Privacy Policy

1. Controller

2. General Information

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Luxembourg Law of 1 August 2018. This statement informs you about the type, scope, and purpose of data processing on this website and about your rights as a data subject.

3. Collection and Purpose of Data Processing

a) When Visiting the Website (Server Log Files)

When you access our website, data is automatically processed: IP address, date/time of access, accessed pages/files, referrer URL, browser type and operating system. This processing ensures the technical operation, security, and stability of the website as well as administrative purposes. Legal basis: Article 6(1)(f) GDPR (legitimate interest in a secure and functional operation).

b) Contact (Email / Contact Form)

When you contact us, the personal data you provide (e.g. name, email, message content) is stored in order to process your inquiry and respond to follow-up questions. Legal basis: Article 6(1)(b) GDPR (pre-contractual or contractual measures) or Article 6(1)(a) GDPR (consent).

c) Newsletter

If offered, we process your email address for sending our newsletter. Consent may be revoked at any time, for example via the unsubscribe link. Legal basis: Article 6(1)(a) GDPR (consent).

d) Web Analytics / Statistics

If used, analytics services help measure website reach. Usage data is processed in a pseudonymised way; IP addresses are anonymised. Non-essential cookies or identifiers are only stored after your consent via the cookie banner. Consent can be withdrawn at any time. Legal basis: Article 6(1)(a) GDPR (consent) or, in the case of fully anonymised data, Article 6(1)(f) GDPR (legitimate interest).

4. Cookies and Similar Technologies

a) Technically Necessary Cookies

These cookies are essential for website operation and core functions (e.g. navigation, security) and cannot be disabled.

b) Non-Essential Cookies (e.g. Analytics / Marketing)

We only use these after your explicit consent via the cookie banner. You may withdraw consent at any time. You can also delete or block cookies through your browser settings, although this may limit certain website functions.

5. Recipients and Processors

We share data with service providers (e.g. hosting, IT support, newsletter delivery, analytics) exclusively based on data processing agreements under Article 28 GDPR. Data is only disclosed to third parties where a legal basis exists (consent, contract, legal obligation, or legitimate interest).

6. Data Transfers to Third Countries

If data processing occurs outside the EU / EEA, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses, adequacy decisions) and provide copies of such guarantees upon request.

7. Data Retention

We store personal data only for as long as necessary to achieve the respective purposes or as required by legal retention periods. Afterwards, data is deleted or anonymised. The criteria include purpose limitation, legal requirements, and technical necessity.

8. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests or direct marketing (Art. 21). Any consent given may be withdrawn at any time with future effect. To exercise your rights, please contact: info@maincontrol.lu. You also have the right to lodge a complaint with the supervisory authority:

9. Security

We apply technical and organisational measures to protect data against loss, misuse, and unauthorised access. Transmission is encrypted via TLS / SSL, and our security measures are regularly reviewed and updated.

10. Obligation to Provide Data

Providing certain data may be necessary for the operation of the website or for processing your request. Without such data, use of the site or processing of your request may be limited.

11. Automated Decision-Making / Profiling

No automated decision-making or profiling takes place. If this should change in the future, we will inform you in accordance with Articles 13 and 14 GDPR.

12. Changes to This Privacy Policy

We reserve the right to amend this statement to reflect legal or technical developments. The current version is always available here. Effective date: 15 October 2025.