Privacy Policy

bizzlink is a product and service of Vigasoft S.à r.l.-S.. The protection of your personal data is important to us. This privacy policy informs you about how we collect, use and protect your data.

Data Controller

Vigasoft S.à r.l.-S. 9, rue Marcel Schintgen 4889 Lamadelaine, Luxembourg Email: hello@bizzlink.lu

Data We Collect

When visiting our website:

  • Technical data (IP address, browser, operating system, access time)
  • This data is collected automatically when you visit the website

When contacting us:

  • Name, email address, phone number, company name
  • Your message and selected area of interest

When using the bizzlink service:

  • Company data (name, address, commercial register number, VAT ID)
  • Invoice data processed through our platform
  • Login credentials (email, encrypted password)

Purpose of Processing

  • Providing and operating the bizzlink service
  • Sending and receiving e-invoices via the PEPPOL network
  • Responding to your enquiries
  • Fulfilling legal obligations
  • Improving our service
  • Performance of contract (Art. 6(1)(b) GDPR): Processing your data to provide our services
  • Legitimate interest (Art. 6(1)(f) GDPR): Technical data to ensure operations
  • Legal obligation (Art. 6(1)(c) GDPR): Retention of our own business records under tax and commercial law (transmitted documents are not archived by us — see Retention Period)

Retention Period

  • Contact enquiries: 12 months after completion of the enquiry
  • Our own business records (contracts, our own invoices/accounting): 10 years (statutory commercial/tax retention)
  • Transmitted invoice documents (via PEPPOL): kept operationally for 90 days, then deleted — bizzlink is a transmission service, not an archiving service; legally compliant long-term archiving is the customer’s responsibility
  • Transaction logs (sending/receiving): at least 3 months (PEPPOL requirement)
  • Technical / access data: 1 month

Disclosure to Third Parties

We only share your data when necessary:

  • PEPPOL network: Invoice data is transmitted to the recipient via the PEPPOL network
  • Hosting provider: Our servers are operated within the EU
  • Legal obligation: When we are legally required to do so

Apart from the Google services we use (Google Analytics and Google Ads — see below), no data is transferred to third countries outside the EU.

Your Rights

You have the right at any time to:

  • Access your stored data
  • Rectification of inaccurate data
  • Erasure of your data
  • Restriction of processing
  • Data portability
  • Object to processing

To exercise your rights, contact us at hello@bizzlink.lu.

Web Analytics (Google Analytics 4)

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand how visitors use our website.

Google Consent Mode v2 applies here as well (see the Google Ads section): without your consent, no cookies are set and no personal data is processed; Google only receives cookieless, aggregated signals. Only after your consent via the cookie banner does Google Analytics set cookies to recognise returning visitors.

Data collected (after consent): Page views, visit duration, referral page, browser type, operating system, approximate location, interactions with the website. Google Analytics 4 does not log or store IP addresses.

Legal basis: Consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie banner.

Third-country transfer: Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission under Art. 45 GDPR).

This website uses Google Ads with the Google tag (gtag.js), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use Google Ads to measure the effectiveness of our advertising (conversion tracking).

We use Google Consent Mode v2: without your consent, no cookies are set and no personal advertising data is processed; Google only receives cookieless, aggregated signals that do not identify individual visitors. Only after your consent via the cookie banner does Google set cookies for conversion measurement and ad personalisation.

Data collected (after consent): pages visited, information about clicked ads, cookie identifiers, IP address, browser information.

Legal basis: Consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie banner.

Third-country transfer: Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission under Art. 45 GDPR).

For more information, see the Google Privacy Policy.

Cookies

After your consent via the cookie banner, Google Analytics sets cookies to recognise returning visitors and Google Ads sets cookies for conversion measurement. Without consent, no tracking cookies are set. In that case, only technically necessary cookies are used that are required for the operation of the website.

Security

We employ technical and organisational measures to protect your data. Transmission is encrypted via TLS/SSL. Invoice data is stored encrypted.

Supervisory Authority

You have the right to lodge a complaint with the competent data protection authority:

Commission Nationale pour la Protection des Données (CNPD) 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg www.cnpd.lu

Changes

We reserve the right to update this privacy policy. The current version can always be found on this page.

Last updated: August 2026

← Back to homepage