PRIVACY POLICY – Arbre à Pain

This personal data protection policy applies to the website accessible at arbreapain.lu and is intended to provide you with transparent information on how we use your personal data.

Who is responsible for processing my data? Which departments are affected?

The company Arbre à Pain S.à r.l., whose registered office is at 151 Rte de Bascharage, 4513 Differdange, operates the website for information on the services offered, which can be accessed at arbreapain.lu. Arbre à Pain S.à r.l. is responsible for processing your data.

Your privacy is essential to Arbre à Pain S.à r.l.

This privacy policy informs you about the services concerned by the collection of your personal data.

How do we collect your data? What data is involved?

Data collected from the contact form

Data collected when you browse the arbreapain.lu website

We collect data of a technical nature when using our services which may include:

• your application or terminal identifiers (cookies),
• information about your source URLs,

• your IP address,
• the characteristics of the devices you use to access our services (device model, type of operating system, browser type and version, language used),
• the type of network connection you are using (Wi-Fi, 4G, Bluetooth, etc.),

How long do you keep my data?

The table below sets out the different lengths of time we keep your data:

What are my rights with regard to my data?

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• right of access (Article 15 GDPR), rectification (Article 16 GDPR), updating and completeness of your data
• the right to block or erase your personal data (Article 17 GDPR) if it is inaccurate, incomplete, ambiguous, out of date, or if its collection, use, communication or storage is prohibited

• the right to restrict the processing of your data (Article 18 GDPR)
• the right to object to the processing of your data (Article 21 GDPR)
• the right to portability of the data you have provided to us, where your data is subject to automated processing based on your consent or on a contract (Article 20 RGPD)

These rights may be exercised as described below.

Who will receive my data?

The recipients are the persons authorised to obtain communication of your data by virtue of their functions.

In the context of our activities, the services and invoicing of the company Arbre à Pain S.à r.l. are recipients of all categories of data.

The company‘s sub-contractors receive the identity, address and telephone number of our customers.

Can I have more information? Getting help?

If you have any questions regarding the processing of your data by Arbre à Pain S.à r.l., you can contact the Data Protection Officer in complete confidentiality at the following email address: info@arbreapain.lu

You also have the right to lodge a complaint with the Data Protection Authority under the conditions indicated on its website:
CNPD Public

How can I exercise my rights to my data?

You can exercise your other rights by email, specifying the right you wish to exercise in the subject line of your email: info@arbreapain.lu access, portability, limitation, opposition for reasons relating to your particular situation. Exercising your rights of access and portability requires the data for which you are exercising your rights to be linked to the email address used to make your request. A reply will be sent to you within 1 month of receipt of your request.