Privacy Policy
Only the French version is legally binding; other versions serve for reference purposes only.
We take the privacy and confidentiality of the data we process in the course of our activities very seriously.
Our privacy policy applies to visitors of our website, lesthermes.net.
If you subscribe to our newsletter, we record your email address and IP address.
Data Controller
The data controller refers to the entity responsible for how personal data is and will be processed, transmitted, and stored.
The website publisher also acts as the data controller:
C.N.I. LES THERMES
Rue des Thermes
L-8018 Strassen
Commercial Register Number: not available (intermunicipal syndicate)
VAT Number: LU 33 55 99 69
The data controller can be contacted by phone at (+352) 27 03 00 27 or by email: [email protected].
Personal Data Collected
Technical Data
When you browse our website, we may process certain technical data:
- Type and version of the browser and screen resolution
- Operating system and type of device (computer, mobile, tablet)
- Session statistics
- Navigation flows and clicks
- IP address
This data is stored anonymously and does not allow us to identify you.
Newsletter
If you register for the newsletter, your e-mail and IP address are saved.
Online Orders
When placing an order in our online shop, we collect personal data:
- First and last name
- Gender
- Company
- Address
- Country
- Email address
- Phone number
- Custom message
- Default language
- Ordered products
- Delivery address
- Payment method
These data are stored by the data controller for a duration of 10 years. Some of the data are transmitted to other service providers to ensure the execution of the order (e.g., online payment system provider, carrier, etc.). The retention period for your data may vary by provider, and the data are subject to the privacy policies of the different providers. All providers are located within the territory of the Grand Duchy of Luxembourg.
Online Shop User Account
It is mandatory to create a user account to place an order in our online shop. During the creation of a user account, we collect the following personal data:
- First and last name
- Gender
- Company
- Address
- Email address
- Phone number
- Password
These details are necessary to identify you in our system and to secure access to your user account.
Collection of Your Personal Data
We collect personal data that you voluntarily provide to us, for example, by subscribing to our newsletter, filling out contact forms, and sending us emails.
We also collect data from your use of the website and its services when you visit web pages and fill out forms.
Use of Your Personal Data
A cookie is a small text file placed on your device (computer, mobile, tablet) when you visit a website. This cookie allows the device to be recognized each time the website is visited during the validity period of the cookie.
We use several types of cookies:
- NECESSARY COOKIES
These cookies are essential for navigating the website. If these cookies are blocked by the browser, you may not be able to enjoy certain features of the site. These cookies are sent exclusively by our website. - PREFERENCE COOKIES
These cookies help to enhance and optimize the functionality of the website by offering personalized features (e.g., displayed language preference). If these cookies are blocked by the browser, you may not be able to enjoy personalized features. These cookies are sent by our website and third parties. Please refer to the list of subcontractors at the bottom of this page to know which types of cookies are sent by third parties. - ANALYTICAL COOKIES
These cookies allow us to generate usage statistics for our website. These data are essential for improving our website. We assume that we have a legitimate interest in sending analytical cookies and that your prior consent is not required.
- COOKIE OPT-OUT
Some of our providers offer "opt-out" solutions that allow you to block the tracking of their services:
- Doubleclick
- Google Analytics Most internet browsers can be configured to warn users of cookie placement attempts or to limit the type of cookies they accept. Please refer to your browser's help section to find out what options your browser offers.
Legal Bases
We collect personal data on the following bases:
- For the preparation and execution of service contracts
- To adapt and improve our offer
- To comply with legal obligations
- For our legitimate interest
- To defend our interests in legal proceedings
- For commercial purposes if we have received your consent
Duration of Personal Data Storage
We do not retain personal data longer than necessary to achieve the specific purposes for which the information was collected.
Personal data are kept for an appropriate duration for each type of data. These retention periods may vary depending on the purpose of data collection:
- Legal and contractual retention obligations
- Prescription periods during which the concerned individuals can assert their rights in court against our company
- Best practices
- The commercial objectives of our company The maximum retention period for personal data is 10 years.
Protection of Your Personal Data
We use various technical and organizational measures to protect your personal data from unauthorized disclosure.
Sharing with Third Parties and Data Storage Countries
We may share data internally for organizational reasons and with various providers according to the contractual provisions in force with them.
Some personal data are transferred to subcontractors under subcontracting contracts. The subcontractors have confirmed as of 25.05.2018 to process the data entrusted to them in accordance with the GDPR (General Data Protection Regulation).
- Name and address of the provider
- Country of data storage
- Type of service
- Data concerned
Your Rights
In accordance with Regulation (EU) 2016/679 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data, you have the right to access, correct, and possibly delete the information concerning you. You also have the right to withdraw your consent at any time and, for legitimate reasons, the right to object to the processing of your data.
Please note that some of the rights mentioned above may be limited when we have a superior interest or a legal obligation to continue processing the data.
If you wish to exercise these rights, please contact the data controller using the contact details provided above on this page.
You also have the option to lodge a complaint with the National Commission for Data Protection, located at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette.
Collection of Your Personal Data
We collect personal data that you voluntarily provide to us, for example, by subscribing to our newsletter, filling out contact forms, and sending us emails.
We also collect data from your use of the website and its services when you visit web pages and fill out forms.
Use of Your Personal Data
A cookie is a small text file placed on your device (computer, mobile, tablet) when you visit a website. This cookie allows the device to be recognized each time the website is visited during the validity period of the cookie.
