shall do its best efforts to implement the technical and organisational measures required pursuant to article 32 of the GDPR to ensure a level of security appropriate to the risk as provided in Schedule 3. The Processor shall ensure that its Sub‑Processors and employees implement appropriate technical and organisational of at least the same security level as the technical and organisational measures provided in Schedule 3.

At the Controller’s first request, the Processor will communicate these technical and organisational measures, implemented by itself and by its Sub-Processors in writing within ten (10) Business Days.

8.    Transfer of Personal Data

The Controller grants the Processor permission to transfer Personal Data to a Third Country or to an international organisation, as set out in Schedule 1. Any change or addition to the list as stated in Schedule 1, as proposed or required by the Processor, will be submitted to the Controller for its approval before such transfer takes place, along with all information set out in article 0 hereunder.

Any transfer to a Third Country or international organisation can only take place on the basis of one of the following grounds established by Chapter V GDPR:

  • an adequacy decision by the Commission;

  • appropriate safeguards, including the availability of enforceable rights of Data Subjects and effective legal remedies.

Appropriate safeguards may be provided by: (i) binding corporate rules accepted by the supervisory authority; (ii) standard data protection clauses adopted by the Commission or adopted by the supervisory authority and approved by the Commission; or (iii) an approved code of conduct as provided in article 40 of the GDPR or an approved certification mechanism as provided in article 42 of the GDPR. The appropriate safeguards should be complemented by supplementary measures if the level of protection as required by the Data Protection Legislation is not respected in the Third Country and therefore the appropriate safeguards cannot be complied with in practice. These appropriate measures should ensure an essentially equivalent level of protection as provided in the EEA.

In case of evolving insights, new guidance or a change in the Data Protection Legislation or case law which render all or part of the Services illegal, the Processor shall take all necessary measures to remedy such unlawfulness.

9.    Term and termination of the DPA

This DPA shall commence on the Effective Date and remains applicable as long as the Agreement is in force. The termination modalities agreed upon by both Parties in the Agreement also apply to this DPA.

Without prejudice to article - of this DPA, the Processor shall immediately and in any case within forty-eight (48) hours cease all processing activities in the context of the Agreement in the event of a termination of this DPA.

Upon termination of this DPA, the Processor shall return or delete all Personal Data and existing copies and/or back-ups as provided in article -.

10. Applicable law and jurisdiction

The present DPA shall be governed by and construed in accordance with the laws of the registered office of the Lesterius entity that has concluded the Agreement with the Customer, without giving effect to any other choice of law or conflict-of-laws rules or provisions.

Any dispute concerning the validity, interpretation, enforcement, performance or termination of this DPA, which cannot be settled by negotiation, shall be submitted to the exclusive jurisdiction of the courts of Ghent Belgium.

***

Schedules:

Schedule 1: Details of the processing of personal data

Schedule 2: Sub-Processors

Schedule 3: Technical and organizational measures

Schedule 1: DETAILS OF THE PROCESSING OF PERSONAL DATA

  • 1. The subject-matter of the Processing of Personal Data

Personal Data may be processed only insofar as necessary to perform our consultancy services for the client. Typical situations can include - but are not limited to – the following services: Accessing client systems (ERP, CRM, HR, finance, logistics, reporting tools),  Testing & troubleshooting (Using real or pseudonymize production data to debug issues),  Process optimization (Analysing workflows that include personal data fields), Configuration & development (Adjusting data models, scripts, automations, reports). Support & maintenance (Investigating incidents or user issues involving records). We try to limit our activities within the border of the context described in the Order Form.

  • 2. The nature and purpose of the Processing of Personal Data

    The Services constitute of the Services agreed in the Order Form.

  • 3. The categories of Data Subjects

In the course of performing the Services, Lesterius may process Personal Data relating to various categories of data subjects, including employees, customers, prospects, suppliers, partners, and users of applications managed by the Client, as well as other natural persons whose Personal Data is contained in the Client’s systems and is processed solely to the extent necessary for the performance of the Services.

