Privacy policy

The data controller is Lux Digital Solutions. Full identity and contact details: see the legal notice. For any question relating to your data: support@luxdigitalsol.com.

Contact form: the information you enter there (name, optional company and phone, email address and message), plus a campaign source if present. It is used only to handle your request. Providing it is not mandatory; without the required information, we simply cannot reply to you.

Questions voluntarily entered via the question field on the homepage are transmitted without mandatory contact details via Brevo to the LDS Gmail inbox, even if a matching website section is displayed immediately, and stored there for internal review of page mapping and planning future content.

Please do not enter health data or confidential client data into the question field.

Your question and email address are sent together via Brevo to the LDS Gmail inbox so LDS can reply personally (no marketing). To limit repeated submissions, the server generates a protected hash of the address in RAM.

Technical data: when you browse the site, server logs may record technical data (IP address, browser type) for security and proper operation.

These passages exclusively concern questions under blog articles, separate from questions on the homepage. Your voluntary question is stored with article reference, language, and submission time in an isolated database on our European server. The form does not collect a contact address. Additionally, an internal notification with exactly these details is transmitted via Brevo to the existing LDS mailbox. Only authorized LDS personnel have access. There is no guarantee of an answer, no newsletter, and no advertising. For abuse protection, pseudonymized technical features are temporarily recorded. Do not enter names, contact details, or confidential information.

Advertising measurement with your consent: if you allow the Meta Pixel, a page view and a server-confirmed form submission may send event, browsing and device data to Meta, including the URL visited, the form source (contact), time, browser information, IP address and the _fbp and, where applicable, _fbc cookie identifiers. We do not send form content, your name, email address or phone number to Meta.

Answering your contact request: our legitimate interest in engaging with the people who reach out to us and following up on their request (article 6.1.f of the GDPR).

LDS processes questions voluntarily submitted via the question field on the homepage to internally improve page mapping and plan future content on the basis of its legitimate interest pursuant to Art. 6(1)(f) GDPR.

Security and proper operation of the site: our legitimate interest (article 6.1.f of the GDPR).

Processing for editorial topic planning is based on our legitimate interest (Art. 6 (1) (f) GDPR). This does not result in subscriptions or advertising.

Meta Pixel and its advertising cookies: your consent (Article 6(1)(a) GDPR and Article 4(3)(e) of the Luxembourg law of 30 May 2005). The Meta script and associated cookies remain blocked until you make a positive choice.

We use Hetzner Online GmbH to host the website. Contact requests are delivered to our Google (Gmail) inbox through Brevo’s SMTP service. Brevo processes the form details, including the message. Under the current setting, sending logs are kept for one month. Storage of new email previews is disabled; older previews may still exist. We do not sell this data or share it for advertising.

If you consent, Meta Platforms Ireland Limited receives event data to measure our campaigns and create advertising audiences. For certain processing, Meta and Lux Digital Solutions may act as joint controllers under the Meta Business Tools Terms.

The website is hosted on Hetzner Online GmbH infrastructure in the European Union.

Meta is part of a global group. Data may therefore be processed in the United States or other countries under the transfer mechanisms described by Meta, including the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses.

Contact messages are kept for as long as needed to handle your request, then for at most twelve months after our last exchange. If a contractual relationship follows, statutory retention periods apply.

For questions under blog articles, the form contains no dedicated form fields for names or contact addresses and does not request these details. The question text in the server database is automatically deleted after 30 days. The email copy in the LDS mailbox is deleted during the monthly review at the latest ten months after receipt of the respective message. For duplicate protection, only the article reference, language, submission time, and pseudonymized check markers are retained without the question text.

Inquiries without an entry in the dedicated email field are deleted no later than twelve months after receipt. Email addresses voluntarily provided along with the question for the purpose of a response are stored as long as necessary for processing and deleted no later than twelve months after the last exchange, subject to statutory retention obligations in the event of a subsequent contract.

Your Meta Pixel preference is stored for 180 days. Under the Meta Business Tools Terms, Meta may retain event data for up to two years; audiences created from that data may remain until deleted.

You have a right of access, rectification, erasure, restriction, portability and objection regarding your data, as well as the right to withdraw your consent at any time.

To exercise them, write to us at support@luxdigitalsol.com. You can also lodge a complaint with the National Commission for Data Protection (CNPD) in Luxembourg.

You can withdraw consent through “Manage cookies” in the footer. We then stop our own Meta events, send the withdrawal to Meta and remove accessible Meta cookies. Provider code that has already loaded remains in the document until the next full page load.

The details of cookies appear in our cookie policy.

This policy may change. The applicable version is the one published on this page.

PostHog receives data on public pages and interactions following voluntary consent. The three optional features for recognition, recording, and contact linking are individually selectable, revocable, and require base analytics. Rejection blocks no features. Meta and Google are separate purposes.

Session recordings capture public website texts. All forms, inputs, and personal question areas are blocked before transmission. Console and network contents are not recorded. Browser identifiers for recognition and contact linkage expire after a maximum of 90 days in the browser without extension.

Only after a server-accepted contact request and voluntary separate consent, LDS generates a pseudonymous PostHog ID from your email using a secret key, linking your visitor journey. The accepted request does not confirm the email owner. Your email and personal form contents remain in the internal LDS process. PostHog does not receive this personal data. Contacting triggers no advertising or newsletters.

Revoking consent immediately stops future recordings and contact associations; past data is not automatically deleted retroactively. Under LDS's Pay-as-you-go plan, the event query window is seven years. This is not a guaranteed automatic deletion period and cannot be shortened. Session recordings are kept 30 days. Browser identifiers expire after maximum 90 days without extension, which is not a provider deadline.

This measurement requires your separate analytics consent, which sets a first-party cookie for 180 days. It uses a random browser tab-session identifier that resets after 30 minutes of inactivity or 24 hours.

You can withdraw your consent and remove the identifier at any time by clicking 'Manage Cookies' in the website footer.

Consent under Art. 6 (1) (a) GDPR.

PostHog, Inc., USA, acting as a processor.

Data is captured directly via an EU API in Frankfurt, Germany, with GeoIP disabled. Overseas processing in the USA is not excluded and is subject to Standard Contractual Clauses as a safeguard.

Event query windows are 1 year for free plans or 7 years for paid plans based on official documentation, which does not represent a guaranteed automatic deletion deadline.