Data controller

Concept & Design Electric Sàrl (CDEL), 32a, rue Michel Thilges, L-9573 Wiltz, Luxembourg. Questions about your data: info@cdel.lu or +352 28 79 68 98.

The data we receive

We only receive what you send us through the website:

• “Contact”, “Price request” and “Breakdown service” forms: first and last name, e-mail, phone and, depending on the form, company, address, postcode, town, subject, type of work, urgency, availability and your message; plus the website language, the page you sent it from, the date and your agreement (checkbox).
• Chat: first and last name, e-mail, phone if provided, your messages and our replies, the page you are writing from, your browser type and a truncated (anonymised) IP address.
• Technical data: to protect the website against abuse, your IP address is used to limit the number of submissions; it is not stored in our files. Our hosting provider also processes the connection data needed to run and secure the website.
• Visitor statistics (CDEL's own tool, no cookies): pages viewed, time spent, clicks on our phone, e-mail and WhatsApp links, form submissions, referring website and campaign parameters, device type (mobile, tablet, computer), country and region derived from the connection. Your IP address and browser are only used to compute an anonymous identifier valid for a single day; they are neither sent to CDEL nor stored. You can opt out by opening https://cdel.lu/en?cdel_stats=off once (and opt back in with ?cdel_stats=on).

The website uses no advertising, no third-party audience measurement tool and no social media trackers.

Why we use it

• To answer your request, prepare a quote, or organise a job or a breakdown call-out (pre-contractual steps taken at your request — Article 6(1)(b) GDPR).
• To keep the website secure and prevent abusive submissions (legitimate interest — Article 6(1)(f) GDPR).
• To measure website use anonymously and improve it (legitimate interest — Article 6(1)(f) GDPR).
• If your request leads to a contract, to meet our legal obligations, in particular accounting (Article 6(1)(c) GDPR).

We do not use your data for marketing without your consent, and we do not sell it.

Where your data goes

• Your requests and conversations are stored in CDEL's internal management software, on our server in Luxembourg. Only the CDEL staff who handle requests can access them.
• If our server is temporarily unreachable, an encrypted back-up copy of your request may be kept temporarily by a data hosting provider, in a region configured for our service, then forwarded automatically as soon as possible. This copy is deleted 7 days after CDEL has received it (at most 30 days in case of failure, for analysis).

Technical providers

To run the website we use the following providers, who only use your data on our behalf:

• Vercel Inc. (USA): website hosting and execution of its server functions (configured in the Frankfurt region). Vercel may process data within its international infrastructure.
• Neon (European Union, Frankfurt): temporary, encrypted storage of the back-up copy of a request when our server is unreachable.
• ngrok Inc. (USA): secure routing of the website's requests and messages to our server in Luxembourg.

Transfers outside the European Union are covered by the safeguards provided by the GDPR (European Commission standard contractual clauses or the EU-US Data Privacy Framework).

How long

• Contact, price and breakdown requests and chat conversations with no business relationship: the data is kept for 3 years from the closing of the request or the last contact with the person concerned, unless a legal obligation applies or it is needed to establish, exercise or defend legal claims.
• If your request leads to a contract: commercial and accounting records are kept for 10 years, as required by Luxembourg law.
• Encrypted back-up copy: 7 days after forwarding (at most 30 days in case of failure).
• Statistics: anonymous details are kept for 90 days, after which only daily totals without any identifier are kept.

Your rights

You may at any time request access to your data, its correction or deletion, restriction of its processing, object to its processing, or ask for data portability. Write to us at info@cdel.lu: we reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux — cnpd.public.lu.