  • 4. The categories of Personal Data

Depending on the client’s business the Personal Data may include the following categories of Personal Data (not limited to): Identification data (Name, email, phone number), Professional data (Job title, department, employee ID), Customer data (Client contacts, order history, invoices), User account data (User IDs, roles, access logs) Operational data (Time registrations, approvals, workflow steps). We try to limit our activities within the border of the context described in the Order Form

We avoid to handle the Personal Data of special cateogries like (health, biometrics, political, etc) unless it is strictly required for the assignment and explicitly agreed upon by the client.

  • 5. Transfer(s) of Personal Data - Under Construction

Personal Data are transferred to the following Third Countries (outside the EEA):

a)    [country – if applicable, the relevant Sub-Processor – basis of the transfer, e.g. adequacy decision, binding corporate rules, standard contractual clauses,…]

Schedule 2: SUB-PROCESSORS

Name: Sequitor BV

Contact data: legal@lesterius.com

Description of services: Hosting-provider if approved and contracted as such by the Customer.

Processing location and transfer mechanism (to the extent applicable): EEA

Name: Lesterius Entities and Lesterius Holding

Contact data: legal@lesterius.com

Description of services: Other Lesterius entity then the Lesterius entity that has emitted the Order .

Processing location and transfer mechanism (to the extent applicable): EEA

Name: Our independent contractors/partners

Contact data: legal@lesterius.com

Description of services: Lesterius works with several independent contractors. Each of those contractors signed a Frame Agreement with one the Lesterius entities binding them to work in a professional way conform with our values and standards. Due to the co-creation type of services we provide the Independent Subcontractors involved in executing the agreement will be presented to the data controller in a timely fashion. 

Processing location and transfer mechanism (to the extent applicable): EEA

 

Schedule 3: TECHNICAL AND ORGANISATIONAL MEASURES (under construction)

[These measures should take into account article 32 of the GDPR. This article states that:

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate:

  • the pseudonymisation and encryption of personal data;

  • the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;

  • the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident;

  • a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.”]

Privacy Policy

Introduction

This privacy policy will explain how Lesterius uses the personal data we collect from you when you use our website.

a. our responsibility

As we collect personal data from you and determine the purposes for which and the means by which your personal data is processed, we act as a datacontroller. This is a responsibility we do not take lightly and  therefor appointed a completely independent Data Protection Officer ( DPO) who can be reached at dpo@lesterius.com.

b. your responsibility

First, read this privacy policy! If you’re a Lesterius client, you should read the contracts we agreed upon. These contracts can stipulate other specific details.

You supply us with your personal information at your own risk. Although current encryption methods and techniques are very secure, we can’t guarantee that every single transfer of data will be 100% secure, nor what hacking techniques will pop-up in the future.

If you’re allowed access to our systems, you are responsible for your login and password. Don’t use an easy one and do not share it! If you think your privacy is breached, let us know. You can inform our DPO directly on dpo@lesterius.com.

How and when do we collect your data?

We use different methods to collect data from and about you including through:

Direct interaction - You directly provide Lesterius with most of the data we collect. We collect data and process data when you:

  • Register online or place an order for any of our products or services.

  • Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.

  • Interact with emails we provide you.

Automated technologies or interactions - We collect personal data when you interact with our websites and digital services including social media platforms, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies. Please see our Cookie Policy for further details.

Third parties or publicly available sources - We can receive personal data about you from various third parties and public sources as set below:

  • Advertising networks.

  • Identity and contact data from publicly available sources and data brokers

  • Technical data from parties such as analytics providers and search information providers

Information which is freely available through public internet searches

What data do we collect?

Lesterius might collect the following data:

  • Personal identification information Name, email address, phone number, etc.)

