{"id":20103,"date":"2026-05-08T15:50:21","date_gmt":"2026-05-08T13:50:21","guid":{"rendered":"https:\/\/ekomfort.lu\/privacy-policy\/"},"modified":"2026-05-08T15:50:21","modified_gmt":"2026-05-08T13:50:21","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/ekomfort.lu\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv01-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv01-en[data-kb-block=\"kb-adv-heading19692_priv01-en\"]{text-align:left;font-style:normal;color:#2A2A2A;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv01-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv01-en[data-kb-block=\"kb-adv-heading19692_priv01-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv01-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv01-en[data-kb-block=\"kb-adv-heading19692_priv01-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h1 class=\"kt-adv-heading19692_priv01-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv01-en\">Privacy Policy<\/h1>\n\n\n\n<p class=\"has-small-font-size\"><strong>Last updated: 7 May 2026<\/strong><\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc01-en .kt-block-spacer{height:24px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc01-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc01-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Document generated by the ekomfort Legal Pages squad \u2014 DPO\/legal counsel review recommended before publication.<br>Legal bases: Regulation (EU) 2016\/679 (GDPR), Directive 2002\/58\/EC (ePrivacy), Luxembourg Law of 1 August 2018 on the organisation of the CNPD, French Law No. 78-17 &#8220;Informatique et Libert\u00e9s&#8221; (LIL) as amended, Bundesdatenschutzgesetz (BDSG, Germany), Code of Economic Law (Belgium).<\/p><\/blockquote>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc02-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc02-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc02-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv02-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv02-en[data-kb-block=\"kb-adv-heading19692_priv02-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv02-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv02-en[data-kb-block=\"kb-adv-heading19692_priv02-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv02-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv02-en[data-kb-block=\"kb-adv-heading19692_priv02-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-sommaire\" class=\"kt-adv-heading19692_priv02-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv02-en\">Table of contents<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li><a href=\"#priv-preambule\">Preamble and scope<\/a><\/li>\n\n\n\n<li><a href=\"#priv-responsable\">Identity of the controller<\/a><\/li>\n\n\n\n<li><a href=\"#priv-contact\">Contact details for &#8220;data protection&#8221;<\/a><\/li>\n\n\n\n<li><a href=\"#priv-categories\">Categories of data collected<\/a><\/li>\n\n\n\n<li><a href=\"#priv-finalites\">Purposes and legal bases for processing<\/a><\/li>\n\n\n\n<li><a href=\"#priv-destinataires\">Recipients of the data<\/a><\/li>\n\n\n\n<li><a href=\"#priv-transferts\">Transfers outside the European Union<\/a><\/li>\n\n\n\n<li><a href=\"#priv-conservation\">Retention periods<\/a><\/li>\n\n\n\n<li><a href=\"#priv-droits\">Your rights<\/a><\/li>\n\n\n\n<li><a href=\"#priv-exercice\">How to exercise your rights<\/a><\/li>\n\n\n\n<li><a href=\"#priv-securite\">Data security<\/a><\/li>\n\n\n\n<li><a href=\"#priv-cookies\">Cookies and tracking technologies<\/a><\/li>\n\n\n\n<li><a href=\"#priv-reclamation\">Complaint to a supervisory authority<\/a><\/li>\n\n\n\n<li><a href=\"#priv-modifications\">Changes to this policy<\/a><\/li>\n<\/ol>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc03-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc03-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc03-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv03-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv03-en[data-kb-block=\"kb-adv-heading19692_priv03-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv03-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv03-en[data-kb-block=\"kb-adv-heading19692_priv03-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv03-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv03-en[data-kb-block=\"kb-adv-heading19692_priv03-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-preambule\" class=\"kt-adv-heading19692_priv03-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv03-en\">1. Preamble and scope<\/h2>\n\n\n\n<p>This privacy policy (hereinafter the &#8220;<strong>Policy<\/strong>&#8220;) aims to inform users of the website <strong>ekomfort.lu<\/strong> (hereinafter the &#8220;<strong>Website<\/strong>&#8220;) of how their personal data is collected, used, shared and protected by <strong>SAKEPIXEL SARL-S<\/strong> (hereinafter &#8220;<strong>ekomfort<\/strong>&#8220;, &#8220;<strong>we<\/strong>&#8221; or &#8220;<strong>the Controller<\/strong>&#8220;).<\/p>\n\n\n\n<p>This Policy applies to any person who:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>browses the Website (visitor),<\/li>\n\n\n\n<li>creates a customer account or subscribes to the newsletter,<\/li>\n\n\n\n<li>places an order or attempts to place an order on the Website,<\/li>\n\n\n\n<li>contacts us by email, telephone or form,<\/li>\n\n\n\n<li>interacts with our communications (emails, SMS, social media).<\/li>\n<\/ul>\n\n\n\n<p>We undertake to process your data in accordance with <strong>Regulation (EU) 2016\/679 of 27 April 2016<\/strong> (hereinafter the &#8220;<strong>GDPR<\/strong>&#8220;), the <strong>Luxembourg Law of 1 August 2018<\/strong> on the organisation of the National Commission for Data Protection, the <strong>French Law No. 78-17 of 6 January 1978<\/strong> as amended (&#8220;Informatique et Libert\u00e9s&#8221;), the German <strong>Bundesdatenschutzgesetz<\/strong> and the <strong>Belgian Code of Economic Law<\/strong>.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>Note<\/strong>: ekomfort serves four markets (Luxembourg, France, Belgium, Germany). This Policy applies uniformly to residents of the four countries. The competent supervisory authorities are listed in section 13.<\/p><\/blockquote>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc04-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc04-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc04-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv04-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv04-en[data-kb-block=\"kb-adv-heading19692_priv04-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv04-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv04-en[data-kb-block=\"kb-adv-heading19692_priv04-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv04-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv04-en[data-kb-block=\"kb-adv-heading19692_priv04-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-responsable\" class=\"kt-adv-heading19692_priv04-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv04-en\">2. Identity of the controller<\/h2>\n\n\n\n<p>The controller of your personal data is:<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Field<\/th><th>Value<\/th><\/tr><\/thead><tbody><tr><td>Company name<\/td><td><strong>SAKEPIXEL SARL-S<\/strong><\/td><\/tr><tr><td>Legal form<\/td><td>Simplified limited liability company<\/td><\/tr><tr><td>Trade register number<\/td><td>Luxembourg <strong>B286895<\/strong><\/td><\/tr><tr><td>Business license number<\/td><td><strong>10167719\/1<\/strong> (Luxembourg Ministry of the Economy)<\/td><\/tr><tr><td>EU VAT number<\/td><td><strong>LU35860625<\/strong><\/td><\/tr><tr><td>Share capital<\/td><td>EUR 1,200<\/td><\/tr><tr><td>Registered office<\/td><td>13 rue Anna Lindh, L-4547 Differdange, Grand Duchy of Luxembourg<\/td><\/tr><tr><td>Legal representative<\/td><td>Serge Sakepa, sole manager<\/td><\/tr><tr><td>Website operated<\/td><td><a href=\"https:\/\/ekomfort.lu\">https:\/\/ekomfort.lu<\/a><\/td><\/tr><tr><td>General email<\/td><td>info@ekomfort.lu<\/td><\/tr><tr><td>Telephone<\/td><td>+352 661 201 619<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>SAKEPIXEL SARL-S alone determines the purposes and means of processing the data collected through the Website, within the meaning of Article 4(7) of the GDPR.