Privacy Policy

The data controller for personal data collected via the Site is:

Asport I & W Sàrl

• Legal form: SARL
• Registered office: 4, rue du 22 mai, 2008 9099 Ingeldorf, Luxembourg
• Registered with the Luxembourg Trade and Companies Register (RCS) under number: RCS B101921
• Tax identification number (EUID/VAT): LURCSL.B101921

Contact details for data protection:

• Dedicated email address: web@asport.lu
• Phone: +352808423
• Postal address: 4, rue du 22 mai, 2008 9099 Ingeldorf, Luxembourg
• Data Protection Officer (DPO): N/A
• GDPR Representative: Raphael Lentzen

We collect and process your data for the following purposes, based on corresponding legal grounds:

3.1 Data Provided Voluntarily (Orders and Contact)

When you create an account, place an order, or contact our customer service, we collect:

• Name, first name, postal address, email address, phone number.
• Order history and product preferences.
• Payment data (managed by our secure payment processors; we do not store complete credit card numbers).

Purposes:

• Execution of sales contract (delivery, invoicing, returns management).
• Response to your information requests and customer service.
• Fraud prevention.
• Legal basis: Contract execution (Art. 6.1.b GDPR) and legal obligation (invoicing).

3.2 Data Collected Automatically (Navigation)

During your browsing on the Site, we automatically collect:

• IP address, browser type and version, operating system.
• Date and time of connection, pages viewed, time spent.
• Session identifiers (cookies).

Purposes:

• Ensure security, maintenance, and proper technical functioning of the Site.
• Analyze traffic to improve user experience (anonymized statistics).
• Legal basis: Legitimate interest of the data controller (Art. 6.1.f GDPR) for security and service improvement, and consent for non-essential cookies.

Your data is never sold to third parties. It may only be communicated to the following categories:

1. Internal Services: Authorized personnel of Asport I & W Sàrl (management, logistics, customer service).
2. Subcontractors (Technical Providers):
   • Hosting: Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). Note: Germany being in the EEA, no transfer outside the EU is necessary.
   • Payment processing: Stripe.
   • Analytics and marketing tools: Google Analytics
3. Public Authorities: Only if required by law (customs, tax, justice).

Transfers Outside the European Economic Area (EEA): If one of our subcontractors (e.g., for payment or analytics) is located outside the EEA, we ensure appropriate safeguards are implemented in accordance with Articles 44 and following of the GDPR, notably through the signing of Standard Contractual Clauses (SCCs) adopted by the European Commission.

In accordance with the storage limitation principle, your data is retained only for the duration necessary for the purposes for which it was collected:

• Account and order data: Retained for 10 years from the last order or account closure, to comply with legal obligations for commercial and fiscal document retention under Luxembourg law.
• Navigation data (Technical cookies): Retained for the duration of the session.
• Analytics/advertising cookies: Retained for a maximum of 13 months, in accordance with CNPD recommendations.
• Contact data (without order): Retained for 3 years after your last contact, unless you object.

After these periods, data is anonymized or securely deleted.

The Site uses cookies in accordance with the ePrivacy Directive and national regulations.

• Strictly necessary cookies: Placed without prior consent (e.g., shopping cart, authentication).
• Analytics and advertising cookies: Require your prior and explicit consent via our cookie management banner.

You may withdraw your consent at any time by modifying your preferences via the cookie banner or by configuring your browser settings. Note that refusing certain cookies may limit access to certain Site features.

The data controller implements appropriate technical and organizational measures (encryption, restricted access, backups) to guarantee a level of security adapted to the risk, notably against accidental destruction, loss, alteration, or unauthorized disclosure of your data.

However, no data transmission over the Internet is totally secure. We invite you to take your own precautions (robust password, vigilance against phishing).

In accordance with European and Luxembourg regulations, you have the following rights:

1. Right of Access (Art. 15): You may obtain confirmation that we process your data and access such data, as well as information on recipients and retention periods.
2. Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete data.
3. Right to Erasure (“Right to be Forgotten”) (Art. 17): You may request deletion of your data, unless retention is necessary to comply with legal obligations (e.g., invoicing), for establishment, exercise, or defense of legal claims, or for public interest reasons.
4. Right to Restriction of Processing (Art. 18): You may request restriction of processing in certain circumstances (e.g., during verification of data accuracy).
5. Right to Object (Art. 21):
   • You may object, for reasons related to your particular situation, to processing of your data based on our legitimate interest.
   • Absolute right to object to direct marketing: You may object at any time to processing of your data for commercial prospecting purposes (newsletters, offers). In this case, we will immediately cease sending commercial communications.
6. Right to Data Portability (Art. 20): You may retrieve your data in a structured, commonly used, and machine-readable format.
7. Right to Withdraw Consent: At any time, without affecting the lawfulness of processing carried out before such withdrawal.

Exercise of Your Rights: To exercise any of these rights, please contact us at: [Insert contact email]. We will respond within one month. Proof of identity (copy of ID) may be requested to verify your identity and prevent fraud.

Appeal: If you believe your rights are not respected, you have the right to file a complaint with the competent supervisory authority: National Commission for Data Protection (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg, Website: www.cnpd.lu

We reserve the right to modify this privacy policy to bring it into conformity with any legislative, regulatory, or technical evolution. The version in force is the one displayed on the Site on the date of your consultation.