Privacy Policy

With this privacy policy, we would like to inform you about the nature, scope, and purpose of the processing of personal data on our website. Personal data is any data that has a personal reference to you, e.g. name, address, email address, or user behavior.

Who is responsible for data processing

The party responsible for data processing is:

KABEMEWA
1-3, Grand Rue
L-6630 Wasserbillig
Tel. +352 74 00 16 – 210
info@kabemewa.lu

Web Hosting

We use the services of an external Internet service provider to host our online presence. Our website is stored on the provider's servers (hosting) and made accessible on the Internet through them. In this context, the provider processes contact data, content data, contract data, usage data, inventory data, as well as metadata and communication data on our behalf.

Name and address of the Internet service provider: Keyweb AG, Neuwerkstraße 45/46, D-99084 Erfurt, Germany. The provider's servers are located in Germany (EU). You can view its privacy policy here: https://www.keyweb.de/en/data-privacy.

Legal basis: The engagement of the Internet service provider as a processor is governed by a data processing agreement in accordance with Art. 28 GDPR. The underlying processing of the data itself is carried out based on our legitimate interest in the efficient and secure provision of our online services pursuant to Art. 6 (1) (f) GDPR.

If you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we (via our Internet service provider) only collect the personal data that your browser transmits to the provider's server. This includes the following data:

  • IP address
  • The date and time of access to our website
  • Time zone difference to Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • The amount of data transferred
  • The Internet service provider of the accessing system
  • The browser type and version you use
  • The operating system you use
  • The website from which you may have accessed our website
  • The pages or subpages that you visit on our website.

The above-mentioned data is stored as log files on the servers of our Internet service provider. This is necessary to display the website on the device you use and to ensure the stability and security of our website. These purposes constitute our legitimate interest in the data processing.

Legal basis: Data processing is carried out based on our legitimate interest in the efficient and secure provision of our online services pursuant to Art. 6 (1) (f) GDPR.

Retention period: The above-mentioned data required to provide our website is stored for a period of 7 days and then deleted.

Right to object: Insofar as this processing is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, pursuant to Art. 21 GDPR — see the section on your data protection rights in this privacy policy for details.

Cloudflare

We use the performance and security service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, on our website.

Cloudflare is used to optimize the loading times of our website and to enhance its security. For this purpose, we use Cloudflare as a Content Delivery Network (CDN). A CDN is a network of regionally distributed servers connected via the Internet. It provides scalable storage and content delivery capacity. This ensures optimal data throughput even during periods of high traffic. User requests to our website are initially routed through Cloudflare servers in the USA. Statistics are generated from these data streams. This enables us to detect potential threats to our website caused by malware at an early stage and optimize loading times. We have concluded a data processing agreement with Cloudflare under which Cloudflare is authorized and obliged to evaluate the collected information and prepare statistical reports for us regarding the nature and scope of website usage. These statistics allow us to continuously improve our services, carry out cost-benefit analyses of our online marketing, and make our website more attractive and user-friendly for visitors. Legal basis: We use Cloudflare based on our legitimate interest in the efficient and secure provision of our online services pursuant to Art. 6 (1) (f) GDPR. Deletion: The collected data is automatically deleted by Cloudflare after 4 hours.

Third-party provider information:

Information about our contact options

If you contact us by email, social media, telephone, fax, mail, our contact form, or otherwise, and provide us with personal data such as your name, telephone number, or email address, or provide further information about yourself or your request, this data will be stored and further processed by us in order to handle your request. Legal basis: If you submitted your request via our contact form, the legal basis for processing your data is Art. 6 (1) (a) GDPR. If you submit your request in the context of a contractual or pre-contractual relationship with us, the legal basis for processing your data is Art. 6 (1) (b) GDPR. If your request does not fall under one of the aforementioned categories, our legitimate interest in processing your data lies in responding to your request properly and in your interest, Art. 6 (1) (f) GDPR. Deletion: The personal data we collect is deleted once it is no longer required. We review the necessity every 2 years. You may also withdraw your consent to the data processing at any time.

Your rights under the GDPR

Under the GDPR, you have the rights listed below, which you can assert at any time against the controller named in section 1 of this privacy policy:

  • Right of access: Under Art. 15 GDPR, you may request confirmation as to whether and which personal data we process about you. In addition, you may request free-of-charge information from us about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, and the origin of your data if it was not collected from you. You are also entitled to information as to whether your personal data has been transferred to a third country or to an international organization. If so, you have the right to obtain information about the appropriate safeguards in connection with the transfer.
  • Right to rectification: Under Art. 16 GDPR, you may request the rectification of inaccurate or the completion of incomplete personal data stored about you.
  • Right to erasure: Under Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless we require the processing for the following purposes:
    • to comply with a legal obligation,
    • to assert, exercise, or defend legal claims,
    • to exercise the right of freedom of expression and information, or
    • for reasons of public interest as set out in Art. 17 (3) (c) and (d) GDPR.
  • Right to restriction: Under Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if
    • you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data,
    • the processing of your data is unlawful and you oppose its erasure and instead request the restriction of its use,
    • we no longer need the personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims,
    • you have objected to the processing of your data pursuant to Art. 21 GDPR, pending verification whether our legitimate grounds override yours.
  • Right to be informed: If you have exercised the right to rectification, erasure, or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of the rectification, erasure, or restriction of processing you requested, unless this proves impossible or involves disproportionate effort. You have the right to be informed by us of these recipients.
  • Right to data portability: Under Art. 20 GDPR, you may request that we provide the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or request its transfer to another controller.
  • Right to lodge a complaint: Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority of your habitual residence, place of work, or our registered office.