<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc05-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc05-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc05-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv05-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv05-en[data-kb-block=\"kb-adv-heading19692_priv05-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv05-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv05-en[data-kb-block=\"kb-adv-heading19692_priv05-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv05-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv05-en[data-kb-block=\"kb-adv-heading19692_priv05-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-contact\" class=\"kt-adv-heading19692_priv05-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv05-en\">3. Contact details for &#8220;data protection&#8221;<\/h2>\n\n\n\n<p>Given the size of SAKEPIXEL SARL-S and the nature of the processing operations carried out, <strong>the appointment of a Data Protection Officer (DPO) within the meaning of Article 37 of the GDPR is not mandatory<\/strong>. Nevertheless, in accordance with the spirit of the Regulation and to facilitate the exercise of your rights, we have set up a <strong>dedicated contact point for data protection<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Email<\/strong>: privacy@ekomfort.lu<\/li>\n\n\n\n<li><strong>Postal address<\/strong>: SAKEPIXEL SARL-S \u2014 Data Protection, 13 rue Anna Lindh, L-4547 Differdange, Luxembourg<\/li>\n<\/ul>\n\n\n\n<p>This contact point will respond to any questions you may have regarding this Policy, the exercise of your rights, or any concerns about the processing of your data.<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc06-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc06-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc06-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv06-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv06-en[data-kb-block=\"kb-adv-heading19692_priv06-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv06-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv06-en[data-kb-block=\"kb-adv-heading19692_priv06-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv06-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv06-en[data-kb-block=\"kb-adv-heading19692_priv06-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-categories\" class=\"kt-adv-heading19692_priv06-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv06-en\">4. Categories of data collected<\/h2>\n\n\n\n<p>We only collect the data necessary for the purposes described in section 5. The categories of data are as follows:<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv50-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv50-en[data-kb-block=\"kb-adv-heading19692_priv50-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv50-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv50-en[data-kb-block=\"kb-adv-heading19692_priv50-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv50-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv50-en[data-kb-block=\"kb-adv-heading19692_priv50-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv50-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv50-en\">4.1 Data you provide directly<\/h3>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Category<\/th><th>Examples<\/th><th>Source<\/th><\/tr><\/thead><tbody><tr><td><strong>Identification data<\/strong><\/td><td>surname, first name, title<\/td><td>Account creation, order<\/td><\/tr><tr><td><strong>Contact data<\/strong><\/td><td>email address, telephone number<\/td><td>Account creation, order, contact form<\/td><\/tr><tr><td><strong>Delivery and billing data<\/strong><\/td><td>full postal address, country<\/td><td>Order<\/td><\/tr><tr><td><strong>Account data<\/strong><\/td><td>username, password (hashed), preferences<\/td><td>Account creation<\/td><\/tr><tr><td><strong>Order data<\/strong><\/td><td>products purchased, amount, payment method (without card number), history<\/td><td>Order<\/td><\/tr><tr><td><strong>Communication data<\/strong><\/td><td>message content, after-sales requests<\/td><td>Contact form, email<\/td><\/tr><tr><td><strong>Marketing preferences<\/strong><\/td><td>newsletter subscription, areas of interest, consents<\/td><td>Newsletter sign-up, form<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv51-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv51-en[data-kb-block=\"kb-adv-heading19692_priv51-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv51-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv51-en[data-kb-block=\"kb-adv-heading19692_priv51-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv51-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv51-en[data-kb-block=\"kb-adv-heading19692_priv51-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv51-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv51-en\">4.2 Data collected automatically<\/h3>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Category<\/th><th>Examples<\/th><th>Source<\/th><\/tr><\/thead><tbody><tr><td><strong>Technical data<\/strong><\/td><td>IP address (anonymised), browser type, operating system, screen resolution<\/td><td>Browsing on the Website<\/td><\/tr><tr><td><strong>Browsing data<\/strong><\/td><td>pages visited, duration, journey, traffic source, date and time of visit<\/td><td>Analytics cookies (with consent)<\/td><\/tr><tr><td><strong>Session identifiers<\/strong><\/td><td>WordPress, WooCommerce, WPML technical identifiers<\/td><td>Strictly necessary cookies<\/td><\/tr><tr><td><strong>Security data<\/strong><\/td><td>authentication logs, login attempts, anti-fraud signals<\/td><td>Server logs, Cloudflare, Stripe<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv52-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv52-en[data-kb-block=\"kb-adv-heading19692_priv52-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv52-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv52-en[data-kb-block=\"kb-adv-heading19692_priv52-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv52-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv52-en[data-kb-block=\"kb-adv-heading19692_priv52-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv52-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv52-en\">4.3 Data we never collect<\/h3>\n\n\n\n<p>ekomfort <strong>never collects<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>your full payment card numbers (processed directly by Stripe or PayPal in a PCI-DSS environment),<\/li>\n\n\n\n<li>your health data, political, religious, philosophical or trade-union opinions, or sexual orientation (special categories within the meaning of Article 9 GDPR),<\/li>\n\n\n\n<li>your biometric or genetic data,<\/li>\n\n\n\n<li>data of minors under 16 years of age (the Website is not intended for minors; orders require legal capacity to contract).<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc07-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc07-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc07-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv07-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv07-en[data-kb-block=\"kb-adv-heading19692_priv07-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv07-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv07-en[data-kb-block=\"kb-adv-heading19692_priv07-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv07-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv07-en[data-kb-block=\"kb-adv-heading19692_priv07-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-finalites\" class=\"kt-adv-heading19692_priv07-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv07-en\">5. Purposes and legal bases for processing<\/h2>\n\n\n\n<p>In accordance with <strong>Article 6 of the GDPR<\/strong>, each processing operation is based on a specific legal basis. The table below details each purpose, the applicable legal basis and the data concerned.