Effective Date: June 5, 2026
Grethen Renovation Sàrl (“we,” “us,” or “our”) operates the e-commerce website www.grethenrenovation.com (the “Site”). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, make a purchase, or interact with our services.
We process your personal data in accordance with the European Union General Data Protection Regulation (GDPR) and applicable local data protection laws in Luxembourg.
1. Data Controller Contact Information
Grethen Renovation Sàrl is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our privacy practices, please contact us using the details below:
- Company Name: Grethen Renovation Sàrl
- Registered Office Address: 2 ZI Rolach, L-5280 Sandweiler, Luxembourg
- Contact Email: bramblek@grethenrenovation.com
- Contact Phone: +(352)2060161020
- Website: www.grethenrenovation.com
2. Information We Collect
We collect several types of information from and about users of our Site, including:
A. Personal Data You Provide Directly
- Identity Data: First name, last name, title, date of birth, and company name (if applicable).
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Bank account details and payment card details (processed securely by our payment gateways).
- Transaction Data: Details about payments to and from you, and other details of products and services you have purchased from us.
- Profile Data: Your username, password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Communications Data: Your preferences in receiving marketing from us and your communication preferences, as well as records of any correspondence when you contact customer support.
B. Automated Data Collection (Cookies and Tracking)
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site.
- Usage Data: Information about how you use our website, products, and services, including page response times, download errors, length of visits to certain pages, and page interaction information.
3. How and Why We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:
A. Performance of a Contract
- Order Processing: To process and deliver your orders, manage payments, fees, and charges, and collect money owed to us.
- Account Management: To register you as a new customer and manage your online account.
- Customer Support: To notify you about changes to our terms or privacy policy, and to assist you with any product or service inquiries.
B. Consent
- Marketing Communications: To send you newsletters, promotional offers, and updates about new arrivals if you have explicitly opted in to receive them. You can withdraw your consent at any time.
C. Legitimate Interests
- Fraud Prevention: To protect our website, business, and customers from fraudulent activities and cyber threats.
- Website Improvement: To administer and protect our business and this Site (including troubleshooting, data analysis, testing, system maintenance, and support).
- Customer Insights: To use data analytics to improve our website, products, marketing, customer relationships, and experiences.
D. Compliance with Legal Obligations
- Tax and Accounting: To keep financial records in compliance with Luxembourgish statutory tax obligations.
- Legal Claims: To comply with legal requests from authorities or defend our legal rights.
4. Legal Basis for Processing (GDPR Compliance)
| Processing Activity | Type of Data | Legal Basis for Processing |
|---|---|---|
| Registering you as a customer | Identity, Contact | Performance of a contract |
| Processing and delivering orders | Identity, Contact, Financial, Transaction | Performance of a contract |
| Managing payments and collecting debt | Identity, Contact, Financial, Transaction | Performance of a contract / Legitimate interests |
| Notifying you about policy changes | Identity, Contact, Profile | Compliance with a legal obligation |
| Administering and protecting the Site | Identity, Contact, Technical | Legitimate interests (running our business, IT security) |
| Delivering relevant website content | Identity, Contact, Profile, Usage, Technical | Legitimate interests (studying customer habits, growing business) |
| Sending marketing materials | Identity, Contact, Marketing and Communications | Explicit Consent (can be withdrawn anytime) |
5. Sharing and Disclosure of Your Personal Data
We do not sell, rent, or trade your personal data to third parties. We may share your personal data with selected third parties who perform services on our behalf to operate our e-commerce platform:
- Service Providers: IT and system administration service providers, web hosting platforms, and e-commerce infrastructure management tools.
- Payment Processors: Trusted third-party payment gateways to handle secure financial transactions. We do not store full credit card information on our servers.
- Logistics and Delivery Partners: Courier services, shipping companies, and postal services required to deliver physical goods to your address.
- Professional Advisers: Lawyers, bankers, auditors, and insurers providing consultancy, legal, banking, insurance, and accounting services.
- Regulatory and Legal Authorities: Government bodies, tax authorities, or law enforcement agencies when required by applicable laws in Luxembourg or the European Union.
All third parties are contractually obligated to respect the security of your personal data, treat it in accordance with GDPR standards, and use it only for specified purposes in accordance with our instructions.
6. International Data Transfers
The personal data we collect is primary stored and processed within the European Economic Area (EEA). However, some of our third-party service providers may be located outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- We use specific Standard Contractual Clauses (SCCs) approved by the European Commission which give personal data the same protection it has in Europe.
7. Data Security
We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.
- Encryption: All data transmitted to and from our Site is encrypted using Secure Socket Layer (SSL/TLS) technology.
- Access Control: Access to your personal data is strictly limited to employees, agents, contractors, and other third parties who have a legitimate business need to know.
- Breach Procedures: We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Order and Transaction Data: Retained for up to 10 years to comply with Luxembourgish commercial and tax law retention requirements.
- Account Data: Retained for the duration of your active account relationship with us.
- Marketing Data: Retained until you withdraw your consent or unsubscribe from our mailing list.
9. Your Legal Rights Under the GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any incomplete or inaccurate data we hold about you.
- Right to Erasure (“Right to be Forgotten”): You have the right to ask us to delete personal data where there is no good reason for us continuing to process it, subject to legal retention obligations.
- Right to Restrict Processing: You have the right to ask us to suspend the processing of your personal data in certain scenarios (e.g., verifying data accuracy).
- Right to Data Portability: You can request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where we are relying on a legitimate interest or using it for direct marketing.
- Right to Withdraw Consent: If we rely on your consent to process data (such as marketing), you can withdraw it at any time by clicking the “unsubscribe” link in emails or contacting us directly.
If you wish to exercise any of these rights, please contact us at bramblek@grethenrenovation.com. We aim to respond to all legitimate requests within one month.
Right to Lodge a Complaint
You also have the right to make a complaint at any time to the National Commission for Data Protection (CNPD), the Luxembourgish supervisory authority for data protection issues (Commission Nationale pour la Protection des Données, www.cnpd.lu). However, we would appreciate the chance to deal with your concerns before you approach the CNPD, so please contact us first.
10. Cookies Policy
Our Site uses cookies and similar tracking technologies to distinguish you from other users, provide core e-commerce functionalities, and analyze our traffic.
Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the operation of our website, enabling features like shopping carts, user login, and secure checkout.
- Analytical/Performance Cookies: Allow us to recognize and count visitors and see how they move around our website when using it. This helps us improve website design.
- Functionality Cookies: Used to recognize you when you return to our website, enabling personalized greetings or saved preferences.
- Targeting/Marketing Cookies: Record your visit, the pages you visited, and links followed to deliver advertisements relevant to your interests.
Managing Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this Site may become inaccessible or not function properly (such as retaining items in your shopping cart).
11. Third-Party Links
This Site may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
12. Children’s Privacy
Our website and e-commerce services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we discover that a child under 16 has provided us with personal data, we will delete it immediately. If you believe we might have any information from or about a child under 16, please contact us.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, operational needs, or legal requirements. Any changes we make will be posted on this page with an updated “Effective Date.” We encourage you to review this policy periodically to stay informed about how we protect your information.
14. How to Contact Us
If you have any questions, feedback, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us through any of the following methods:
- Email: bramblek@grethenrenovation.com
- Postal Address: Grethen Renovation Sàrl, 2 ZI Rolach, L-5280 Sandweiler, Luxembourg
- Phone Number: +(352)2060161020