Privacy Notice
Handelux SARL-S (“we,” “us,” or “our”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, and safeguard your personal data when you contact us through our website.
1. Data Controller
The data controller responsible for your personal data is:
Handelux SARL-S
Luxembourg
2. Contact Information
If you have any questions about this Privacy Notice or our data protection practices, please contact us at:
- Email: [email protected]
- Phone: +352 621 148 687
3. Personal Data We Collect
When you contact us via our website’s contact form, we may collect and process the following personal data:
- Identification Data: Name, surname
- Contact Information: Email address, phone number
- Location Data: Address
- Professional Information: Company name, job title
- Message Content: Any other information you provide in your message
4. Purpose and Legal Basis for Processing
We collect and process your personal data for the following purposes:
- Responding to Inquiries
- We use the information you provide to respond to your requests or questions and to provide the services or information you request.
- Legal Basis: Your consent (Article 6(1)(a) GDPR), which you give when submitting the contact form.
- Lead Generation and Service Follow-up (if applicable)
- We may also use your data to follow up with you regarding our services, such as to provide information about energy-related products or solutions if that is the reason for your inquiry.
- Legal Basis: Your consent (Article 6(1)(a) GDPR), and/or our legitimate interests (Article 6(1)(f) GDPR) in responding to your inquiry and maintaining a potential business relationship.
Where we rely on consent, you have the right to withdraw this consent at any time (see Section 7), without affecting the lawfulness of processing prior to withdrawal.
5. Data Retention
We will retain your personal data only for as long as necessary to:
- Respond to your inquiries;
- Provide any follow-up services you request;
- Comply with our legal obligations and legitimate record-keeping requirements.
If no further communication or relationship develops from your initial inquiry, we will delete or anonymize your data after a reasonable period, unless we are required by law to keep it longer (e.g., for accounting, legal, or tax purposes).
6. Data Sharing
- Service Providers (Processors)
We may share your personal data with trusted third-party service providers who assist us in operating our website or conducting our business (e.g., hosting providers or CRM systems). These parties are contractually obligated to keep your data secure and process it only in accordance with our instructions. - Legal Obligations
We may disclose your personal data if required to do so by law, court order, or other legal processes. - International Transfers
If we transfer your personal data outside of the European Economic Area (EEA), we ensure adequate levels of protection through appropriate safeguards such as EU Standard Contractual Clauses.
We do not sell or otherwise disclose your personal data to third parties for commercial purposes.
7. Your Rights
Under the GDPR, and specifically Luxembourg data protection law, you have the following rights regarding your personal data:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct any inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to certain legal conditions.
- Right to Restrict Processing: Ask us to limit how we process your personal data.
- Right to Data Portability: Obtain and reuse your data for your own purposes across different services.
- Right to Withdraw Consent: If processing is based on consent, withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact us using the details in Section 2. We will respond to your request in compliance with statutory deadlines (generally within one month).
8. Data Security
We employ appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These include secure hosting, access controls, and encryption where appropriate.
9. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. Any significant updates will be posted on our website, and where appropriate, we may notify you by email or other direct means.
10. Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the National Commission for Data Protection (CNPD) in Luxembourg:
Commission Nationale pour la Protection des Données (CNPD)
Website: https://cnpd.public.lu/en.html
We would appreciate the opportunity to address your concerns directly, so please consider contacting us first at the details provided in Section 2.
By providing your personal data through our contact form, you acknowledge and consent to the terms of this Privacy Notice.
This Privacy Notice is intended to inform you about how your personal data is handled in accordance with the GDPR and Luxembourg data protection regulations. For specific legal advice, you should consult a qualified professional.