<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Purpose<\/th><th>Legal basis (Art. 6 GDPR)<\/th><th>Data processed<\/th><\/tr><\/thead><tbody><tr><td><strong>Customer account management<\/strong> (creation, authentication, update)<\/td><td>Art. 6(1)(b) \u2014 performance of the contract<\/td><td>Identification, contact, account<\/td><\/tr><tr><td><strong>Processing and fulfilment of orders<\/strong> (payment, delivery, after-sales service, invoices, returns, legal warranty)<\/td><td>Art. 6(1)(b) \u2014 performance of the contract<\/td><td>Identification, contact, delivery, order<\/td><\/tr><tr><td><strong>Retention of invoices and accounting records<\/strong><\/td><td>Art. 6(1)(c) \u2014 legal obligation (LU Commercial Code + LU\/FR\/BE\/DE tax obligations)<\/td><td>Order data, billing<\/td><\/tr><tr><td><strong>Combating payment fraud<\/strong><\/td><td>Art. 6(1)(f) \u2014 legitimate interest (financial security)<\/td><td>Technical data, IP, Stripe signals<\/td><\/tr><tr><td><strong>Sending the newsletter and commercial communications<\/strong><\/td><td>Art. 6(1)(a) \u2014 consent (explicit prior opt-in)<\/td><td>Contact, preferences<\/td><\/tr><tr><td><strong>Personalisation of the user experience<\/strong> (language, currency)<\/td><td>Art. 6(1)(f) \u2014 legitimate interest (ergonomics)<\/td><td>Technical data, functional cookies<\/td><\/tr><tr><td><strong>Audience measurement and statistics<\/strong> (Google Analytics 4)<\/td><td>Art. 6(1)(a) \u2014 consent<\/td><td>Browsing data, analytics cookies<\/td><\/tr><tr><td><strong>Targeted advertising and retargeting<\/strong> (Google Ads, Meta \u2014 if activated)<\/td><td>Art. 6(1)(a) \u2014 consent<\/td><td>Browsing data, advertising cookies<\/td><\/tr><tr><td><strong>Website security<\/strong> (anti-bot, anti-DDoS, anti-injection)<\/td><td>Art. 6(1)(f) \u2014 legitimate interest (IT security)<\/td><td>IP, logs, security cookies<\/td><\/tr><tr><td><strong>Responding to contact requests<\/strong><\/td><td>Art. 6(1)(b) \u2014 pre-contractual measures, or Art. 6(1)(f) \u2014 legitimate interest<\/td><td>Identification, contact, content<\/td><\/tr><tr><td><strong>Responding to GDPR rights requests<\/strong><\/td><td>Art. 6(1)(c) \u2014 legal obligation (GDPR Art. 12 to 22)<\/td><td>Identification, contact, data concerned<\/td><\/tr><tr><td><strong>Defence of our interests in case of litigation<\/strong><\/td><td>Art. 6(1)(f) \u2014 legitimate interest (safeguarding rights)<\/td><td>All relevant categories<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>Balancing test (legitimate interest)<\/strong>: for each processing operation based on Article 6(1)(f), we have carried out a balancing test (weighing our legitimate interest against the rights and freedoms of the data subjects). You may at any time object to processing based on legitimate interest \u2014 see section 9.<\/p><\/blockquote>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc08-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc08-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc08-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv08-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv08-en[data-kb-block=\"kb-adv-heading19692_priv08-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv08-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv08-en[data-kb-block=\"kb-adv-heading19692_priv08-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv08-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv08-en[data-kb-block=\"kb-adv-heading19692_priv08-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-destinataires\" class=\"kt-adv-heading19692_priv08-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv08-en\">6. Recipients of the data<\/h2>\n\n\n\n<p>Your data is only shared with recipients strictly necessary to achieve the purposes described in section 5, in compliance with contractual and regulatory obligations.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv53-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv53-en[data-kb-block=\"kb-adv-heading19692_priv53-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv53-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv53-en[data-kb-block=\"kb-adv-heading19692_priv53-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv53-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv53-en[data-kb-block=\"kb-adv-heading19692_priv53-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv53-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv53-en\">6.1 Internal recipients<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The manager and authorised staff of SAKEPIXEL SARL-S, strictly within the limits of their duties (commercial management, after-sales service, accounting).<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv54-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv54-en[data-kb-block=\"kb-adv-heading19692_priv54-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv54-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv54-en[data-kb-block=\"kb-adv-heading19692_priv54-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv54-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv54-en[data-kb-block=\"kb-adv-heading19692_priv54-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv54-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv54-en\">6.2 Processors within the meaning of Article 28 GDPR<\/h3>\n\n\n\n<p>All processors listed below are bound to ekomfort by a <strong>data processing agreement (DPA)<\/strong> incorporating the clauses required by Article 28 GDPR.<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Processor<\/th><th>Service provided<\/th><th>Data location<\/th><th>DPA signed<\/th><\/tr><\/thead><tbody><tr><td><strong>Hostinger International Ltd<\/strong><\/td><td>Hosting of the Website and database<\/td><td>Headquarters: Cyprus \u2014 operational data centres: EU (Lithuania \/ Netherlands)<\/td><td>Yes<\/td><\/tr><tr><td><strong>Stripe Payments Europe Ltd<\/strong><\/td><td>Payment card processing<\/td><td>Ireland (EU) + United States (DPF)<\/td><td>Yes<\/td><\/tr><tr><td><strong>PayPal (Europe) S.\u00e0 r.l. et Cie SCA<\/strong><\/td><td>PayPal payment processing<\/td><td>Luxembourg (EU)<\/td><td>Yes<\/td><\/tr><tr><td><strong>Google Ireland Ltd<\/strong><\/td><td>Google Analytics 4, Google Tag Manager<\/td><td>Ireland (EU) + United States (DPF)<\/td><td>Yes<\/td><\/tr><tr><td><strong>Cloudflare Inc.<\/strong><\/td><td>Security, CDN, anti-bot protection<\/td><td>United States (DPF) + EU<\/td><td>Yes<\/td><\/tr><tr><td><strong>WPML \/ OnTheGoSystems<\/strong><\/td><td>WordPress multilingual module (no transfer of users&#8217; personal data)<\/td><td>EU<\/td><td>Yes<\/td><\/tr><tr><td><strong>FluentCRM (Really Simple Plugins B.V.)<\/strong><\/td><td>Newsletter management (self-hosted on Hostinger)<\/td><td>EU<\/td><td>Not applicable (self-hosted)<\/td><\/tr><tr><td><strong>Amazon Web Services (Amazon SES)<\/strong><\/td><td>Sending transactional emails and newsletters<\/td><td>EU (Frankfurt, Ireland)<\/td><td>Yes<\/td><\/tr><tr><td><strong>Complianz GDPR (Really Simple Plugins B.V.)<\/strong><\/td><td>Cookie consent management<\/td><td>EU (Netherlands)<\/td><td>Yes<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv55-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv55-en[data-kb-block=\"kb-adv-heading19692_priv55-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv55-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv55-en[data-kb-block=\"kb-adv-heading19692_priv55-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv55-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv55-en[data-kb-block=\"kb-adv-heading19692_priv55-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv55-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv55-en\">6.3 Carriers and logistics providers<\/h3>\n\n\n\n<p>Data strictly necessary for delivery (name, postal address, telephone, email) is transmitted to the carrier selected at the time of the order:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>DPD Luxembourg \/ DPD France \/ DPD Belgium \/ DPD Deutschland<\/strong> (DPDgroup)<\/li>\n\n\n\n<li><strong>Mondial Relay<\/strong> (pickup point delivery in FR \/ BE)<\/li>\n\n\n\n<li><strong>UPS Europe SRL\/BV<\/strong><\/li>\n\n\n\n<li><!