Privacy Policy

Last updated: October 2026 — pursuant to Regulation (EU) 2016/679 (GDPR) and the Luxembourg Act of 1 August 2018 on the organisation of the National Commission for Data Protection

1. Controller

2. What Data We Collect and Why

2.1 Server Access Logs

When you visit this website, our web server automatically logs:

• IP address (anonymised after 24 hours)
• Date and time of the request
• Page requested and HTTP status code
• Browser type and operating system (user agent string)

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in website security and technical operation.
Retention: Raw access logs are deleted after a maximum of 7 days.

2.2 Email Contact

If you contact us by email, your email address, name (if provided), and the content of your message are stored. This data is used solely to respond to your enquiry and, if applicable, to prepare or fulfil a contract.

Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures / performance of a contract; or Art. 6(1)(f) GDPR — legitimate interest in responding to enquiries.
Retention: Email correspondence is retained for the duration of the business relationship and for 10 years thereafter in accordance with Luxembourg commercial law (Art. 16 Code de Commerce).

2.3 Live Chat and Live Visitor View

This website offers a live chat with the operator (bottom right, “Sysop”). To help visitors directly, the operator sees in real time which pages of this website you open during your visit. The following data is processed:

• pages of this website you open, with title and time, the section of a page currently in view, and the referring website (without parameters)
• an activity status (whether there was recent input and whether the tab is in the foreground; no mouse movements, keystrokes or content are transmitted)
• browser and operating system type (user agent), browser language, time zone and screen size
• IP address and the country derived from it (looked up in a locally stored database, without passing data to third parties)
• chat messages, if you use the chat or page the operator

Live view (only with your consent): Only if you explicitly click “Allow” in the chat window can the operator see your view of this website live (page layout, scrolling, mouse position) in order to help you. Form inputs are masked; nothing is recorded or stored. While the live view is running, a clear notice at the top of the page shows it; “Stop” withdraws your consent at any time. Legal basis: Art. 6(1)(a) GDPR (consent).

Teleconference (group chat): If you join the teleconference, the name you choose and your messages are visible to all other participants of this website and to the operator. Please do not post personal data there. Messages are stored for 30 days; the operator can delete messages and mute or block participants. Legal basis: Art. 6(1)(f) GDPR.

No cookies are set. Only when you open the chat window is a random session identifier stored in your browser's session storage, so that the chat survives page changes; it is deleted when you close the tab. Notifications to the operator run through our own server; chat content is not passed to third parties.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in personal advice and support for visitors; for chat enquiries about services, additionally Art. 6(1)(b) GDPR.
Retention: The visitor log (page trail, IP address, country) and chat transcripts are deleted automatically after 30 days. The IP address also serves to prevent abuse (temporary blocks).

Objection: You can object to the live visitor view at any time. The following button switches it off for this browser (the setting is kept in your browser's local storage):

Turn off the live view for this browser

3. No Cookies, No Analytics

This website does not use cookies of any kind. There is no analytics tracking (no Google Analytics, no Matomo, no similar tools). No data is shared with third parties for advertising or tracking purposes. The live visitor view (section 2.3) serves direct contact only and is not analysed. The visit counter in the footer is anonymous: on the first page view of a visit a number is increased by one on the server, without storing an IP address or identifier; your browser's session storage only notes that the visit has already been counted. This entry is deleted when you close the tab.

4. No Third-Party Services

This website does not embed content from third-party providers (no Google Fonts, no CDN scripts, no social media widgets). All assets are served from our own infrastructure.

5. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — you may request confirmation of whether we process your data and obtain a copy.
• Right to rectification (Art. 16 GDPR) — you may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — you may request deletion of your data where no legal obligation requires retention.
• Right to restriction of processing (Art. 18 GDPR) — you may request that we limit how your data is used.
• Right to data portability (Art. 20 GDPR) — you may request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR) — you may object to processing based on legitimate interest.

To exercise any of these rights, contact us at: sascha.busser@busser.lu

6. Right to Lodge a Complaint

You have the right to lodge a complaint with the Luxembourg supervisory authority:

7. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available at www.busser.lu/en/privacy/.