Last updated: 28 August 2026
Liitu is provided by OLLOC.BE BV, with registered office at Ten Briele 18 box 10j, 8200 Bruges, Belgium, and enterprise number 0889.511.972. We are committed to protecting your personal data. This Privacy Policy explains what data we collect, why, and your rights under the GDPR (Regulation (EU) 2016/679).
The data controller is OLLOC.BE BV, Ten Briele 18 box 10j, 8200 Bruges, Belgium, enterprise number 0889.511.972. For privacy matters, contact info@olloc.be.
We process these categories of personal data: (a) identity and contact: name and email address; (b) family and board data: members, roles, screen names and layouts; (c) calendar and task data: connected calendars, event names and times, tasks, recurrence, assignment and completion; (d) location: configured place and coordinates for weather; (e) billing: postal address, company name, VAT number and invoice history; (f) support and preregistration: email address, ticket subject and messages; (g) technical and security: IP address, device identifiers, pairing codes, browser User-Agent, hashed passwords, encrypted MFA and integration secrets, and login timestamps; (h) after consent on the public website: viewed page, timestamp, referring website and pseudonymous browser and device data through Google Analytics. Google Analytics does not measure the family dashboard or paired screens. Calendar providers may transmit full events to our server, but descriptions and attendees are not selected for storage in Liitu.
We process your data to: (a) provide Liitu, including calendar sync, task management, weather and screen pairing (contract performance, Art. 6(1)(b) GDPR); (b) send transactional emails — verification, password reset, invitations, support and invoices (contract performance); (c) issue and retain legally required invoices (legal obligation, Art. 6(1)(c) GDPR); (d) detect and prevent fraud, abuse and security incidents (legitimate interest, Art. 6(1)(f) GDPR); (e) after your consent, understand use of the public website and improve the marketing pages through Google Analytics (consent, Art. 6(1)(a) GDPR).
Contract performance (Art. 6(1)(b)): account creation, calendar sync, device pairing and billing. Legal obligation (Art. 6(1)(c)): invoice retention for 7 years and VAT records. Legitimate interest (Art. 6(1)(f)): security event logging and fraud prevention. Consent (Art. 6(1)(a)): Google Analytics on the public marketing pages; you may withdraw this consent at any time.
We share only necessary data with service providers: Mollie B.V. (Netherlands) for payments; Lettermint for transactional email; Google LLC for calendar integrations and, only after consent, Google Analytics on the public website; Microsoft Corporation for calendar integrations; Apple/iCloud when you connect a private ICS calendar; Open-Meteo for weather based on configured coordinates; Bunny.net for hosting, database, storage and content delivery; and Peppol.sh when electronic invoicing via Peppol is enabled. Where data is processed outside the EEA, we use appropriate safeguards such as EU Standard Contractual Clauses. We do not sell your data.
Account, family, board, task and authentication data is retained while your account is active and then deleted or anonymised, unless a legal obligation or security dispute requires longer retention. Connected calendar data and integration secrets are removed when you delete the connection or account, subject to temporary backups. We retain invoices and billing records for 7 years from the invoice date under Belgian tax law. Audit and security data is retained no longer than necessary for security, fraud prevention and accountability. Google Analytics event data is retained for no more than 14 months; your local consent choice remains until the consent version changes or you update it.
Under GDPR Articles 15–21, you have the right to: access your data (Art. 15); correct inaccurate data (Art. 16); request erasure (Art. 17) — note invoices are retained 7 years per legal obligation; data portability (Art. 20); object to processing based on legitimate interest (Art. 21). To exercise any right, email info@olloc.be. We will respond within 30 days.
For privacy questions, email info@olloc.be or write to OLLOC.BE BV, Ten Briele 18 box 10j, 8200 Bruges, Belgium. Enterprise number: 0889.511.972.
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit — GBA): gegevensbeschermingsautoriteit.be, +32 2 274 48 00.
We use necessary cookies for authentication, security, language preference, screen pairing and temporary calendar authorisation. On public marketing pages, we load Google Analytics and its analytics cookies only after your explicit consent. Advertising storage and Google signals remain disabled. You can change your choice at any time through the Cookie Policy.
We will notify registered users by email at least 30 days before any material change to this policy. The effective date at the top of this page reflects the current version.