-- TO BE COMPLETED: add or remove carriers according to actual offering (e.g. La Poste, Bpost, DHL, etc.) --><\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv56-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv56-en[data-kb-block=\"kb-adv-heading19692_priv56-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv56-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv56-en[data-kb-block=\"kb-adv-heading19692_priv56-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv56-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv56-en[data-kb-block=\"kb-adv-heading19692_priv56-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv56-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv56-en\">6.4 Public authorities<\/h3>\n\n\n\n<p>Your data may be communicated to administrative or judicial authorities only upon a legally founded request (judicial requisition, tax demand, etc.) and within the strict limits provided by law.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv57-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv57-en[data-kb-block=\"kb-adv-heading19692_priv57-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv57-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv57-en[data-kb-block=\"kb-adv-heading19692_priv57-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv57-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv57-en[data-kb-block=\"kb-adv-heading19692_priv57-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv57-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv57-en\">6.5 No resale<\/h3>\n\n\n\n<p>ekomfort <strong>never sells or rents<\/strong> your personal data to third parties for commercial purposes.<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc09-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc09-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc09-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv09-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv09-en[data-kb-block=\"kb-adv-heading19692_priv09-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv09-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv09-en[data-kb-block=\"kb-adv-heading19692_priv09-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv09-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv09-en[data-kb-block=\"kb-adv-heading19692_priv09-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-transferts\" class=\"kt-adv-heading19692_priv09-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv09-en\">7. Transfers outside the European Union<\/h2>\n\n\n\n<p>The majority of your data is processed and stored within the <strong>European Economic Area (EEA)<\/strong>.<\/p>\n\n\n\n<p>Some of our processors have their parent company or infrastructure in the <strong>United States<\/strong>. Any transfers to the United States are governed by the following safeguards provided for in <strong>Chapter V of the GDPR<\/strong>:<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Processor<\/th><th>Transfer mechanism<\/th><\/tr><\/thead><tbody><tr><td><strong>Stripe Payments Europe Ltd<\/strong> (EU subsidiary of Stripe Inc.)<\/td><td>Data processed by the EU subsidiary on a priority basis; occasional transfers to Stripe Inc. (US) covered by the <strong>EU-US Data Privacy Framework (DPF)<\/strong> and by the <strong>Standard Contractual Clauses (SCC)<\/strong> of the European Commission (decision 2021\/914 of 4 June 2021).<\/td><\/tr><tr><td><strong>Google Ireland Ltd<\/strong> (EU subsidiary of Google LLC)<\/td><td>Google LLC enrolled in the <strong>Data Privacy Framework<\/strong> (validated by the European Commission on 10 July 2023). Standard Contractual Clauses as a fallback.<\/td><\/tr><tr><td><strong>Cloudflare Inc.<\/strong><\/td><td>Enrolled in the <strong>Data Privacy Framework<\/strong> + Standard Contractual Clauses of the European Commission.<\/td><\/tr><tr><td><strong>Amazon Web Services Inc.<\/strong> (via European subsidiaries)<\/td><td>EU regions used by default (Frankfurt, Ireland). For any transfer outside the EU: DPF + Standard Contractual Clauses.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>Data Privacy Framework reference<\/strong>: <a href=\"https:\/\/www.dataprivacyframework.gov\" target=\"_blank\" rel=\"noopener\">https:\/\/www.dataprivacyframework.gov<\/a><\/p><\/blockquote>\n\n\n\n<p>Upon request to privacy@ekomfort.lu, you may obtain a copy of the contractual safeguards applicable to a transfer to a third country concerning your data.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>No transfer to China, Russia, or any country subject to a regime of mass surveillance incompatible with the fundamental right to data protection within the meaning of CJEU judgment C-311\/18 &#8220;Schrems II&#8221; of 16 July 2020.<\/strong><\/p><\/blockquote>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc10-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc10-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc10-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv10-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv10-en[data-kb-block=\"kb-adv-heading19692_priv10-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv10-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv10-en[data-kb-block=\"kb-adv-heading19692_priv10-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv10-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv10-en[data-kb-block=\"kb-adv-heading19692_priv10-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-conservation\" class=\"kt-adv-heading19692_priv10-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv10-en\">8. Retention periods<\/h2>\n\n\n\n<p>In accordance with the <strong>storage limitation principle<\/strong> (Article 5(1)(e) GDPR), your data is retained only for the period strictly necessary for the purposes pursued, or for the period required by law.<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Data category<\/th><th>Active retention period<\/th><th>Intermediate archiving<\/th><th>Total<\/th><\/tr><\/thead><tbody><tr><td><strong>Customer account<\/strong> (no login or purchase)<\/td><td>3 years from the last activity<\/td><td>\u2014<\/td><td>3 years<\/td><\/tr><tr><td><strong>Order data and invoices<\/strong><\/td><td>1 year from dispatch (after-sales service \/ 2-year legal warranty under Directive (EU) 2019\/771)<\/td><td>10 years (LU accounting obligation, art. 16 Commercial Code; FR 10 years art. L.123-22; BE 7 years art. III.86 of the Code of Economic Law; DE 10 years \u00a7 257 HGB)<\/td><td><strong>10 years<\/strong><\/td><\/tr><tr><td><strong>Banking data<\/strong><\/td><td>No retention by ekomfort (PCI-DSS Stripe \/ PayPal)<\/td><td>\u2014<\/td><td>0<\/td><\/tr><tr><td><strong>Commercial prospecting data<\/strong> (newsletter)<\/td><td>Until consent is withdrawn, or 3 years after the last interaction (click \/ open)<\/td><td>\u2014<\/td><td>Max. 3 years<\/td><\/tr><tr><td><strong>Browsing data<\/strong> (analytics)<\/td><td>13 months maximum<\/td><td>Anonymisation after 13 months<\/td><td><strong>13 months<\/strong><\/td><\/tr><tr><td><strong>Cookies<\/strong><\/td><td>13 months maximum (CNIL\/CNPD recommendation)<\/td><td>\u2014<\/td><td><strong>13 months<\/strong><\/td><\/tr><tr><td><strong>Technical security logs<\/strong><\/td><td>1 year (CNIL recommendation \u2014 IS security)<\/td><td>\u2014<\/td><td><strong>1 year<\/strong><\/td><\/tr><tr><td><strong>Litigation data<\/strong><\/td><td>Duration of the proceedings + appeal \/ limitation periods<\/td><td>\u2014<\/td><td>Variable<\/td><\/tr><tr><td><strong>Rights exercise requests<\/strong><\/td><td>3 years (proof of GDPR compliance)<\/td><td>\u2014<\/td><td>3 years<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>At the end of these periods, the data is <strong>permanently deleted<\/strong> or <strong>irreversibly anonymised<\/strong> (aggregated statistics with no possible re-identification).