Right to withdraw consent

Under Art. 7 (3) GDPR, you have the right to withdraw your consent to the processing of your data at any time. Your withdrawal does not affect the lawfulness of the processing carried out based on your consent before its withdrawal.

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data carried out on the basis of a balancing of interests (Art. 6 (1) (f) GDPR). This applies in particular where the processing is not necessary for the performance of a contract. Should you exercise your right to object, we ask that you explain your reasons. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests and rights.

Regardless of the foregoing, you have the right at any time to object to the processing of your personal data for the purposes of advertising and data analysis. Please send your objection to the contact address of the controller given above.

Google Maps

We use components of "Google Maps" on our website, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google").

Google Maps is used to visually display geographic information. In doing so, Google collects and processes the visitor's IP address. This is transmitted to Google regardless of whether you actually use Google Maps or are logged into your Google account. Your IP address is linked to your Google account if you are logged in when visiting our website. This data is transferred to external Google servers in the USA. Google is certified under the EU-U.S. Data Privacy Framework (DPF); the transfer is based on the adequacy decision of the European Commission of 10 July 2023 pursuant to Art. 45 GDPR. Google may pass on the data collected through this technical process to third parties under certain circumstances. Purpose: The integration of Google Maps serves to simplify visualization and navigation for visits to our location. Google's data processing takes place for the purposes of advertising, market research, website design, and the provision of tailored advertising. Legal basis: We use Google Maps based on our legitimate interest in optimizing and designing our online services, Art. 6 (1) (f) GDPR. Prevention: You can prevent the association of the data by refraining from using Google Maps on our website and logging out of your Google account before your visit. You can also disable JavaScript in your browser to prevent the map from being displayed. We also refer to Google's privacy policy at the following link http://www.google.com/intl/de_de/help/terms_maps.html

Third-party provider information:

EU headquarters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google (Invisible) reCAPTCHA

We use "Google (Invisible) reCAPTCHA" on our website, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This service allows us to check whether certain actions or entries are made by a human or are being carried out abusively by a bot, i.e. through an automated process by a computer. For this purpose, Google (Invisible) reCAPTCHA processes information about your user behavior on our website. In addition, your IP address is transmitted to a Google server. Google (Invisible) reCAPTCHA uses, among other things, cookies (see the term above under the "Cookies" heading), which are stored in your browser's cache and enable an analysis of your use of our website. Further information on the type and manner of data collection and processing can be found in Google's privacy notices, which you can access here: http://www.google.de/intl/de/policies/privacy/. Purpose: The purpose of our use of the service lies in the aforementioned interests. Legal basis: We use Google (Invisible) reCAPTCHA based on our legitimate interest in the secure and efficient provision as well as the optimization of our online services, Art. 6 (1) (f) GDPR. Prevention: For the use and prevention of cookies, please refer to the information given above under the heading "Cookies." If you are not logged into your Google account when accessing our site, the IP address transmitted to Google via the service will not be combined with other Google data. You must therefore log out of Google before visiting our site if you want to prevent your IP address from being combined with other data. Google is certified under the EU-U.S. Data Privacy Framework (DPF). Data transfers to Google in the USA are therefore based on the adequacy decision of the European Commission of 10 July 2023 pursuant to Art. 45 GDPR. Further information is available at https://www.dataprivacyframework.gov/ and on Google's data transfer frameworks page: https://policies.google.com/privacy/frameworks.

Third-party provider information:

EU headquarters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Our social media presence

We maintain online profiles on the social networks listed below. If you visit one of these profiles, your usage data will be collected and processed by the respective provider. This is generally done through cookies stored on the device you use. See the term "cookie" above under the corresponding heading. Cookies are used to store your usage behavior and interests and to create corresponding user profiles. Data may also be stored in these user profiles independently of the device you use. This is particularly the case if you are a member of the respective platform and are logged in.

You can find out for what purpose and to what extent data is collected by the provider in the respective privacy policies of the providers set out below. We ourselves have no influence over what data is collected and how it is used by the provider. If you wish to request detailed information or exercise your data subject rights, you can do so most effectively directly with the respective provider, as only the respective provider has access to your data.

We would like to point out that your user data may be transferred and processed outside the European Union. In this case, there is a risk that the enforcement of your data subject rights may be more difficult. Those US providers certified under the EU-U.S. Data Privacy Framework (DPF) base their data transfers on the corresponding adequacy decision of the European Commission pursuant to Art. 45 GDPR. You can check whether the respective provider is currently certified via the official participant list at https://www.dataprivacyframework.gov/; corresponding information can also be found in the details of the providers listed below.

Legal basis: If you have been asked by one of the providers named below for consent to the data processing, the legal basis for the processing is Art. 6 (1) (a) GDPR. Otherwise, the processing of your data is based on our legitimate interest in engaging with you and communicating with you, Art. 6 (1) (f) GDPR. Prevention: For the respective opt-out options, please refer to the linked information from the providers below.

We maintain online profiles on the following social networks:

Facebook

Facebook is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 – USA.

EU headquarters: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland

Security measures

We also take technical and organizational security measures in accordance with the state of the art in order to comply with data protection law requirements and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

Validity and amendments to this Privacy Policy

This privacy policy is currently valid and has the status of September 2026. Due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.

This privacy policy was created with the help of SOS Recht. You can find the privacy policy generator here. SOS Recht is an offering of the Mueller.legal law firm partnership based in Berlin.