Privacy Policy
Only the French version is legally binding; other versions serve for reference purposes only.
We take the privacy and confidentiality of the data we process in the course of our activities very seriously.
Our privacy policy applies to visitors of our website, lesthermes.net.
If you subscribe to our newsletter, we record your email address and IP address.
Data Controller
The data controller refers to the entity responsible for how personal data is and will be processed, transmitted, and stored.
The website publisher also acts as the data controller:
C.N.I. LES THERMES
Rue des Thermes
L-8018 Strassen
Commercial Register Number: not available (intermunicipal syndicate)
VAT Number: LU19559259
The data controller can be contacted by phone at (+352) 27 03 00 27 or by email: [email protected].
Personal Data Collected
Technical Data
When you browse our website, we may process certain technical data:
- Type and version of the browser and screen resolution
- Operating system and type of device (computer, mobile, tablet)
- Session statistics
- Navigation flows and clicks
- IP address
This data is stored anonymously and does not allow us to identify you.
Newsletter
If you register for the newsletter, your e-mail and IP address are saved.
Online Orders
When placing an order in our online shop, we collect personal data:
- First and last name
- Gender
- Company
- Address
- Country
- Email address
- Phone number
- Custom message
- Default language
- Ordered products
- Delivery address
- Payment method
These data are stored by the data controller for a duration of 10 years. Some of the data are transmitted to other service providers to ensure the execution of the order (e.g., online payment system provider, carrier, etc.). The retention period for your data may vary by provider, and the data are subject to the privacy policies of the different providers. All providers are located within the territory of the Grand Duchy of Luxembourg.
Online Shop User Account
It is mandatory to create a user account to place an order in our online shop. During the creation of a user account, we collect the following personal data:
- First and last name
- Gender
- Company
- Address
- Email address
- Phone number
- Password
These details are necessary to identify you in our system and to secure access to your user account.
Collection of Your Personal Data
We collect personal data that you voluntarily provide to us, for example, by subscribing to our newsletter, filling out contact forms, and sending us emails.
We also collect data from your use of the website and its services when you visit web pages and fill out forms.
Use of Your Personal Data
A cookie is a small text file placed on your device (computer, mobile, tablet) when you visit a website. This cookie allows the device to be recognized each time the website is visited during the validity period of the cookie.
We use several types of cookies:
- NECESSARY COOKIES
These cookies are essential for navigating the website. If these cookies are blocked by the browser, you may not be able to enjoy certain features of the site. These cookies are sent exclusively by our website. - PREFERENCE COOKIES
These cookies help to enhance and optimize the functionality of the website by offering personalized features (e.g., displayed language preference). If these cookies are blocked by the browser, you may not be able to enjoy personalized features. These cookies are sent by our website and third parties. Please refer to the list of subcontractors at the bottom of this page to know which types of cookies are sent by third parties. - ANALYTICAL COOKIES
These cookies allow us to generate usage statistics for our website. These data are essential for improving our website. We assume that we have a legitimate interest in sending analytical cookies and that your prior consent is not required.
- COOKIE OPT-OUT
Some of our providers offer "opt-out" solutions that allow you to block the tracking of their services:
- Doubleclick
- Google Analytics Most internet browsers can be configured to warn users of cookie placement attempts or to limit the type of cookies they accept. Please refer to your browser's help section to find out what options your browser offers.
Legal Bases
We collect personal data on the following bases:
- For the preparation and execution of service contracts
- To adapt and improve our offer
- To comply with legal obligations
- For our legitimate interest
- To defend our interests in legal proceedings
- For commercial purposes if we have received your consent
Duration of Personal Data Storage
We do not retain personal data longer than necessary to achieve the specific purposes for which the information was collected.
Personal data are kept for an appropriate duration for each type of data. These retention periods may vary depending on the purpose of data collection:
- Legal and contractual retention obligations
- Prescription periods during which the concerned individuals can assert their rights in court against our company
- Best practices
- The commercial objectives of our company The maximum retention period for personal data is 10 years.
Protection of Your Personal Data
We use various technical and organizational measures to protect your personal data from unauthorized disclosure.