<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc11-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc11-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc11-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv11-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv11-en[data-kb-block=\"kb-adv-heading19692_priv11-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv11-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv11-en[data-kb-block=\"kb-adv-heading19692_priv11-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv11-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv11-en[data-kb-block=\"kb-adv-heading19692_priv11-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-droits\" class=\"kt-adv-heading19692_priv11-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv11-en\">9. Your rights<\/h2>\n\n\n\n<p>In accordance with <strong>Articles 15 to 22 of the GDPR<\/strong>, you have the following rights regarding your personal data:<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv58-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv58-en[data-kb-block=\"kb-adv-heading19692_priv58-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv58-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv58-en[data-kb-block=\"kb-adv-heading19692_priv58-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv58-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv58-en[data-kb-block=\"kb-adv-heading19692_priv58-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv58-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv58-en\">9.1 Right of access (Art. 15)<\/h3>\n\n\n\n<p>You may obtain confirmation as to whether or not your data is being processed by ekomfort, and where applicable, obtain a <strong>complete copy<\/strong> together with information on the purposes, categories, recipients, retention periods and associated rights.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv59-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv59-en[data-kb-block=\"kb-adv-heading19692_priv59-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv59-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv59-en[data-kb-block=\"kb-adv-heading19692_priv59-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv59-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv59-en[data-kb-block=\"kb-adv-heading19692_priv59-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv59-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv59-en\">9.2 Right to rectification (Art. 16)<\/h3>\n\n\n\n<p>You may request the rectification of any inaccurate or incomplete data concerning you. You may also update your contact details directly from your customer account (&#8220;My account&#8221; \u2192 &#8220;Address&#8221;).<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv60-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv60-en[data-kb-block=\"kb-adv-heading19692_priv60-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv60-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv60-en[data-kb-block=\"kb-adv-heading19692_priv60-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv60-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv60-en[data-kb-block=\"kb-adv-heading19692_priv60-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv60-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv60-en\">9.3 Right to erasure (&#8220;right to be forgotten&#8221;) (Art. 17)<\/h3>\n\n\n\n<p>You may request the erasure of your data in the cases provided for by the GDPR, in particular where:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the data is no longer necessary in relation to the purposes,<\/li>\n\n\n\n<li>you withdraw your consent and no other legal basis applies,<\/li>\n\n\n\n<li>you object to processing based on legitimate interest,<\/li>\n\n\n\n<li>the data has been unlawfully processed.<\/li>\n<\/ul>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>Limitation<\/strong>: we cannot erase data whose retention is required by law (invoices, accounting \u2014 10 years) for as long as that obligation remains in force.<\/p><\/blockquote>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv61-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv61-en[data-kb-block=\"kb-adv-heading19692_priv61-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv61-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv61-en[data-kb-block=\"kb-adv-heading19692_priv61-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv61-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv61-en[data-kb-block=\"kb-adv-heading19692_priv61-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv61-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv61-en\">9.4 Right to restriction of processing (Art. 18)<\/h3>\n\n\n\n<p>You may request that the processing be temporarily suspended, for example while the accuracy of the data is being verified or in the event of an objection.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv62-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv62-en[data-kb-block=\"kb-adv-heading19692_priv62-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv62-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv62-en[data-kb-block=\"kb-adv-heading19692_priv62-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv62-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv62-en[data-kb-block=\"kb-adv-heading19692_priv62-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv62-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv62-en\">9.5 Right to data portability (Art. 20)<\/h3>\n\n\n\n<p>You may receive, in a <strong>structured, commonly used and machine-readable format<\/strong> (JSON, CSV), the data you have provided to us, and transmit it to another controller.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv63-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv63-en[data-kb-block=\"kb-adv-heading19692_priv63-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv63-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv63-en[data-kb-block=\"kb-adv-heading19692_priv63-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv63-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv63-en[data-kb-block=\"kb-adv-heading19692_priv63-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv63-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv63-en\">9.6 Right to object (Art. 21)<\/h3>\n\n\n\n<p>You may object at any time, <strong>on grounds relating to your particular situation<\/strong>, to processing based on legitimate interest (Article 6(1)(f)).<\/p>\n\n\n\n<p>With regard to <strong>commercial prospecting<\/strong> (newsletter), you may object <strong>without giving any reason<\/strong> and unconditionally, either by clicking the &#8220;Unsubscribe&#8221; link in each email, or by writing to privacy@ekomfort.lu.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv64-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv64-en[data-kb-block=\"kb-adv-heading19692_priv64-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv64-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv64-en[data-kb-block=\"kb-adv-heading19692_priv64-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv64-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv64-en[data-kb-block=\"kb-adv-heading19692_priv64-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv64-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv64-en\">9.7 Right to withdraw consent (Art. 7(3))<\/h3>\n\n\n\n<p>Where processing is based on your consent, you may withdraw it at any time, <strong>as easily as you gave it<\/strong>. Withdrawal does not affect the lawfulness of processing carried out before such withdrawal.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv65-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv65-en[data-kb-block=\"kb-adv-heading19692_priv65-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv65-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv65-en[data-kb-block=\"kb-adv-heading19692_priv65-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv65-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv65-en[data-kb-block=\"kb-adv-heading19692_priv65-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv65-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv65-en\">9.8 Right not to be subject to automated decision-making (Art. 22)<\/h3>\n\n\n\n<p>ekomfort <strong>does not make any automated decisions producing legal effects<\/strong> (automated order refusal without human intervention, discriminatory scoring, etc.) regarding its customers. The anti-fraud checks carried out by Stripe or PayPal may include an automated component, but human intervention is always available on request.