  • Additional identification information IP-address, login, browser type and version, location, OS, information about your visit to our websites, …

  • Information about the use of our website URL-clickstream, viewed products, how long you stayed on a page, …

  • Information about the use of our services trial user, sample app, support tickets, …

  • Information about our marketing and communication services your preferences in receiving marketing from us and our third parties, your communication preferences, …

  • Information relating to e-mail communications date stamp that the e-mail is opened, links accessed from the e-mail, unsubscribe preferences, …

We don’t process any sensitive personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data and biometric data our – to our best knowledge - personal data from children under the age of 16.

How will we use your data?

Lesterius might collect your data so that we can:

  • Process your order and manage your account when relevant.

  • Email you with special offers on Lesterius products and services we think you might be interested in.

  • Suggest specific content to you on our websites.

  • Pre-fill-in forms for you with your data.

  • Follow up and help you when you engage for a free trial.

  • Answer the support tickets and questions you ask us.

  • Comply with legal obligations.

  • To compile anonymous statistics

  • For the purpose of recruitment

When Lesterius processes your order, it may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.

How and how long do we store your data?

Lesterius securely stores your data at our servers in a datacenter in Europe.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

In some circumstances we will anonymise your personal data (so that you are not identifiable and the data can no longer be associated with you) for research or statistical purposes. In this case we may use this information indefinitely without further notice to you.

Data Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Disclosure of your personal data

We may share your personal data with the parties set out below for the purposes set out in Section ‘How we will use your data’:

  • External third parties such as our Solution Partners, Creative Partners, Integration Partners, service providers acting on our behalf, professional advisers and other authorities/ regulatory bodies

  • Third parties, to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only permit our third party service providers to process your personal data for specified purposes and in accordance with our instructions.

Marketing

Lesterius would like to send you information about products and services of ours that we think you might like, as well as those of our Lesterius technology partners.

If you have agreed to receive marketing information, you may always opt out at a later date. You have the right at any time to stop Lesterius from contacting you for marketing purposes.

What are your data protection rights?

Lesterius would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • The right to access – You have the right to request Lesterius for copies of your personal data. We may charge you a small fee for this service.

  • The right to rectification – You have the right to request that Lesterius correct any information you believe is inaccurate. You also have the right to request Lesterius to complete the information you believe is incomplete.

  • The right to erasure – You have the right to request that Lesterius erase your personal data, under certain conditions.

  • The right to restrict processing – You have the right to request that Lesterius restrict the processing of your personal data, under certain conditions.

  • The right to object to processing – You have the right to object to Lesterius’s processing of your personal data, under certain conditions.

  • The right to data portability – You have the right to request that Lesterius transfer the data that we have collected to another organization, or directly to you, under certain conditions.

We apply the highest security standards when it comes to hosting and protecting information. Your personal information will not be sold, rented, distributed, or made available in any commercial way to third parties, except as described in this policy or with your prior consent.

Our sites are hosted on servers that are located in third countries and comply with the legal obligations according to the standard contractual clauses of the European Parliament and Council. You can find additional information on Squarespace hosting here.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: dpo@lesterius.com.

Privacy policies of other websites

The Lesterius website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

Lesterius keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on Oktober 31st, 2024.

We recommend that you check this privacy policy regularly to see if any updates or changes have been made.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

How to contact us

If you have any questions about Lesterius privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: dpo@lesterius.com

Or write to us at:

Lesterius Group - Spoon Invest  BV
Kortrijksesteenweg 1144N
B-9051 Ghent (Sint-Denijs-Westrem)
Belgium.

Our company registration number is BE 0463.534.393

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Lesterius has not addressed your concern in a satisfactory manner, you may contact the Belgian Supervisory Authority ( GBA or gegevensbeschermingsautoriteit ).

Email: contact@apd-gba.be
Address : Drukpersstraat 35 - 1000 Brussel - Belgium

Terms of use OF THE WEBSITE

All websites under the lesterius.com domain and subdomains are provided by Lesterius. These Terms of Use are the terms and conditions on which we provide the text, software, video’s, documents, and all other materials published on our websites (the "content") and the basis on which we allow access to it. Please read them carefully.