We use several types of cookies:
- NECESSARY COOKIES
These cookies are essential for navigating the website. If these cookies are blocked by the browser, you may not be able to enjoy certain features of the site. These cookies are sent exclusively by our website. - PREFERENCE COOKIES
These cookies help to enhance and optimize the functionality of the website by offering personalized features (e.g., displayed language preference). If these cookies are blocked by the browser, you may not be able to enjoy personalized features. These cookies are sent by our website and third parties. Please refer to the list of subcontractors at the bottom of this page to know which types of cookies are sent by third parties. - ANALYTICAL COOKIES These cookies allow us to generate usage statistics for our website. These data are essential for improving our website. We assume that we have a legitimate interest in sending analytical cookies and that your prior consent is not required.
- COOKIE OPT-OUT
Some of our providers offer "opt-out" solutions that allow you to block the tracking of their services:
- Doubleclick
- Google Analytics Most internet browsers can be configured to warn users of cookie placement attempts or to limit the type of cookies they accept. Please refer to your browser's help section to find out what options your browser offers.
Legal Bases
We collect personal data on the following bases:
- For the preparation and execution of service contracts
- To adapt and improve our offer
- To comply with legal obligations
- For our legitimate interest
- To defend our interests in legal proceedings
- For commercial purposes if we have received your consent
Duration of Personal Data Storage
We do not retain personal data longer than necessary to achieve the specific purposes for which the information was collected.
Personal data are kept for an appropriate duration for each type of data. These retention periods may vary depending on the purpose of data collection:
- Legal and contractual retention obligations
- Prescription periods during which the concerned individuals can assert their rights in court against our company
- Best practices
- The commercial objectives of our company The maximum retention period for personal data is 10 years.
Protection of Your Personal Data
We use various technical and organizational measures to protect your personal data from unauthorized disclosure.
Sharing with Third Parties and Data Storage Countries
We may share data internally for organizational reasons and with various providers according to the contractual provisions in force with them.
Some personal data are transferred to subcontractors under subcontracting contracts. The subcontractors have confirmed as of 25.05.2018 to process the data entrusted to them in accordance with the GDPR (General Data Protection Regulation).
|
Provider name and address |
Country where data is stored |
Type of service |
Data concerned |
|
Amazon Web Services Inc via Fly.io & Tigris 410 Terry Avenue North Seattle, WA 98109-5210 USA |
Germany (Frankfurt) |
Website hosting |
All data provided by filling in the forms available on the site. |
| Adobe Systems Software Ireland Limited4-6 Riverwalk, City West Business CampusSaggart, Dublin 24, Ireland | EU member states & USA | Adobe Fonts | COOKIE: Technical browser data, IP address |
|
Cloudflare Inc 101 Townsend Street San Francisco, CA 94107 USA |
Storage is dynamic, depending on the site visitor's geographic location. Theoretically in every country worldwide. |
Cloud firewall, protection against malicious attacks, caching engine |
COOKIE: All data transferred between your browser and the website. |
|
CookieFirst by Digital Data Solutions B.V.Plantage Middenlaan 42a1018 DH Amsterdam KvK-number: 75762277 [email protected] |
EU member states | User cookie management | COOKIE: Technical browser data, IP address |
|
Cookiebot Cybot A/S Havnegade 391058 CopenhagenDenmark |
EU member states | User cookie management | COOKIE: Technical browser data, IP address |
|
Equalweb Menachem Begin 44,Kfar Yona, IsraelBureau secondaire (États-Unis) :447 Broadway, 2nd FL #239,New York, NY 10013, USA |
EU member states & USA | Accessibility widget, accessibility audit and monitoring according to WCAG & ADA standards | a) Non-personal data (anonymous, technical information such as browser type, operating system, browser version, screen resolution, usage data)b) Personal data collected when voluntarily provided by the user or site visitors (name, email address, phone number, data entered in contact or feedback forms via the EqualWeb widget) |
|
Fonticons Inc6 Porter Road Apartment 3R, Cambridge, MA 02140, USA |
USA | Font Awesome service (icons) | Font Awesome may collect technical data when loading resources (such as IP address, browser information and downloaded files). This data is used to optimize the service, diagnose errors, compile statistics, and protect the network. No additional personal data (such as name or email) is automatically collected via Font Awesome. |
|
Gantner Riske IT GmbH Pascal Riske Keldenicher Straße 2350389 Wesseling, Germany [email protected] |
Germany, Austria | Online payment | All customer data. |
|
Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 USA |
EU member states & USA |
Statistical analysis (Google Analytics), Google Fonts |
COOKIE: Page views, clicks, technical data of the browser and device used to connect to the site. |
|
PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, 2449 Luxembourg |
EU member states |
Online payment |
Data provided during online payment. |
|
Shopify International Ltd. Attn: Data Protection Officer c/o Intertrust Ireland 2nd Floor 1-2 Victoria Buildings Haddington Road Dublin 4, D04 XN32 Ireland |
EEA, United Kingdom | Online payment | All data related to the shop's customer account (name, address, payment methods...) |
Your Rights
In accordance with Regulation (EU) 2016/679 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data, you have the right to access, correct, and possibly delete the information concerning you. You also have the right to withdraw your consent at any time and, for legitimate reasons, the right to object to the processing of your data.
Please note that some of the rights mentioned above may be limited when we have a superior interest or a legal obligation to continue processing the data.
If you wish to exercise these rights, please contact the data controller using the contact details provided above on this page.
You also have the option to lodge a complaint with the National Commission for Data Protection, located at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette.
Secure payment method
