Privacy Policy
We handle data protection very seriously.
We attach high importance to the protection of your privacy when processing your personal data. When you visit our website, our web servers automatically log the IP address of your internet service provider, the website from which you are visiting us, the websites you visit with us as well as the date and duration of the visit. . This information is absolutely necessary for the technical transfer of the web pages and the reliable operation of the server. A personalized analysis of this data does not take place.
When you send us data via contact form, this data is stored on our servers as part of data backup. We use your data exclusively for the purpose of processing your request. Your data is treated strictly confidentially. They are not transferred to third parties.
Responsible party:
LITTLE HERO LUXEMBOURG SA
22 avenue de la liberté
BP 1057
L-1930 LUXEMBOURG
You can contact us from 8:00am to 05:00pm to this number :
Phone : +352 202 115 03
Fax : + 352 202 115 04
Or by email at contact@blue-shaker.com
Personal data
Personal data is data relating to your person. They contain your name, address and email address. It is not necessary for you to provide personal data in order to visit our website. In some cases, we need your name and address and other information to be able to provide you with the desired service.
The same applies when you want us to provide you with information material or we only store the data that you have transmitted to us automatically or optionally.
When you use one of our services, we generally only store the data that is necessary to be able to offer you our service. It is possible that we ask for other information which is however optional. Whenever we process personal data, we do so for the purpose of providing our service to you or pursuing our business objectives.
Customer account
For each customer who registers, we set up password-protected direct access to their permanent data stored with us (customer account). There you can view data on open orders that you have recently sent and manage your address data there. As long as you have saved projects in ipLabs Designer or uploaded photos in your customer account, you have access to them from there.
You undertake to treat the access data confidentially and not to make them accessible to any unauthorized third party. We assume no responsibility for passwords used in an abusive manner, unless we have to answer for this abuse.
A customer account is mandatory for the B2B domain.
Automatically Stored Data
Server log files
The provider of the sites automatically collects and stores information in server files called "log files" that your browser automatically transmits to us. This information is:
• the date and time of the request
• the name of the called file
• the site from which the file was called
• the access status (file transmitted, file not found, etc.)
• the web browser used and the operating system used
• the full IP address of the requesting computer
• the amount of data transferred
These data are not cross-referenced with other data sources. The processing takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
For technical security reasons, and in particular to thwart attempted attacks against our web server, this data is stored temporarily. These data do not allow the identification of individual persons. After seven days at the latest, the data is anonymized at domain level by reduction of the IP address so that any association of this data with the respective user is excluded. The data is also processed for statistical purposes in anonymised form; this data is not reconciled with other databases or disseminated to third parties, even partially. A presentation of the number of page hits takes place solely within the scope of our server statistics, which are published every two years in our activity report.
Use and dissemination of personal data and purpose
We use the data you provide to us for the fulfillment and processing of your order. Your data is used in accordance with the currently valid data protection regulations exclusively for the purposes related to the collection concerned and for the purpose of defending our own legitimate business interests, in particular the technical administration of the websites.
Depending on the order, BLUE SHAKER entrusts the execution of certain operations, such as the production, shipping and delivery of items to external companies. These service providers have access to personal information which is necessary for the execution of their missions. However, they are only authorized to use this information for these purposes. Our service providers undertake to us to process information in accordance with relevant data protection laws and as defined in our privacy statements.
Personal data may only be transmitted to public bodies within the framework of legal obligations. Your data will not be passed on to private third parties without your explicit consent. Our employees are committed to us to respect confidentiality and the regulations in force in terms of data protection.
Newsletter
For sending the newsletter, we use the Double Opt-In procedure, which means that we will only send you a newsletter by e-mail when you have explicitly confirmed to us beforehand that we have activated the newsletter service. We will then send you a message by email asking you to click on one of the links contained in this email to confirm that you wish to receive our newsletter. When you register to receive our newsletter, we store your IP address and the date of registration. This memorization only serves as proof in the event that a third party misuses your email address to register you for the receipt of the newsletter without your knowledge or without having your legitimation for the receipt of the newsletter. If you later no longer want to receive newsletters, you can object at any time without incurring any costs other than the transmission costs calculated on the basic rates.
Cookies and other technologies
When you visit our web pages, we may store information on your computer in the form of cookies. Cookies are small files that a web server sends to your browser and places on its hard drive. Only the IP address is stored. No personal data is. This information stored in cookies allows you to be recognized automatically on your next visit, which makes it easier for you to use. The legal basis for the use of cookies is the legitimate interest pursuant to Article 6(1) litera f GDPR.
Of course, you can also visit our web pages without accepting cookies. If you do not want your computer to be recognized on your next visit, you can also refuse the use of cookies by modifying your browser settings and clicking on “Refuse cookies”. You will find the procedure for disabling cookies in the service mode of your own browser. If you refuse the use of cookies, the use of certain areas of our web pages may however be restricted.
Rights of data subjects
You have the right at any time to access your stored data, to their rectification, erasure or even to the restriction of processing, a right to oppose processing as well as a right to portability and also the right to introduce a complaint in accordance with the conditions of data protection law.
