Privacy Policy

Last updated: June 2026 — pursuant to Regulation (EU) 2016/679 (GDPR) and the Luxembourg Act of 1 August 2018 on the organisation of the National Commission for Data Protection

1. Controller

2. What Data We Collect and Why

2.1 Server Access Logs

When you visit this website, our web server automatically logs:

• IP address (anonymised after 24 hours)
• Date and time of the request
• Page requested and HTTP status code
• Browser type and operating system (user agent string)

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in website security and technical operation.
Retention: Raw access logs are deleted after a maximum of 7 days.

2.2 Email Contact

If you contact us by email, your email address, name (if provided), and the content of your message are stored. This data is used solely to respond to your enquiry and, if applicable, to prepare or fulfil a contract.

Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures / performance of a contract; or Art. 6(1)(f) GDPR — legitimate interest in responding to enquiries.
Retention: Email correspondence is retained for the duration of the business relationship and for 10 years thereafter in accordance with Luxembourg commercial law (Art. 16 Code de Commerce).

3. No Cookies, No Analytics

This website does not use cookies of any kind. There is no analytics tracking (no Google Analytics, no Matomo, no similar tools). No data is shared with third parties for advertising or tracking purposes.

4. No Third-Party Services

This website does not embed content from third-party providers (no Google Fonts, no CDN scripts, no social media widgets). All assets are served from our own infrastructure.

5. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — you may request confirmation of whether we process your data and obtain a copy.
• Right to rectification (Art. 16 GDPR) — you may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — you may request deletion of your data where no legal obligation requires retention.
• Right to restriction of processing (Art. 18 GDPR) — you may request that we limit how your data is used.
• Right to data portability (Art. 20 GDPR) — you may request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR) — you may object to processing based on legitimate interest.

To exercise any of these rights, contact us at: sascha.busser@busser.lu

6. Right to Lodge a Complaint

You have the right to lodge a complaint with the Luxembourg supervisory authority:

7. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available at www.busser.lu/en/privacy/.