Privacy Policy

Data Controller Information

ultraluxor SARL ("we", "our", or "us") is the data controller responsible for your personal information. We are registered in Luxembourg with registration number RCSB415263, and our registered address is Boulevard Royal 111, 4586 Esch-sur-Alzette, Luxembourg.

Data We Collect

We collect various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us through contact forms, service inquiries, and communications. This may include your name, email address, phone number, company name, and any messages or inquiries you send to us.

We also automatically collect certain technical information when you visit our website, including your IP address, browser type and version, operating system, referring website, pages viewed, and the date and time of your visit. This information helps us understand how our website is being used and improve our services.

How We Use Your Information

We use your personal data for several legitimate business purposes. We use the information you provide to respond to your inquiries, provide customer support, and deliver the analytics services you request. We also use your data to communicate with you about our services, send you important updates, and provide technical support when needed.

For website improvement purposes, we analyse usage patterns to understand how visitors interact with our site, identify areas for improvement, and ensure our website functions properly. We may also use your information to comply with legal obligations and protect our legitimate business interests.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary for the performance of a contract with you
• Legal obligation: When we must process data to comply with legal requirements
• Legitimate interests: When we have legitimate business interests that do not override your privacy rights

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our cookie policy which explains what cookies are set, their purpose, and how you can control them.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and providing our services, such as web hosting providers, email service providers, and analytics platforms. These third parties are contractually obligated to protect your data and use it only for the purposes we specify.

We may also disclose your information if required by law, to protect our rights or property, or in connection with a business transaction such as a merger or acquisition.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions and inquiry data are typically retained for up to 3 years to maintain our customer service records and comply with business record-keeping requirements. Website analytics data is retained according to our analytics platform settings, typically for 26 months.

We regularly review our data retention practices and securely delete information that is no longer needed. In some cases, we may retain data for longer periods if required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a portable format
• Right to object: You can object to certain types of processing
• Right to withdraw consent: You can withdraw consent for processing based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption of data in transit, secure server hosting, regular security updates, and access controls to limit who can access your information.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but we are committed to protecting your information using industry-standard practices.

International Data Transfers

As we operate primarily within the European Union, your data is generally processed within the EU. If we need to transfer your data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date at the top of this page.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us using the following contact information:

We aim to respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) or your local supervisory authority.