Privacy

This page explains which data we use for reservations, orders and requests, why, for how long, and which rights you have.

Draft, to be checked by a lawyer

Controller

The controller is the store where you reserve, order or send a request. Who operates the website as a whole has not yet been decided. [missing]

Reservations

We use your first name, last name, email address, mobile number, the collection date you choose, your note and the reserved items. This lets the store keep the items for you and reach you if something goes wrong. The reservation is stored in the store's till system. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Online orders

We use your contact details, the delivery and billing address, the items ordered and the payment reference. Without these details we cannot fulfil the sales contract. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR); the store keeps receipts as required by law (point c). You enter your payment details only with the payment provider; we do not see them.

Requests

When you write to us via the contact form, we use your name, email address or phone number and your message to reply. The legal basis is your consent (Art. 6(1)(a) GDPR).

Who processes the data

• SoftTouch, provider of the stores' till system (Belgium)
• Supabase, database and server functions of this website (data centre in the EU)
• the payment provider for online orders [missing]
• the email delivery provider [missing]
• GitHub Pages, hosting of the pages

How long we keep data

• Reservations: 30 days after the collection date, then anonymised
• Orders: 90 days after completion, then anonymised; receipts are kept in the store's till system
• Requests: 12 months

A daily job anonymises and deletes the data after these periods. [to be confirmed]

No cookies, no tracking

This website sets no cookies and does not measure visits. Your basket and the chosen store are kept only in your browser (localStorage), because you use these functions. After an error in a form, your browser briefly keeps your entries (sessionStorage) so you do not have to type everything again. To protect against too many requests, your IP address is used only as a checksum and is not stored.

Links to other services

Fonts are hosted on this website, with no connection to Google. Links to Google Maps (“Get directions”), Facebook and Letzshop only open the service when you click them.

Maps from Google Maps

On the store pages you can load a map from Google Maps. Your browser only connects to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) when you click “Load map”. Google then receives, among other things, your IP address and the address of the page; Google may set cookies and transfer data to the USA. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR); it only applies to this page view. Without a click, nothing is sent to Google. Google Privacy Policy (opens another website)

Your rights

You can ask for access to your data, have it corrected, deleted or restricted, object to processing, ask for it to be transferred and withdraw consent at any time. Write to the store to do so. You can also complain to the CNPD, the data protection authority in Luxembourg. cnpd.public.lu (opens another website)