The controller of personal data collected on the fermelux.lu website is:
Fermelux S.à r.l.
Zone Industrielle Rolach, Hall 1, L-5280 Sandweiler, Luxembourg
Phone: +352 35 53 78
Email: contact@reparfermetures.lu
This privacy policy complies with Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018 on the protection of natural persons with regard to the processing of personal data.
We collect only data strictly necessary for the purposes described below. The categories of data concerned are:
Identification data: surname, first name, postal address, postcode, municipality.
Contact data: email address, landline or mobile phone number.
Project-related data: type of door, description of needs, photos possibly attached to the quote form.
Navigation data: IP address, browser type, pages viewed, date and time of visit (via cookies, see dedicated cookie policy).
No sensitive data within the meaning of Article 9 of the GDPR (health, origin, political opinions, etc.) is collected.
Your data is processed for the following purposes:
Responding to a quote or contact request (legal basis: performance of pre-contractual measures at your request — Art. 6.1.b GDPR).
Planning and carrying out a technical intervention (legal basis: performance of a contract — Art. 6.1.b GDPR).
Invoicing, accounting and tax obligations (legal basis: legal obligation — Art. 6.1.c GDPR).
Sending commercial information about our products and services (legal basis: explicit consent — Art. 6.1.a GDPR — which you may withdraw at any time).
Improvement of the website and anonymised audience statistics (legal basis: legitimate interest — Art. 6.1.f GDPR).
We retain your data for a period strictly proportionate to the purpose:
Quote request without follow-up: 3 years from the last contact (commercial prospecting).
Client having placed an order: 10 years from the end of the service (Luxembourg accounting and tax obligations).
Navigation data and cookies: 13 months maximum.
After these periods, your data is definitively deleted or anonymised.
Your personal data is intended exclusively for:
Fermelux internal teams in charge of processing your request, performing the service and providing after-sales support.
Our technical subcontractors strictly necessary for the operation of the website and our tools: hosting provider Vercel Inc. (United States, Data Privacy Framework), transactional email provider, invoicing software.
Competent authorities only upon legal requisition.
No sale, rental or commercial transfer of your data to third parties is carried out.
Certain technical subcontractors (hoster, analytics tools) may process your data from the United States. These transfers are framed by the appropriate guarantees provided for by the GDPR: Standard Contractual Clauses adopted by the European Commission and, where applicable, adherence to the EU–US Data Privacy Framework.
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
Right of access: obtain confirmation of the processing of your data and a copy thereof.
Right to rectification: have inaccurate or incomplete data corrected.
Right to erasure (right to be forgotten): request the deletion of your data in the cases provided for by law.
Right to restriction of processing in the cases provided for by law.
Right to portability: retrieve your data in a structured, commonly used and machine-readable format.
Right to object to processing for reasons relating to your particular situation.
Right to withdraw your consent at any time, without affecting the lawfulness of previous processing.
To exercise your rights, contact us at contact@reparfermetures.lu enclosing a copy of an identity document. We reply within a maximum of one month, in accordance with Article 12 of the GDPR.
If you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale pour la protection des données (CNPD) of Luxembourg:
15, boulevard du Jazz, L-4370 Belvaux
Phone: +352 26 10 60 1
Website: cnpd.public.lu
Fermelux implements appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access: HTTPS/TLS encryption, regular backups, access control, staff training in data protection.
This privacy policy may be amended at any time to reflect legal, technical or organisational developments. The date of the last update is indicated below. We invite you to consult it regularly.
Last updated: April 2026.