Privacy notice

Who we are

ESILUX is the controller of the personal data covered by this policy.

Information we collect

• We may collect the information you choose to provide, such as your name, email address, organisation, and the contents of your message when you contact us.
• If you subscribe to a newsletter or updates, we may collect your email address and any related subscription preferences.
• We may also collect limited technical information when you use the website, such as IP address, browser type, device information, and server log data.
• Where analytics tools are enabled, we may also collect information about how visitors use the website.

We use your information to

• respond to your messages and enquiries;
• provide newsletters or updates you have requested;
• operate, maintain, secure, and improve the website;
• understand website use through analytics, where enabled with your consent; and
• comply with legal obligations or protect our legal position where necessary.

Legal bases

• We rely on legitimate interests to respond to enquiries, administer the website, maintain security, and manage our ordinary communications.
• We rely on consent for newsletter subscriptions and for non-essential cookies or analytics technologies.
• We may also process personal data where necessary to comply with a legal obligation.

Sharing of data

We may share personal data with service providers who support our website or communications, such as website hosting, IT support, newsletter delivery, or analytics providers. They may process data only on our instructions and for the relevant service.

International transfers

If ESILUX uses providers located outside the European Economic Area, including providers in the United States, personal data may be transferred outside the EEA. Where this happens, ESILUX will rely on a lawful transfer mechanism under the GDPR, such as an adequacy decision of the European Commission or other appropriate safeguards. Where Mailchimp or Google services are used, transfers to the United States may take place on the basis of the EU-US Data Privacy Framework, if applicable.

How long we keep data

• contact messages are kept for up to 12 months, unless a longer period is needed for follow-up or legal reasons;
• newsletter data is kept until you unsubscribe;
• cookie preference records may be kept for up to 12 months; and
• analytics data is kept according to the relevant tool settings and for the shortest practical retention period configured by ESILUX.

Cookies

The website may use strictly necessary cookies for basic operation. If ESILUX uses analytics or other non-essential cookies, these will be activated only after your consent. You can manage your cookie preferences at any time through the cookie settings tool made available on the website.

Your rights

Under the GDPR, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, objection to processing, and, where applicable, data portability. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the Luxembourg supervisory authority:

Automated decision-making

ESILUX does not use your personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.

Updates to this policy

We may update this Privacy Policy from time to time. The version published on this page is the current version.