Privacy Policy

1. Data controller

The controller of personal data relating to https://www.luxiol.be is HH SRL (Luxiol), Belgian company number 0466.325.619, registered office at Avenue Reine Astrid 286, 7180 Seneffe, Belgique. Contact: fred.lahaye@hotmail.be - +32 (0)2 648 77 14.

2. Personal data that may be processed

The website is mainly informational. It currently provides no user account, online ordering or contact form. Depending on how you use the website, the following categories of personal data may nevertheless be processed:

• Information you voluntarily provide when contacting Luxiol by email or telephone: identity, contact details, message content and information required to respond.
• Technical information used for website security and operation: IP address, date and time, browser type, device, requested pages and technical logs, insofar as these are processed by the hosting infrastructure.
• Cookie and external-content consent data: your choices and the technical record of those choices.
• Data transmitted to third-party services when you allow external content such as Google Maps or embedded Instagram content to load.

3. Purposes and legal bases

4. Recipients and service providers

Personal data is accessible only to persons who need it for the purposes described above. Technical providers may act as processors or separate controllers depending on the service, including website hosting, email hosting and, after consent, Google (Google Maps) and Meta/Instagram for external content.

5. Transfers outside the European Economic Area

Some third-party providers, including Google or Meta, may process data outside the European Economic Area. Where this occurs, transfers must rely on a GDPR-recognised mechanism, such as an adequacy decision or appropriate contractual safeguards. Non-essential external content remains subject to your prior consent.

6. Retention periods

• Enquiries and correspondence: for as long as needed to handle the request and, where no ongoing relationship exists, generally no longer than 24 months after the last exchange, unless a legal obligation or evidential need requires longer retention.
• Technical and security logs: according to the strictly necessary periods applied by technical providers and security needs.
• Cookie consent choices: up to 6 months before asking for your choice again, unless a change requires renewed consent sooner.

7. Your rights

Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction of processing, object to certain processing and withdraw consent at any time where processing is based on consent. Where the right to data portability applies, you may also request your data in a structured format.

To exercise your rights: fred.lahaye@hotmail.be. Identity verification may be requested where necessary to prevent personal data from being disclosed to the wrong person.

8. Complaint to the Belgian Data Protection Authority

If you believe your rights have not been respected, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels - www.autoriteprotectiondonnees.be.

9. Updates

This policy may be updated when the website, the services used or legal requirements change. The current update date appears at the top and bottom of this document.