1. Overview and Data Controller

MENDES INSTAL CUISINES S. à r.l. (hereinafter referred to as “the Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Luxembourg data protection laws.

For the purposes of applicable data protection legislation, the data controller is:

• Company Name: MENDES INSTAL CUISINES S. à r.l.
• Registered Address: 12, Avenue Charlotte, 4530 Differdange, Luxembourg
• Commercial Register (RCS Luxembourg): B265446
• VAT Identification Number: LU38212666703
• Contact Email: [email protected]

2. Personal Data We Collect

We collect, process, and store personal information that you voluntarily provide to us when you interact with our website, request our services, or communicate with our team. This data includes:

• Identity and Contact Data: Full name, residential or operational address, email address, and telephone number.
• Transaction and Order Data: Details regarding the service packages selected, appointment schedules, billing details, and records of customer service correspondence.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform data collected through standard server logs and cookies.

3. Lawful Basis and Purpose of Processing

We process your personal data strictly under valid legal bases recognized by European data protection frameworks:

• Performance of a Contract: Processing is necessary for the execution of service agreements, processing online bookings, coordinating on-site scheduling, and managing order fulfillment.
• Legal Compliance: Processing is required to fulfill statutory accounting, taxation, and regulatory mandates imposed by Luxembourg law.
• Legitimate Interests: Processing is necessary for maintaining internal operational records, ensuring website security, and improving service quality without overriding your fundamental rights and freedoms.

4. Payment Processing and Financial Data Security

To facilitate secure online transactions and deposit collections, we utilize Stripe as our primary payment processing provider.

• Data Shared with Stripe: When you execute an online transaction, specific transactional data—including your name, billing address, card details, and purchase amount—is transmitted directly to Stripe, Inc. and its affiliated entities for payment authorization and fraud prevention.
• Compliance: Stripe processes your payment data in accordance with stringent international security standards (PCI-DSS). We do not store complete credit card numbers or sensitive authentication data on our internal servers. You are encouraged to review Stripe’s respective privacy policy regarding their independent data handling practices.

5. Data Retention Periods

In accordance with Luxembourg statutory requirements and European data governance guidelines, personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:

• Transactional and Accounting Records: In compliance with Luxembourg commercial and tax legislation (including the Luxembourg Commercial Code and VAT regulations), invoices, financial ledgers, and associated transaction data are retained for a mandatory period of 10 years following the end of the business year to which they relate.
• Customer Correspondence and Support Logs: General inquiries, communication records, and support tickets are retained for a period of 3 years following the final resolution of the inquiry, unless an ongoing contractual relationship requires extended archiving.
• Technical and Log Data: Website logs and analytical tracking data are retained for a maximum duration of 12 months, after which they are securely deleted or anonymized.

6. Data Subject Rights

Under the GDPR, individuals located within the European Economic Area possess specific rights regarding their personal data:

• Right of Access: You may request confirmation as to whether or not your personal data is being processed, along with copies of such data.
• Right to Rectification: You have the right to request the correction of inaccurate personal data or the completion of incomplete information.
• Right to Erasure: You may request the deletion of your personal data where the data is no longer necessary for the purposes for which it was collected, subject to statutory retention obligations.
• Right to Restriction of Processing: You may request the limitation of data processing under specific statutory conditions.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.

To exercise any of these rights, formal requests must be submitted in writing to our designated contact email: [email protected]. Furthermore, you retain the right to lodge a complaint with the national supervisory authority in Luxembourg, the Commission Nationale pour la Protection des Données (CNPD), if you believe your data protection rights have been infringed.

7. Updates to This Privacy Policy

We reserve the right to amend or update this privacy policy at any time to reflect operational modifications or changes in regulatory compliance requirements. Any revisions will be published directly on this website with an updated effective date.