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv66-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv66-en[data-kb-block=\"kb-adv-heading19692_priv66-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv66-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv66-en[data-kb-block=\"kb-adv-heading19692_priv66-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv66-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv66-en[data-kb-block=\"kb-adv-heading19692_priv66-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv66-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv66-en\">9.9 Right to set post-mortem directives (FR only \u2014 Art. 85 LIL)<\/h3>\n\n\n\n<p>If you reside in France, you may set general or specific directives regarding the fate of your data after your death (Law No. 2016-1321 of 7 October 2016).<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc12-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc12-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc12-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv12-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv12-en[data-kb-block=\"kb-adv-heading19692_priv12-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv12-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv12-en[data-kb-block=\"kb-adv-heading19692_priv12-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv12-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv12-en[data-kb-block=\"kb-adv-heading19692_priv12-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-exercice\" class=\"kt-adv-heading19692_priv12-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv12-en\">10. How to exercise your rights<\/h2>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv67-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv67-en[data-kb-block=\"kb-adv-heading19692_priv67-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv67-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv67-en[data-kb-block=\"kb-adv-heading19692_priv67-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv67-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv67-en[data-kb-block=\"kb-adv-heading19692_priv67-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv67-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv67-en\">10.1 Channels for exercising rights<\/h3>\n\n\n\n<p>To exercise any of the rights described in section 9, two channels are available to you:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Email<\/strong>: privacy@ekomfort.lu<\/li>\n\n\n\n<li><strong>Postal mail<\/strong>:<br>SAKEPIXEL SARL-S \u2014 Data Protection<br>13 rue Anna Lindh<br>L-4547 Differdange<br>Luxembourg<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv68-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv68-en[data-kb-block=\"kb-adv-heading19692_priv68-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv68-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv68-en[data-kb-block=\"kb-adv-heading19692_priv68-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv68-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv68-en[data-kb-block=\"kb-adv-heading19692_priv68-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv68-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv68-en\">10.2 Identity verification<\/h3>\n\n\n\n<p>For security reasons, <strong>we may ask you to prove your identity<\/strong> (copy of an identity document with non-essential data redacted) where reasonable doubt exists as to the identity of the requester, in accordance with Article 12(6) GDPR.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv69-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv69-en[data-kb-block=\"kb-adv-heading19692_priv69-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv69-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv69-en[data-kb-block=\"kb-adv-heading19692_priv69-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv69-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv69-en[data-kb-block=\"kb-adv-heading19692_priv69-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv69-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv69-en\">10.3 Response time<\/h3>\n\n\n\n<p>In accordance with <strong>Article 12(3) GDPR<\/strong>, we undertake to respond to your request within <strong>one (1) month<\/strong> of receipt. This period may be extended by a further <strong>two (2) months<\/strong> in the event of a complex request or numerous requests, in which case we will inform you within the initial period and provide the reasons.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv70-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv70-en[data-kb-block=\"kb-adv-heading19692_priv70-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv70-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv70-en[data-kb-block=\"kb-adv-heading19692_priv70-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv70-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv70-en[data-kb-block=\"kb-adv-heading19692_priv70-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv70-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv70-en\">10.4 Free of charge<\/h3>\n\n\n\n<p>The exercise of your rights is <strong>free of charge<\/strong>, except in the case of a manifestly unfounded or excessive request (notably owing to its repetitive nature), in which case a reasonable amount covering our administrative costs may be requested, or the request may be refused (Art. 12(5) GDPR).<\/p>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc13-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc13-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc13-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv13-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv13-en[data-kb-block=\"kb-adv-heading19692_priv13-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv13-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv13-en[data-kb-block=\"kb-adv-heading19692_priv13-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv13-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv13-en[data-kb-block=\"kb-adv-heading19692_priv13-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-securite\" class=\"kt-adv-heading19692_priv13-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv13-en\">11. Data security<\/h2>\n\n\n\n<p>In accordance with <strong>Articles 25 and 32 of the GDPR<\/strong> (&#8220;privacy by design&#8221; and security of processing), ekomfort implements appropriate technical and organisational measures to ensure a level of security adapted to the risk.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv71-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv71-en[data-kb-block=\"kb-adv-heading19692_priv71-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv71-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv71-en[data-kb-block=\"kb-adv-heading19692_priv71-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv71-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv71-en[data-kb-block=\"kb-adv-heading19692_priv71-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv71-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv71-en\">11.1 Technical measures<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Encryption in transit<\/strong>: HTTPS \/ TLS 1.2+ protocol across the entire Website (Let&#8217;s Encrypt certificate, automatic renewal).<\/li>\n\n\n\n<li><strong>Password encryption<\/strong>: <strong>bcrypt<\/strong> algorithm (one-way salted hash), compliant with OWASP and CNIL recommendations.<\/li>\n\n\n\n<li><strong>Two-factor authentication (2FA)<\/strong>: available for administrator accounts and offered to customers.