Sharing with Third Parties and Data Storage Countries
We may share data internally for organizational reasons and with various providers according to the contractual provisions in force with them.
Some personal data are transferred to subcontractors under subcontracting contracts. The subcontractors have confirmed as of 25.05.2018 to process the data entrusted to them in accordance with the GDPR (General Data Protection Regulation).
- Name and address of the provider
- Country of data storage
- Type of service
- Data concerned
Your Rights
In accordance with Regulation (EU) 2016/679 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data, you have the right to access, correct, and possibly delete the information concerning you. You also have the right to withdraw your consent at any time and, for legitimate reasons, the right to object to the processing of your data.
Please note that some of the rights mentioned above may be limited when we have a superior interest or a legal obligation to continue processing the data.
If you wish to exercise these rights, please contact the data controller using the contact details provided above on this page.
You also have the option to lodge a complaint with the National Commission for Data Protection, located at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette.
Collection of Your Personal Data
We collect personal data that you voluntarily provide to us, for example, by subscribing to our newsletter, filling out contact forms, and sending us emails.
We also collect data from your use of the website and its services when you visit web pages and fill out forms.
Use of Your Personal Data
A cookie is a small text file placed on your device (computer, mobile, tablet) when you visit a website. This cookie allows the device to be recognized each time the website is visited during the validity period of the cookie.
We use several types of cookies:
- NECESSARY COOKIES
These cookies are essential for navigating the website. If these cookies are blocked by the browser, you may not be able to enjoy certain features of the site. These cookies are sent exclusively by our website. - PREFERENCE COOKIES
These cookies help to enhance and optimize the functionality of the website by offering personalized features (e.g., displayed language preference). If these cookies are blocked by the browser, you may not be able to enjoy personalized features. These cookies are sent by our website and third parties. Please refer to the list of subcontractors at the bottom of this page to know which types of cookies are sent by third parties. - ANALYTICAL COOKIES
These cookies allow us to generate usage statistics for our website. These data are essential for improving our website. We assume that we have a legitimate interest in sending analytical cookies and that your prior consent is not required.
- COOKIE OPT-OUT
Some of our providers offer "opt-out" solutions that allow you to block the tracking of their services:
- Doubleclick
- Google Analytics Most internet browsers can be configured to warn users of cookie placement attempts or to limit the type of cookies they accept. Please refer to your browser's help section to find out what options your browser offers.
Legal Bases
We collect personal data on the following bases:
- For the preparation and execution of service contracts
- To adapt and improve our offer
- To comply with legal obligations
- For our legitimate interest
- To defend our interests in legal proceedings
- For commercial purposes if we have received your consent
Duration of Personal Data Storage
We do not retain personal data longer than necessary to achieve the specific purposes for which the information was collected.
Personal data are kept for an appropriate duration for each type of data. These retention periods may vary depending on the purpose of data collection:
- Legal and contractual retention obligations
- Prescription periods during which the concerned individuals can assert their rights in court against our company
- Best practices
- The commercial objectives of our company The maximum retention period for personal data is 10 years.
Protection of Your Personal Data
We use various technical and organizational measures to protect your personal data from unauthorized disclosure.
Sharing with Third Parties and Data Storage Countries
We may share data internally for organizational reasons and with various providers according to the contractual provisions in force with them.
Some personal data are transferred to subcontractors under subcontracting contracts. The subcontractors have confirmed as of 25.05.2018 to process the data entrusted to them in accordance with the GDPR (General Data Protection Regulation).
- Name and address of the provider
- Country of data storage
- Type of service
- Data concerned
Your Rights
In accordance with Regulation (EU) 2016/679 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data, you have the right to access, correct, and possibly delete the information concerning you. You also have the right to withdraw your consent at any time and, for legitimate reasons, the right to object to the processing of your data.
Please note that some of the rights mentioned above may be limited when we have a superior interest or a legal obligation to continue processing the data.
If you wish to exercise these rights, please contact the data controller using the contact details provided above on this page.
You also have the option to lodge a complaint with the National Commission for Data Protection, located at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette.
Secure payment method
