Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data through the InfoSociete.lu website is:

2. Data We Collect

When you use InfoSociete.lu, we may collect the following data:

• Usage data: Pages visited, search queries, timestamps, browser type, device information, and IP address. This data is collected automatically through server logs and analytics.
• Contact form data: Name, email address, and message content submitted voluntarily through our contact form.
• Cookies: We use strictly necessary cookies for site functionality (e.g., language preference). We do not use advertising or tracking cookies.

3. Purpose of Processing

We process your personal data for the following purposes:

• To provide and operate the InfoSociete.lu company search service.
• To respond to your inquiries submitted through the contact form.
• To improve our website and services through aggregated usage analysis.
• To ensure the security and stability of our website.

4. Legal Basis

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Legitimate interest (Art. 6(1)(f) GDPR): Processing usage data to operate and improve our website.
• Consent (Art. 6(1)(a) GDPR): When you voluntarily submit data through our contact form.
• Legal obligation (Art. 6(1)(c) GDPR): Where required to comply with applicable laws and regulations.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above:

• Usage data: Retained for up to 12 months, then anonymized or deleted.
• Contact form submissions: Retained for up to 24 months after your inquiry has been resolved.
• Cookies: Session cookies are deleted when you close your browser. Language preference cookies are retained for up to 12 months.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You may request a copy of your personal data.
• Right to rectification: You may request correction of inaccurate data.
• Right to erasure: You may request deletion of your personal data.
• Right to restriction: You may request limitation of processing in certain circumstances.
• Right to data portability: You may request your data in a machine-readable format.
• Right to object: You may object to processing based on legitimate interest.
• Right to lodge a complaint: You may file a complaint with the Commission Nationale pour la Protection des Données (CNPD), the Luxembourg data protection authority.

7. Data Sharing and Transfers

We do not sell your personal data. We may share your data with:

• Service providers: Hosting and infrastructure providers that help us operate the website (located within the EU/EEA or in countries with adequate data protection levels).
• Legal authorities: When required by law or to protect our rights.

Any data transfers outside the EU/EEA are carried out with appropriate safeguards in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Contact

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at info@scriptrating.lu or visit our contact page.