Right to access your data
You have the right to ask us for information about whether and to what extent we are processing your data.
Right to rectification
If we process your data when they are incomplete or incorrect, you have the right at any time to demand that they be rectified or completed. Right to erasure You can demand that we erase your data insofar as we are processing it unlawfully or the processing constitutes an excessive interference with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, for example in the case of statutory retention obligations. Irrespective of the respect of your right to erasure, your data will be erased immediately and completely insofar as no legal or contractual storage obligation in this respect opposes this.
Right to restriction of processing
You can demand that we restrict the processing of your data if:
• you dispute the relevance of the data, for a period that allows us to verify the relevance of the data;
• the processing of the data is unlawful, but you refuse erasure and instead demand a restriction of the use of the data;
• we no longer need the data for the intended purposes, but you need the data to assert or defend legal claims or
• that you have objected to the processing of the data.
Right to data portability
You can demand that we make the data you have provided to us available to you, in a structured and usual form allowing automatic reading and that you can transmit this data to another person in charge without our obstructing it insofar as
• we process this data on the basis of a revocable consent that you have given to us or for the purpose of performing a contract between us and that
• this processing is carried out using automated processes.
Insofar as the technical feasibility is ensured, you can demand that we transmit your data directly to another controller.
Right of opposition
Insofar as we process your data on the basis of a legitimate interest, you can object to this data processing at any time; this would also apply to profiling based on these provisions. In this case, we will no longer process your data, unless we can demonstrate compelling legitimate reasons for the processing and knowing that these prevail over your interests, rights and freedoms or that the processing serves to assert, exercise or defend rights. You can object at any time to the processing of your data for direct advertising purposes without giving any reason.
Right of complaint
If you are of the opinion that, in the context of the processing of your data, we are in breach of European data protection law, please contact us to clarify the questions. You can of course also contact the competent supervisory authority.
If you wish to assert any of the relevant rights against us, please contact our data protection officer. In case of doubts, we may ask you for information in order to confirm your identity.
General and safety
Security
We have taken technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees as well as the service providers who work for us are committed to respecting the laws in force in terms of data protection. Whenever we collect and process personal data, it is encrypted before being transmitted. In this way, your data cannot be misused. Our security features are subject to a continuous improvement process and our privacy statements are continually reviewed. Make sure you always have the latest version.
Changes to this privacy statement
We reserve the right to modify our privacy statements should this become necessary due to new technologies. Make sure you always have the latest version. As soon as this privacy statement changes, we will notify you on our website.
All visitors and anyone interested in our website can contact us at:
LITTLE HERO LUXEMBOURG SA
22avenue de la liberté
PO Box 1057
L-1930 LUXEMBOURG
Your right to information
In accordance with the General Data Protection Regulation (GDPR), you have a right to information.
1. Who is responsible for data processing and who can you contact?
The responsibility lies with
LITTLE HERO LUXEMBOURG SA
22 liberty avenue
PO Box 1057
L-1930 LUXEMBOURG
2. What data is processed and what source does it come from?
We process the data that you provide to us within the framework of the purchase contract or the execution of the order, on the basis of consents or within the framework of your application for a job within our company or as member of our staff.
Personal data includes, among others:
your basic data or contact details, these being, among others, for customers, surname and first name, address, contact details (email address, telephone number, fax), date of birth and, where where applicable, payment data.
For applicants and employees, the data includes, among others, surname and first name, address, contact details (email address, telephone number, fax), date of birth, CV data and work certificates , bank details, religious denomination.
For suppliers, the data is, among other things, the designation of their legal representative, company name, registration number in the commercial register, VAT identification number, company number, address, contact details (email address, telephone number, fax), bank details.
On the other hand, we also process the following other personal data:
• information on the nature and content of contract data, data relating to the order, data relating to turnover and supporting documents, customer and supplier history as well as consultation documents,
• advertising and sales data,
• information from electronic communications with BLUE SHAKER (eg IP address, connection data),
• other data that we have obtained within the framework of our business relations (eg during interviews with the customer),
• data that we generate ourselves from master or contact data as well as from other data, such as e.g. ex. data resulting from analyzes of customer needs or potential customers,
• documentation of your declaration of consent for the receipt of newsletters, for example.
3. For what purposes and on what legal basis are the data processed?
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Luxembourg law governing data protection in its version currently in force:
for the performance of pre-contractual and contractual obligations (article 6, paragraph 1.b GDPR):
Your data is processed for the execution of the contract relating to your online purchases or in one of our subsidiaries or the execution of the contract of your staff in our company. The data is processed in particular when establishing business contacts or performing contracts with you.
for the performance of legal obligations (article 6, paragraph 1.c GDPR):
Processing of your data is necessary in order to fulfill various legal obligations, for example obligations of the Commercial Code or the Tax Code).
for the purposes of legitimate interests (article 6, paragraph 1.f GDPR):
Due to a consideration of the interests involved, data processing may prove necessary beyond the performance of the contract for the purposes of the legitimate interests pursued by us or by a third party. Data processing for the purposes of legitimate interests may take place, for example, in the following cases:
• advertising or marketing (see no. 4)
• measures aimed at conducting business and developing benefits and services,
• management of a customer database at group level in order to improve customer service,
• in connection with the exercise of a right.
within the framework of your consent (article 6, paragraph 1.a GDPR):
Insofar as you have given us your consent to the processing of your data, for example to send our newsletter, your data will only be processed for the purposes defined in your declaration of consent and within the agreed limits. You can revoke your consent at any time with future effect.