<\/li>\n\n\n\n<li><strong>Web application firewall (WAF)<\/strong>: Cloudflare protection against OWASP Top 10 attacks (SQL injection, XSS, CSRF, etc.).<\/li>\n\n\n\n<li><strong>Anti-bot and anti-DDoS protection<\/strong>: Cloudflare Turnstile + rate limiting.<\/li>\n\n\n\n<li><strong>Regular backups<\/strong>: daily encrypted backups, retained for 30 days, restoration tested.<\/li>\n\n\n\n<li><strong>Security updates<\/strong>: systematic application of patches for WordPress, WooCommerce, critical plugins (weekly cycle).<\/li>\n\n\n\n<li><strong>Access segregation<\/strong>: principle of least privilege, named administrator accounts.<\/li>\n\n\n\n<li><strong>Logging<\/strong>: retention of authentication and administrator access logs for 1 year.<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv72-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv72-en[data-kb-block=\"kb-adv-heading19692_priv72-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv72-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv72-en[data-kb-block=\"kb-adv-heading19692_priv72-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv72-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv72-en[data-kb-block=\"kb-adv-heading19692_priv72-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv72-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv72-en\">11.2 Organisational measures<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Staff awareness (manager and collaborators) on data protection.<\/li>\n\n\n\n<li>Security incident management policy with CNPD notification procedure within 72 hours (Art. 33 GDPR).<\/li>\n\n\n\n<li>Procedure for notifying data subjects in the event of a high-risk breach (Art. 34 GDPR).<\/li>\n\n\n\n<li>Data processing agreements (DPA) signed with each provider processing personal data.<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv73-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv73-en[data-kb-block=\"kb-adv-heading19692_priv73-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv73-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv73-en[data-kb-block=\"kb-adv-heading19692_priv73-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv73-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv73-en[data-kb-block=\"kb-adv-heading19692_priv73-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv73-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv73-en\">11.3 Notification of data breaches<\/h3>\n\n\n\n<p>In the event of a personal data breach likely to result in a risk to your rights and freedoms, we undertake to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>notify the <strong>CNPD<\/strong> (and the competent authorities of the other jurisdictions concerned) within <strong>72 hours<\/strong> of becoming aware of it,<\/li>\n\n\n\n<li>inform you <strong>without undue delay<\/strong> if the breach poses a high risk to you (Art. 34 GDPR).<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc14-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc14-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc14-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv14-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv14-en[data-kb-block=\"kb-adv-heading19692_priv14-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv14-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv14-en[data-kb-block=\"kb-adv-heading19692_priv14-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv14-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv14-en[data-kb-block=\"kb-adv-heading19692_priv14-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-cookies\" class=\"kt-adv-heading19692_priv14-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv14-en\">12. Cookies and tracking technologies<\/h2>\n\n\n\n<p>The Website uses cookies and similar technologies to ensure its operation, measure its audience, and \u2014 subject to your explicit consent \u2014 display personalised advertising content.<\/p>\n\n\n\n<p>Full details (categories, purposes, durations, providers, consent management) are described in our dedicated <strong><a href=\"https:\/\/ekomfort.lu\/en\/cookie-policy\/\">Cookie Policy<\/a><\/strong>.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>Your cookie preferences<\/strong> can be changed at any time via the <strong>&#8220;Manage my cookies&#8221;<\/strong> link in the footer of every page of the Website.<\/p><\/blockquote>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc15-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc15-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc15-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv15-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv15-en[data-kb-block=\"kb-adv-heading19692_priv15-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv15-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv15-en[data-kb-block=\"kb-adv-heading19692_priv15-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv15-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv15-en[data-kb-block=\"kb-adv-heading19692_priv15-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-reclamation\" class=\"kt-adv-heading19692_priv15-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv15-en\">13. Complaint to a supervisory authority<\/h2>\n\n\n\n<p>If, after contacting us, you consider that your rights have not been respected, you may lodge a <strong>complaint<\/strong> with the competent supervisory authority. You have the right to refer the matter to the authority of the country of your habitual residence, your place of work, or the place where the alleged infringement occurred (Art. 77 GDPR).<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Country<\/th><th>Supervisory authority<\/th><th>Contact details<\/th><\/tr><\/thead><tbody><tr><td><strong>Luxembourg<\/strong><\/td><td><strong>CNPD<\/strong> \u2014 Commission Nationale pour la Protection des Donn\u00e9es<\/td><td>15, boulevard du Jazz, L-4370 Belvaux \u2014 <a href=\"https:\/\/cnpd.public.lu\" target=\"_blank\" rel=\"noopener\">https:\/\/cnpd.public.lu<\/a> \u2014 info@cnpd.lu<\/td><\/tr><tr><td><strong>France<\/strong><\/td><td><strong>CNIL<\/strong> \u2014 Commission Nationale de l&#8217;Informatique et des Libert\u00e9s<\/td><td>3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 \u2014 <a href=\"https:\/\/www.cnil.fr\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cnil.fr<\/a><\/td><\/tr><tr><td><strong>Belgium<\/strong><\/td><td><strong>APD \/ GBA<\/strong> \u2014 Data Protection Authority<\/td><td>Rue de la Presse 35, 1000 Brussels \u2014 <a href=\"https:\/\/www.autoriteprotectiondonnees.be\" target=\"_blank\" rel=\"noopener\">https:\/\/www.autoriteprotectiondonnees.be<\/a> \u2014 contact@apd-gba.be<\/td><\/tr><tr><td><strong>Germany<\/strong><\/td><td><strong>BfDI<\/strong> \u2014 Bundesbeauftragter f\u00fcr den Datenschutz und die Informationsfreiheit (+ L\u00e4nder authorities)<\/td><td>Graurheindorfer Stra\u00dfe 153, 53117 Bonn \u2014 <a href=\"https:\/\/www.bfdi.bund.de\" target=\"_blank\" rel=\"noopener\">https:\/\/www.bfdi.bund.de<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>Judicial remedy<\/strong>: independently of any complaint to a supervisory authority, you may bring a judicial remedy before the competent courts (Art. 79 GDPR).<\/p><\/blockquote>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc16-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc16-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc16-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv16-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv16-en[data-kb-block=\"kb-adv-heading19692_priv16-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv16-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv16-en[data-kb-block=\"kb-adv-heading19692_priv16-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv16-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv16-en[data-kb-block=\"kb-adv-heading19692_priv16-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-modifications\" class=\"kt-adv-heading19692_priv16-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv16-en\">14. Changes to this policy<\/h2>\n\n\n\n<p>This Policy may be updated to reflect legal, jurisprudential, technical or organisational developments.