Privacy policy

The controller for the processing of personal data on this website is Lux VR States Sàrl-S (trade name DEEV Sourcing), 17 Rue de Sélange, L-4965 Clemency, Luxembourg, RCS B266033. Contact: deev@luxvrstates.com, +352 691 388 887.

Price check and contact forms: name, company, email address, phone number (optional), country, preferred language, the details of your request (product, quantities, prices, delivery month, message) and any files you upload.

Technical data: when you visit the website, our hosting provider processes technical data such as your IP address, browser type and the time of access to deliver the website and keep it secure. To prevent abuse of our forms, we store a pseudonymised (hashed) form of your IP address for a short period.

Analytics: we use privacy-friendly analytics without cookies and without personal profiles. We only count page views and events, for example that a price check was submitted, with the industry and a quantity range. TODO: name the analytics provider once chosen.

We use your form data to answer your request and to prepare an offer (Art. 6(1)(b) GDPR, steps taken at your request prior to entering into a contract). Your consent in the form confirms that we may use your information for this purpose.

We process technical data and the pseudonymised IP address to operate the website securely and to prevent spam and abuse (Art. 6(1)(f) GDPR, legitimate interest).

We use the following service providers, bound by data processing agreements: Vercel Inc. (website hosting), Supabase (database and file storage in the EU), and an email service provider to send notifications and confirmations. TODO: name the email provider and confirm data processing agreements.

Where a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses. TODO: confirm per provider.

If we ask manufacturers for quotes, we share the product details of your request, not your contact details, unless you agree otherwise.

We keep enquiries and uploaded files for 24 months after our last contact with you, then delete them, unless a contract is concluded or a legal retention obligation applies. Pseudonymised IP addresses used for abuse prevention are deleted after 24 hours.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, write to deev@luxvrstates.com.

You also have the right to lodge a complaint with the Luxembourg data protection authority: Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.

We do not use automated decision-making or profiling.