Data Controller Information
CryptoLuxis SARL, a company registered in Luxembourg with registration number RCSB362514, is the data controller responsible for your personal information. Our registered address is Rue Chimay 124, 4392 Differdange, Luxembourg. For any privacy-related enquiries, you can contact us at privacy@cryptoluxis.world or by phone at +352 24636359.
Data Collection
We collect personal information that you provide to us directly and information that is collected automatically when you use our website and services. The data we collect includes:
- Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request our services.
- Communication Data: Messages, enquiries, and other communications you send to us through our contact forms or email.
- Technical Information: IP address, browser type, operating system, referring URLs, and pages visited on our website.
- Usage Data: Information about how you interact with our website, including time spent on pages and navigation patterns.
- Restaurant Data: Performance metrics, operational data, and analytics information related to restaurant operations when you use our tracking services.
How We Use Your Information
We use the personal information we collect for the following purposes, and how we use your data is essential to our business operations:
- Service Delivery: To provide restaurant performance tracking services, respond to enquiries, and fulfil contractual obligations.
- Communication: To contact you about our services, respond to your requests, and provide customer support.
- Business Operations: To process transactions, manage accounts, and maintain business records.
- Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements.
- Service Improvement: To analyse usage patterns and improve our website functionality and service offerings.
- Marketing: With your consent, to send you information about our services and industry insights that may be of interest to you.
Cookies and Tracking Technologies
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.
Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- Contractual Necessity: Processing necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and ensuring website security.
- Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications.
- Legal Obligation: Processing necessary to comply with legal obligations to which we are subject.
Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting business, provided they agree to maintain confidentiality.
- Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction.
- Protection of Rights: We may disclose information to protect our rights, property, or safety, or that of our users or others.
International Data Transfers
Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or appropriate contractual clauses.
Data Retention
We retain personal information for as long as necessary to fulfil the purposes outlined in this privacy policy, unless a longer retention period is required by law. Specifically:
- Contact enquiry data is retained for 3 years from the date of enquiry
- Customer account data is retained for the duration of the business relationship plus 7 years for legal and accounting purposes
- Website usage data is typically retained for 26 months
- Marketing consent records are retained until consent is withdrawn
Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: You can request copies of your personal data and information about how it is processed.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure: You can request deletion of your personal data in certain circumstances.
- Right to Restrict Processing: You can request limitation of processing in certain situations.
- Right to Data Portability: You can request transfer of your data to another controller in a structured, machine-readable format.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure.
Children's Privacy
Our services are not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
Contact Information
If you have questions about this privacy policy, wish to exercise your rights, or have concerns about how your personal data is processed, please contact us:
You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (Commission Nationale pour la Protection des Données) if you believe your personal data has been processed unlawfully.