Privacy statement

Last updated: October 11, 2026

1. Introduction

Thank you for your trust. We value privacy and consequently do our utmost to protect your personal data when you use our products and/or services. We treat your personal data as confidential information.

This privacy statement (the “Privacy Statement”) aims to inform you in detail about our use of your personal data. Please read this Privacy Statement to learn more about how we collect, use, store and share your personal data and your rights in connection with our use of your personal data.

2. Scope

This Privacy Statement applies to (i) All (current and former) customers, (ii) All prospects who express interest in our products and/or services, (iii) all visitors to our website (see section 14 of this Privacy Statement), (iv) persons employed in any business or organization with which we have or had a customer relationship and (vi) any other person who contacts us in any way.

3. Who are we?

Mindthebed.com is a website of Luscus BV. A limited liability company under Belgian law with its registered office at 3900 Pelt, Snoepluststraat 3 (company number 1024.438.378, RPR Hasselt). Luscus BV is the data controller of your personal data.

4. What information are you collecting about me?

We may process the following categories of personal data:

– Personal identifying information, such as name, first name, gender, etc., among others;

– identification data issued by the government, such as company numbers, among others.

– contact information, such as address, (mobile) phone number, email address, etc., among others;

– contract data, such as product/service, , customer history, etc., among others;

– billing information, such as billing address, VAT number, amount payable, outstanding amounts, etc., among others;

– Financial identification information, including your bank account number, etc;

– payment information, including payment preference, account number, direct debit information, payment history, etc;

• solvabiliteitsgegevens, zoals, indien je een zakelijke klant bent, kredietbeoordelingen enz.;

– recovery data, such as payment delays, credit histories, data related to collection procedures, etc., among others;

– relations, such as including what your position is within your organization, etc.;

– electronic identification data, such as IP addresses (i.e. a number that can usually identify a specific computer or other network device on the Internet), user IDs, device IDs, location, etc., among others;

• gebruiksgegevens, zoals o.m. informatie over jouw gebruik van onze website, onze online diensten, of andere online inhoud van mindthebed.com, logbestanden, surfgedrag enz.;

– professional activities, such as which NACE-digit code an enterprise belongs to;

– data related to complaints or incidents;

– national registration number, if you provide us with a copy of your identity card;

– camera footage, from surveillance cameras to our property(s).

We do not process sensitive personal data, except when you voluntarily submit sensitive personal data to us yourself. Sensitive personal data are personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, health data, data relating to a person’s sexual behavior or sexual orientation.

5. How do you obtain my personal data?

We only process personal data that we receive directly from you, for example through contact(s) with us, through use of our products and/or services or through use of our website.

6. Am I required to provide my personal data?

In principle, you are not obliged to share personal data with us. However, the provision of personal data is necessary if you wish to enter into a contract with us and subsequently for the performance of that contract.

7. For what purposes do you use my personal data?

We use your personal data for the purposes listed below. We have also indicated below the legal basis of each processing. We may provide additional information regarding processing purposes when collecting your personal data.

7.1. Management of the contractual relationship

We process your personal data to enter into a contract with you and then to perform that contract with us. This includes, but is not limited to, processing your order, making arrangements for delivery or placement, preparing and sending invoices, and reminders if necessary, and any communication regarding the contract. The legal ground for the aforementioned processing is the conclusion or performance of your contract with us, or our legitimate interest.

7.2. Handling of (customer) requests

When you make a request and share your contact information with us for this purpose, we use this information to respond to that request. This includes data collection through online contact, such as through the contact form or through Facebook. With regard to existing customers and pre-contractual measures taken at the request of potential customers, the legal ground for processing is the preparation or execution of your contract. For other questions from non-customers, we have a legitimate interest in providing you with answers.

7.3. Marketing communications regarding products/services (or products/services of affiliated companies

We use your personal data to send promotions and marketing communications. We may use your personal data for this purpose based on our legitimate interest. The commercial interest of Luscus BV consists of offering and improving our products and services. Wanneer echter jouw toestemming is vereist, zullen wij jouw persoonsgegevens niet verwerken voor deze doeleinden alvorens je toestemming hebt gegeven. You may opt out of promotional and marketing communications at any time by contacting us using the contact information below.

7.4. Website: analysis/optimization/management

We use cookies and related technologies on our website for functional, analytical, and advertising purposes. More information about this can be found in section 15 of this Privacy Statement.