This website is for your own private use. By accessing this website, you agree:

  • not to use this website or its content in contravention of any regulation or legislation

  • that you are responsible for any material you send to or upload to this website and that such material is legal, is not offensive and it does not infringe our rights, those of third parties or the provisions of the Legal Notices.

Online Privacy

Our on-line Privacy Policy forms part of the Legal Notices and therefore the terms on which we provide and allow access to this website.

Limitations and Exclusions of our Liability

Our websites and its contents are provided for general information purposes only and nothing on those websites or in its contents is intended to provide professional advice. We do not accept any responsibility for any loss which may arise from reliance on information or materials published on those websites. If you wish to find out more about the information and the materials published, please contact us by email.

We are not responsible or liable for any matter relating to you or any third parties accessing or using those websites and its contents.

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement. We do not endorse nor are we responsible for the contents of websites operated by others that link to this website or that are accessible from it.

Nothing in these Terms of Use or the Legal Notices excludes or limits our liability for fraud or for death or personal injury arising from our negligence or for any other matter in respect of which it would be unlawful or in breach of regulation to limit or exclude liability.

General

Our rights under the Legal Notices may be waived only in writing and specifically.

Governing Law

The Legal Notices shall be governed by and interpreted in accordance with Belgian law and we and you each submit irrevocably to the exclusive jurisdiction of the Belgian Courts in Ghent.

Cookie policy

Lesterius use cookies and similar technologies for a wide range of purposes in our websites, apps and email communications to deliver our services and to improve your experience.

Cookies enable you to use shopping carts and to personalize your experience on our sites, tell us which parts of our websites people have visited, help us measure the effectiveness of ads and web searches, and give us insights into user behaviour so we can improve our communications and products.

What is a cookie

A cookie is a small amount of data, which often includes a unique identifier. Cookies may be sent to your browser when you visit our websites. They are stored by your web browser on your device. For further information, visit https://en.wikipedia.org/wiki/HTTP_cookie.

The cookie type can be identified by how long it persists and the domain it belongs to.

  • Session cookie - erased when the user closes the browser.

  • Persistent cookie - remains on the device for a pre-defined period of time.

  • First-party cookies - set by the web server of the visited page and shares the same domain.

  • Third-party cookies - these are stored by a different domain to the visited page from sites such as YouTube or Facebook.

Third Party cookies

Your use of our websites and communications may result in some cookies being stored that are not controlled by Lesterius. This may occur when the website you are visiting makes use of a third party analytics or marketing automation/management tool (such as those offered by Google) or includes content displayed from a third party website, for example, Vimeo and YouTube.

This will result in you receiving cookies from these third party services. Lesterius may not control the storage or access to these cookies. You should review the privacy and cookie policies of these services to find out how these third parties use cookies.

Types of cookies

We use the following cookies:

  • Site preference cookies - These are cookies that record your preferences when visiting our website in order to make any return visit more relevant. For example, when visiting our learning and support site, you may specify a country-preference which will persist when you return to one of our websites.

  • Analytical/ performance cookies - They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding the information they are looking for easily.

  • Web beacons - Web beacons, also known as single pixel or clear gif technology, or action tags, may be used on our websites and communications. This technology tells us which visitors clicked on key elements (such as links or graphics) on a web page or email. When you ask us to send you promotional information or a newsletter, we may use web beacons to track which emails are actually opened. We use this information in order to optimize our content, services and communications.

Web beacons usually function with cookies and can be turned off by disabling cookies (as explained in the previous section). Some email software and web browsers can also be configured to stop pictures being downloaded automatically. This will also prevent the web beacon from functioning until you decide to download the pictures.

How to disable cookies

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. But be aware that because cookies are used throughout our websites or any other website, disabling them may prevent you from using certain parts of those sites. The Help function within your browser should tell you how to restrict or block cookies, or you can use one of the following links:

Cookie settings in Chrome
Cookie settings in Safari mobile for iOS
Cookie setting in Safari macOS
Cookie setting in Internet Explorer
Cookie settings in Firefox