Privacy policy

1. Controller

Lux VR States Sàrl-S (DEEV Group), 17 Rue de Sélange, L-4965 Clemency, Luxembourg. Phone: +352 691 388 887.

2. Data we process

• Contact form: name, company, email address, phone number, the division concerned, your message, your preferred language and the time at which you gave your consent.
• Abuse prevention: a pseudonymised value derived from your IP address, used to limit repeated submissions. We do not store your IP address itself with your request.
• Server logs: when you visit the website, our hosting provider processes technical data (IP address, date and time, page requested, browser type) to deliver the website and keep it secure.

3. Purposes and legal bases

We do not use your data for advertising, we do not sell it and we do not create profiles.

• Answering your request and preparing a quote or contract: Article 6(1)(b) GDPR, and your consent under Article 6(1)(a) GDPR.
• Security of the website and prevention of abuse: our legitimate interest under Article 6(1)(f) GDPR.

4. Recipients and processors

Each processor acts on our instructions under a data processing agreement. Within DEEV Group, your request is shared only with the division concerned.

• Vercel Inc. (website hosting).
• Supabase (database for contact requests, hosted in the European Union).
• Our email service provider, to send the internal notification and your confirmation email.

TODO · Name the email service provider and confirm the data processing agreements.

5. Transfers outside the EU

Some providers are based in the United States or may access data from there. Such transfers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses.

TODO · Lawyer to confirm the transfer mechanism for each provider.

6. Retention

We keep contact requests for 24 months after our last exchange, then delete them. If a contract follows, the documents concerned are kept for the periods required by law. Server logs are kept by the hosting provider for a short period only.

7. Your rights

To exercise these rights, contact us at the address above. We answer within one month.

• Access to your data and a copy of it.
• Rectification of inaccurate data.
• Erasure, and restriction of processing.
• Data portability.
• Objection to processing based on our legitimate interest.
• Withdrawal of your consent at any time, without affecting processing carried out before the withdrawal.

8. Complaints

You have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg, cnpd.public.lu.

9. Cookies

This website uses no tracking or advertising cookies. See the cookie notice for details.