7.5. Legal or regulatory obligations

In certain cases, we are required to process your personal data based on an obligation under laws or regulations, including reporting obligations, accounting, dealing with official complaints and cooperating with competent government authorities, regulators, tax authorities, judicial authorities and the police.

7.6. Indemnification of rights and third parties

Luscus BV heeft een gerechtvaardigd belang om persoonsgegevens te verwerken ter bescherming van de rechten, eigendom en veiligheid van zichzelf, haar klanten of derden (met inbegrip van preventie, detectie, onderzoek van fraude of mogelijke misdrijven, beveiliging van gebouwen en voorzieningen, het beheer van betwistingen, geschillen of juridische procedures (in de mate dat dit niet reeds vervat is in klantenbeheer noodzakelijk ter de uitvoering van de overeenkomst of een wettelijke verplichting)).

7.7. Support services

Exceptionally, personal data are processed for information technology and support services. We process this personal data to ensure (information) security and the proper functioning of our organization. This is based on our legitimate interest to do so.

7.8. Donations and public relations

Luscus BV processes the personal data of data subjects for its administration of donations and of relevant contact persons within the sector for public relations purposes. This is based on legal obligations regarding payments and on our legitimate interest in creating goodwill.

7.9. Prospecting potential trading partners

We process personal data in the context of prospecting potential business partners. This is based on the legitimate interest of Luscus BV to conduct business.

7.10. Newsletter

If you sign up for our newsletter, we process your email address and, if you provide it, your first name. We do this based on your consent, to send you our monthly newsletter. We use a double opt-in: your subscription only becomes active after you have confirmed it via a confirmation email. We store the date and IP address of your registration and confirmation as proof of consent. To send the newsletter, we use Laposta BV (Netherlands). Laposta processes your data as a processor, on our behalf and based on a data processing agreement. Your data is stored within the European Union and is not transferred outside the European Economic Area. We measure whether a newsletter is opened and which links are clicked. This allows us to improve the content. You can unsubscribe at any time via the link at the bottom of each newsletter or by emailing info@mindthebed.com. After you unsubscribe, we delete your data within 30 days. We only keep your email address on a suppression list so that you no longer receive newsletters.

8. Will you share my personal data with third parties?

We will keep your personal data within our company, unless transfer is required or permitted as described in this point 8. Your personal data may be shared with (i) affiliated companies, (ii) third parties providing services to us (e.g., subcontractors, but also IT providers), (iii) competent government authorities, (iv) professional advisors, (v) a credit rating agency, (vi) another customer (e.g., as a reference), and (vii) in the context of a potential merger or acquisition of Luscus BV.

We assign certain services to carefully selected suppliers. We only provide suppliers with personal data that is necessary for the provision of services. We may transfer your personal data to third parties providing services to us, such as billing services, postal delivery, sales services, address services, customer services, accounting and payment services, call center services, print services, market research agencies, marketing and media companies, gift shops, IT service providers, consultancy firms, bailiffs, lawyers, and commercial partners. Under certain circumstances, we are obliged to share your data based on a valid request from competent government authorities (e.g., tax authorities, judicial authorities, police, data protection authority), based on a legal or regulatory obligation, or with professional advisors (e.g., a trustee or lawyer). Only if you are a business, the period within which you pay may be passed on to a credit rating agency (e.g., Graydon). Finally, Luscus BV or one of its parent companies might, in the context of a merger, acquisition, or other business transaction, disclose limited personal data to a potential buyer, seller, or their advisors.

9. Will my personal data be transferred outside the EEA?

Certain suppliers may be located outside the European Economic Area (EEA). We have implemented a comprehensive data protection policy and we will only share your personal data with suppliers outside the EEA if they have signed a (data processing) agreement and can guarantee adequate protection of personal data based on an adequacy decision by the European Commission (e.g., EU/US Data Privacy Framework), or based on appropriate safeguards (e.g., EU Standard Contractual Clauses they have entered into with us).

10. How long will you keep my personal data?

Personal data is not kept longer than required by law or than necessary for the purposes for which it was processed. Consequently, the retention period depends on legislation and the purposes of the processing. We keep your data in accordance with the retention periods specified by law. In principle, we keep most customer data (contract, billing, payments …) for ten (10) years, as this is the maximum period during which a legal action could be brought. If no specific retention period is required by law, we determine the period based on the purpose of the processing in light of statutes of limitation or generally accepted retention periods in light of custom or regulatory guidelines.