4. Processing of personal data for advertising purposes
You can always object to the use of your personal data for advertising purposes, either in full or for individual measures, at no cost other than the transmission costs calculated on the basic rates.
In accordance with the conditions of paragraph 7, article 3 of the Federal Law against Unfair Competition (LCD), BLUE SHAKER has the right to use the email address you provided when concluding the contract for the purposes of direct advertising for similar goods or services. You receive these product recommendations regardless of whether you subscribe to a newsletter.
If you do not want to receive such recommendations by email, you can object at any time to the use of your address for this purpose at no cost other than the transmission costs calculated on the basic rates. A message in written form is sufficient for us. Each email contains, of course, an unsubscribe link.
5. To whom are my data transmitted?
Even when we use a service provider to subcontract an order, we remain responsible for protecting your data. All subcontractors are contractually committed to processing your data confidentially and only within the limits of the provision of the service. The subcontractors we appoint obtain your data insofar as they need it to provide the service concerned. These are, for example, the IT service provider we need for the operation and security of our IT systems, the production service providers as well as the publishing houses responsible for the advertising texts and addresses necessary for the advertising campaigns. .
Your data is processed in the BLUE SHAKER customer database. The BLUE SHAKER customer database contributes to improving the quality of existing customer data (removal of doublets, marking "left without leaving an address" / "deceased", correction of addresses) and thus allows enrichment with data from official sources).
Authorities and courts as well as external auditors may receive your data in the event of a legal obligation as well as in the exercise of a right.
In addition, insurance companies, banks, information offices and service providers may also obtain your data for the purpose of preparing and executing a contract.
6. How long are my data stored?
We process your data until the end of our business relationship or until the expiry date of the legal retention periods in force; moreover until the end of possible disputes requiring the data as proof.
7. Are personal data transmitted to third countries?
In general, we do not transmit any data to a third country. In individual cases, data may be transferred, but only on the basis of an adequacy decision by the European Commission, standard contractual clauses, appropriate safeguards or your explicit consent.
8. What are my data protection rights?
You have the right at any time to access your stored data, to their rectification, erasure or even to the restriction of processing, a right to oppose processing as well as a right to portability and also the right to introduce a complaint in accordance with the conditions of data protection law.
Right of access to your data:
You have the right to ask us for information about whether and to what extent we are processing your data.
Right to rectification:
If we process your data when they are incomplete or incorrect, you have the right at any time to demand that they be rectified or completed.
Right to erasure:
You can demand that we erase your data insofar as we process it unlawfully or the processing constitutes an undue interference with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, for example in the case of statutory retention obligations. Irrespective of the respect of your right to erasure, your data will be erased immediately and completely insofar as no legal or contractual storage obligation in this respect opposes this.
Right to restriction of processing:
You can demand that we restrict the processing of your data if
you dispute the relevance of the data, for a period that allows us to verify the relevance of the data; the processing of the data is unlawful, but you refuse erasure and instead demand a restriction of the use of the data; we no longer need the data for the intended purposes, but you need the data to assert or defend legal claims or you have objected to the data processing.
Right to data portability:
You can demand that we make the data you have provided to us available to you, in a structured and usual form allowing automatic reading and that you can transmit this data to another person in charge without our obstructing it insofar as
• we process this data on the basis of a revocable consent that you have given us
• given or for the purpose of performing a contract between us and that
• this processing is carried out using automated processes.
Insofar as the technical feasibility is ensured, you can demand that we transmit your data directly to another controller.
Right of opposition:
Insofar as we process your data on the basis of a legitimate interest, you can object to this data processing at any time; this would also apply to profiling based on these provisions. In this case, we will no longer process your data, unless we can demonstrate compelling legitimate reasons for the processing and knowing that these prevail over your interests, rights and freedoms or that the processing serves to assert, exercise or defend rights. You can object at any time to the processing of your data for direct advertising purposes without giving any reason.
Right of complaint:
If you are of the opinion that, in the context of the processing of your data, we are in breach of European data protection law, please contact us to clarify the questions. You can of course also contact the competent supervisory authority.
If you wish to assert any of the relevant rights against us, please contact our data protection officer. In case of doubts, we may ask you for information in order to confirm your identity.
9. Am I obliged to provide data?
The processing of your data is necessary for the conclusion and execution of the contract with us. If you do not provide us with this data, we will generally have to refuse to enter into the contract or we will not be able to continue with the performance of an existing contract and will have to terminate it accordingly. However, you are not obliged to consent to the processing of data which is not relevant for the performance of the contract or which is not required by the law.