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv74-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv74-en[data-kb-block=\"kb-adv-heading19692_priv74-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv74-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv74-en[data-kb-block=\"kb-adv-heading19692_priv74-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv74-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv74-en[data-kb-block=\"kb-adv-heading19692_priv74-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv74-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv74-en\">14.1 Notification of substantial changes<\/h3>\n\n\n\n<p>In the event of a <strong>substantial<\/strong> change (change of purpose, addition of a major recipient, modification of a retention period, transfer to a new third country, etc.), we will notify you:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>by <strong>email<\/strong> sent to the address associated with your account or your newsletter subscription,<\/li>\n\n\n\n<li>at least <strong>30 days before<\/strong> the new provisions take effect,<\/li>\n\n\n\n<li>with a clear summary of the changes and a reminder of your right to object \/ to withdraw consent.<\/li>\n<\/ul>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv75-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv75-en[data-kb-block=\"kb-adv-heading19692_priv75-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv75-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv75-en[data-kb-block=\"kb-adv-heading19692_priv75-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv75-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv75-en[data-kb-block=\"kb-adv-heading19692_priv75-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv75-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv75-en\">14.2 Minor changes<\/h3>\n\n\n\n<p>Minor changes (typo corrections, contact detail updates, additions of clarifications without impact on your rights) are published without individual notification; the &#8220;last updated&#8221; date at the top of this page will be refreshed.<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv76-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv76-en[data-kb-block=\"kb-adv-heading19692_priv76-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv76-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv76-en[data-kb-block=\"kb-adv-heading19692_priv76-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv76-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv76-en[data-kb-block=\"kb-adv-heading19692_priv76-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h3 class=\"kt-adv-heading19692_priv76-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv76-en\">14.3 Version history<\/h3>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Version<\/th><th>Date<\/th><th>Changes<\/th><\/tr><\/thead><tbody><tr><td>2.0<\/td><td>7 May 2026<\/td><td>Complete overhaul compliant with GDPR + ePrivacy + LU\/FR\/BE\/DE \u2014 ekomfort Legal Pages squad<\/td><\/tr><tr><td>1.x<\/td><td><!-- TO BE COMPLETED: dates of earlier versions if traceability available --><\/td><td><!-- TO BE COMPLETED: description --><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc17-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc17-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc17-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading19692_priv17-en, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv17-en[data-kb-block=\"kb-adv-heading19692_priv17-en\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv17-en mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv17-en[data-kb-block=\"kb-adv-heading19692_priv17-en\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading19692_priv17-en img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading19692_priv17-en[data-kb-block=\"kb-adv-heading19692_priv17-en\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 id=\"priv-contact-recap\" class=\"kt-adv-heading19692_priv17-en wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading19692_priv17-en\">Contact summary<\/h2>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Subject<\/th><th>Contact details<\/th><\/tr><\/thead><tbody><tr><td>General enquiries<\/td><td>info@ekomfort.lu \u2014 +352 661 201 619<\/td><\/tr><tr><td>Data protection \/ exercise of rights<\/td><td>privacy@ekomfort.lu<\/td><\/tr><tr><td>Postal address<\/td><td>SAKEPIXEL SARL-S, 13 rue Anna Lindh, L-4547 Differdange, Luxembourg<\/td><\/tr><tr><td>Trade register<\/td><td>Luxembourg B286895<\/td><\/tr><tr><td>Business license<\/td><td>10167719\/1<\/td><\/tr><tr><td>EU VAT<\/td><td>LU35860625<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc18-en .kt-block-spacer{height:40px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc18-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc18-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><strong>Legal bases and references<\/strong>:<\/p><ul><li>Regulation (EU) 2016\/679 of 27 April 2016 (GDPR), Articles 5, 6, 7, 9, 12 to 22, 25, 28, 32, 33, 34, 37, 44 to 49, 77, 79.<\/li><li>Directive 2002\/58\/EC of 12 July 2002 (ePrivacy), as amended by Directive 2009\/136\/EC.<\/li><li>Luxembourg Law of 1 August 2018 on the organisation of the National Commission for Data Protection and the general regime on data protection.<\/li><li>French Law No. 78-17 of 6 January 1978 as amended (&#8220;Informatique et Libert\u00e9s&#8221;), as adapted by Law No. 2018-493 of 20 June 2018.<\/li><li>Bundesdatenschutzgesetz (BDSG) of 30 June 2017, current version.<\/li><li>Belgian Code of Economic Law, Book XII and Belgian legislation transposing the GDPR (Law of 30 July 2018).<\/li><li>European Commission adequacy decision of 10 July 2023 (EU-US Data Privacy Framework).<\/li><li>Decision 2021\/914 of 4 June 2021 \u2014 Standard Contractual Clauses of the European Commission.<\/li><li>CJEU judgment C-311\/18 of 16 July 2020 (&#8220;Schrems II&#8221;).<\/li><li>CNIL guidelines on retention periods, security, cookies (updated 2024).<\/li><li>CNPD guidelines applicable to Luxembourg controllers.<\/li><\/ul><\/blockquote>\n\n\n<style>.wp-block-kadence-spacer.kt-block-spacer-19692_spc19-en .kt-block-spacer{height:24px;}.wp-block-kadence-spacer.kt-block-spacer-19692_spc19-en .kt-divider{border-top-width:1px;height:1px;border-top-color:#eee;width:80%;border-top-style:solid;}<\/style>\n<div class=\"wp-block-kadence-spacer aligncenter kt-block-spacer-19692_spc19-en\"><div class=\"kt-block-spacer kt-block-spacer-halign-center\"><hr class=\"kt-divider\"\/><\/div><\/div>\n\n\n\n<p class=\"has-small-font-size\"><em>ekomfort Privacy Policy \u2014 operated by SAKEPIXEL SARL-S, Luxembourg. Document generated on 7 May 2026.<\/em><\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Last updated: 7 May 2026 Document generated by the ekomfort Legal Pages squad \u2014 DPO\/legal counsel review recommended before publication.Legal bases: Regulation (EU) 2016\/679 (GDPR), Directive 2002\/58\/EC (ePrivacy), Luxembourg Law of 1 August 2018 on the organisation of the CNPD, French Law No. 78-17 &#8220;Informatique et Libert\u00e9s&#8221; (LIL) as amended, Bundesdatenschutzgesetz (BDSG, Germany),&#8230;<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"class_list":["post-20103","page","type-page","status-publish","hentry"],"acf":[],"taxonomy_info":[],"featured_image_src_large":false,"author_info":{"display_name":"","author_link":"https:\/\/ekomfort.lu\/en\/author\/"},"comment_info":0,"_links":{"self":[{"href":"https:\/\/ekomfort.lu\/en\/wp-json\/wp\/v2\/pages\/20103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ekomfort.lu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ekomfort.lu\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/ekomfort.lu\/en\/wp-json\/wp\/v2\/comments?post=20103"}],"version-history":[{"count":0,"href":"https:\/\/ekomfort.lu\/en\/wp-json\/wp\/v2\/pages\/20103\/revisions"}],"wp:attachment":[{"href":"https:\/\/ekomfort.lu\/en\/wp-json\/wp\/v2\/media?parent=20103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}