Privacy Policy
Data Controller
The controller of personal data collected on the fermelux.lu website is:
Fermé-Lux S.à r.l.
Zone Industrielle Rolach, Hall 1, L-5280 Sandweiler, Luxembourg
Phone: +352 35 53 78
Email: info@fermelux.lu
This privacy policy complies with Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018 on the protection of natural persons with regard to the processing of personal data.
Personal Data Collected
We only collect the data needed for the purposes described below:
Identification and contact data (request forms): first name, last name, phone number, email address, town.
Project data: need (installation, repair…), door type, dimensions, motorisation, free message.
Advertising origin (only with your “Advertising” consent): the ad or campaign that brought you to the website, attached to your request.
Browsing data (only with your consent): pages viewed, journey through the website, device and browser, through the tools described in the cookie policy.
No sensitive data within the meaning of Article 9 GDPR (health, origin, political opinions, etc.) is collected.
Purposes and Legal Basis of Processing
Your data is processed for the following purposes:
Answering your request for a quote, a call-back or contact (legal basis: pre-contractual measures at your request - Art. 6(1)(b) GDPR).
Planning and carrying out a service, after-sales support (legal basis: performance of a contract - Art. 6(1)(b) GDPR).
Invoicing, accounting and tax obligations (legal basis: legal obligation - Art. 6(1)(c) GDPR).
Website audience measurement (legal basis: your consent - Art. 6(1)(a) GDPR, which you can withdraw at any time with “Manage cookies”).
Measuring how well our ads work on Google, Meta and TikTok, including the encrypted (hashed) transfer of your contact details when you send a request (legal basis: your consent - Art. 6(1)(a) GDPR, which you can withdraw at any time).
Retention Period
We retain your data for a period strictly proportionate to the purpose:
Quote request without follow-up: 3 years from the last contact (commercial prospecting).
Client having placed an order: 10 years from the end of the service (Luxembourg accounting and tax obligations).
Navigation data and cookies: 13 months maximum.
After these periods, your data is definitively deleted or anonymised.
Recipients of Data
Your personal data is intended exclusively for:
The Fermelux teams in charge of handling your request, carrying out the service and providing after-sales support.
Our technical processors: website hosting (Vercel Inc., United States), delivery of requests by email to our team (Resend, Plus Five Five Inc., United States), invoicing software.
Only with your consent: Google Ireland Limited (Google Analytics, Google Ads), Meta Platforms Ireland Limited (Facebook, Instagram) and TikTok Technology Limited, for audience measurement and measuring how well our ads work.
The competent authorities, on legal request only.
Your data is never sold, rented or commercially transferred.
Transfers Outside the European Union
Certain technical subcontractors (hoster, analytics tools) may process your data from the United States. These transfers are framed by the appropriate guarantees provided for by the GDPR: Standard Contractual Clauses adopted by the European Commission and, where applicable, adherence to the EU-US Data Privacy Framework.
Your Rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
Right of access: obtain confirmation of the processing of your data and a copy thereof.
Right to rectification: have inaccurate or incomplete data corrected.
Right to erasure (right to be forgotten): request the deletion of your data in the cases provided for by law.
Right to restriction of processing in the cases provided for by law.
Right to portability: retrieve your data in a structured, commonly used and machine-readable format.
Right to object to processing for reasons relating to your particular situation.
Right to withdraw your consent at any time, without affecting the lawfulness of previous processing.
To exercise your rights, contact us at info@fermelux.lu enclosing a copy of an identity document. We reply within a maximum of one month, in accordance with Article 12 of the GDPR.
Complaint to the Supervisory Authority
If you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale pour la protection des données (CNPD) of Luxembourg:
15, boulevard du Jazz, L-4370 Belvaux
Phone: +352 26 10 60 1
Website: cnpd.public.lu
Data Security
Fermelux implements appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access: HTTPS/TLS encryption, regular backups, access control, staff training in data protection.
Amendment of the Policy
This privacy policy may be amended at any time to reflect legal, technical or organisational developments. The date of the last update is indicated below. We invite you to consult it regularly.
Last updated: October 2026.