11. Is my personal data secure?

We have focused on implementing good IT applications designed to protect your privacy and personal data. We use generally accepted technical and organizational security measures and have security policies that adequately protect personal data in our systems. The systems are appropriately protected against unauthorized access, unauthorized use or disclosure, unauthorized modification and unwarranted destruction or accidental loss. Our employees and partners who have access to your personal data are bound by strict confidentiality.

12. Can I modify or withdraw my consent?

When we offer certain products or services, we need your consent in certain cases. If you are no longer interested in these products or services, you can modify or withdraw your consent at any time. Previous actions that happened during the consent period do remain lawful.

13. What rights do I have?

According to the Data Protection Law, you have, always under the legally defined conditions:

– right of inspection: for example, you have the right to know whether and if so what personal data we process about you and the right to a free copy of that personal data;

– right to rectification: at your request, we will correct personal data that is incomplete or inaccurate;

• recht op gegevenswissing: indien je dat wenst, zullen we jouw persoonsgegevens wissen, indien er geen wettelijke verplichting bestaat om ze bij te houden en Luscus BV evenmin een zwaarder doorwegend belang heeft om ze bij te houden (vb. om onze rechten te verdedigen);

– right to restriction of processing: you have the right to ask us to retain only certain personal data;

• right to portability: for example, you have the right to ask Luscus BV for a copy of the personal data you provided to us and to receive it or have it sent to a third party in a structured, accessible, and machine-readable format;

• the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. In the latter case, you have the right to human intervention from Luscus BV, the right to express your point of view, and the right to contest the decision;

– The right to withdraw your consent at any time;

• the right to lodge a complaint with Luscus BV;

– the right to contact the Data Protection Authority (Press Street 35, 1000 Brussels, T. +32 (0)2 274 48 00, F. +32 (0)2 274 48 35, contact@apd-gba.be) in case of complaints regarding the processing of your personal data. However, we encourage you to seek resolution directly with us first.

• You have the right to object: You always have the right to request to stop the processing of your personal data based on a legitimate interest of Luscus BV or a third party, including profiling for that purpose, for reasons related to your specific situation. If you object, your personal data will no longer be processed for that purpose unless Luscus BV demonstrates compelling legitimate grounds or the processing is related to the establishment, exercise, or defense of legal claims. Luscus BV also processes your data for direct marketing purposes. If you no longer wish to receive any or specific direct marketing, you can object to this at any time, including profiling for direct marketing purposes. Luscus BV will then respect your wishes for future direct marketing actions.

If you wish to exercise your rights under Data Protection legislation, please contact us via info@mindthebed.com or by post to Snoepluststraat 3, B-3900 Pelt. Please date and sign your request and include at least the phone number and email address with which you are known to Luscus BV. Luscus BV may request additional proof of your identity, for example in the form of a copy of the front of your identity card. Your request will be handled in accordance with Data Protection legislation.

14. To which websites does this Privacy Statement apply?

This Privacy Statement applies to the website www.mindthebed.com (or other extension). Our website may contain hyperlinks to websites managed by third parties. Mindthebed also has a business page on various social networking sites (including Facebook). These pages are primarily used to communicate more actively and provide information about our products and services. We may also use these pages to invite you to contests, where you can participate to win a prize. Luscus BV has no control over, nor access to, the personal data collected by the various social networking sites. For more information regarding the processing of your personal data by the various social networking sites, please review the privacy statements of these networks or contact them directly:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ierland (https://www.facebook.com/about/privacy).

Third-party websites each have their own privacy statements. We request that you review these privacy statements, as we have no responsibility or liability for the privacy policies of third-party websites and use of such websites is at your own responsibility.

15. Do you use cookies and related technologies?

When you use our website, receive emails from us, or use one of our services, Luscus BV may use cookies or similar techniques such as pixels. Luscus BV also uses technologies related to cookies. Cookies are (temporary) text files that ensure you do not have to enter the same information every time you return to the website. Furthermore, they help us gain insight into how you use our website or emails and how we can improve them.

16. Can this Privacy Statement be changed?

This Privacy Statement may be amended from time to time. Before sharing personal data with us, it is recommended that you read the most recent version of this Privacy Statement. The date of the most recent update is indicated on the first page. If significant changes are made to this Privacy Statement, we will provide more prominent notification (e.g., email).

17. How do I contact you regarding this Privacy Statement?

For questions or comments regarding this Privacy Statement, you can always contact the governing body of Luscus BV. This can be done by post at Snoepluststraat 3, B-3900 Pelt, by phone at (+32) 469 226 221, or by email at info@mindthebed.com, always stating ‘Data Protection’.