Privacy Policy

1. Who we are

Engelhorn is a fashion store located at 4-6 Rue des Trois Cantons, 3980 Wickrange, Luxembourg. This privacy policy explains how we handle personal information collected through our website, event sign-ups, newsletter subscriptions, and contact forms.

Questions about this policy can be sent to contact@engelhorn.lu.

2. What information we collect

We collect only the information we need to provide the service or respond to you. Depending on how you interact with us, this may include:

• Contact and event data — name, email address, and any message you send when you fill in a contact form, register for an event, or subscribe to our newsletter.
• Newsletter data — email address, the page or promotion you signed up from (source), and the date you subscribed.
• Feedback — the message you submit through our feedback form. This is optional and may be submitted anonymously.
• Technical data — information your browser sends automatically, such as your IP address, browser type, device type, operating system, and the pages you visit. We collect this through cookies and similar technologies; see our cookie policy for details.
• Admin authentication data — login credentials and session data for authorized staff who access the admin area of the website.

We do not collect payment card details, government IDs, health data, or other sensitive personal information through this website.

3. How we use your information

We use the information we collect to:

• Register you for events and send you relevant details or updates about the event.
• Respond to your enquiries submitted through the contact or feedback forms.
• Send newsletters, style updates, and invitations to subscribers who have opted in.
• Keep admin users securely signed in and manage the website content.
• Understand how visitors use the website and improve its performance and content.
• Comply with legal obligations and protect our legal rights.

4. Legal basis for processing

We process personal data based on one or more of the following legal grounds:

• Consent — when you subscribe to the newsletter, accept analytics cookies, or submit optional feedback.
• Contract — when we need your contact details to register you for an event or respond to a specific request.
• Legitimate interest — when we operate and secure the website, analyse usage, and communicate with you about your enquiries.
• Legal obligation — when we are required to keep records or comply with applicable law.

5. Who we share your information with

We do not sell your personal data. We share it only with trusted service providers who help us run the website and our business:

• Lovable Cloud — website hosting and database services.
• Google — anonymous website analytics through Google Analytics. See Google's privacy policy.

These providers are contractually bound to use your data only for the services they provide to us and to protect it in line with applicable data protection law.

6. International transfers

Some of the services we use may process data outside the European Economic Area. When this happens, we rely on appropriate safeguards, such as standard contractual clauses approved by the European Commission, to protect your personal data.

7. How long we keep your data

We keep your personal data only for as long as necessary for the purpose it was collected:

• Event registrations — kept for the duration of the event plus a reasonable period to manage follow-up and legal obligations.
• Newsletter subscriptions — kept until you unsubscribe or request deletion.
• Contact and feedback messages — kept for as long as needed to resolve your enquiry and for our records.
• Analytics data — kept according to the retention settings of Google Analytics, which we configure to the shortest practical period.

8. Your rights

Under the GDPR and applicable Luxembourg data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data in certain circumstances.
• Object to or restrict certain types of processing.
• Withdraw your consent at any time, where processing is based on consent.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Luxembourg data protection authority (CNPD) or your local supervisory authority.

To exercise any of these rights, email us at contact@engelhorn.lu.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or alteration. This includes secure access controls for the admin area, encrypted connections, and limited access to data within our team. No method of transmission over the internet is fully secure, so we cannot guarantee absolute security.

10. Children

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Cookies and analytics

We use cookies and similar technologies to operate the website and collect anonymous usage data. For full details, including the cookies we set and how to manage them, see our cookie policy.

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Material changes will be flagged on this page.

13. Contact

For questions about this privacy policy or to exercise your data protection rights, email contact@engelhorn.lu.