Privacy Policy

Introduction

We are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what your rights are as a user of our site Surf Luxembourg / SurfLux (www.surflux.eu).

1. Data Controller

The data controller for this site is Surf Luxembourg (ACR), whose contact details are available in the legal notice on our site.

2. Data Collected

We may collect the following information:

Identity Data: name, first name, date of birth, email address, phone number;
Booking Information: booked activity, date, time, number of participants;
Payment Data: if you make a payment via our site, the necessary information (via our payment provider);
Browsing Data: IP address, browser type, pages visited, cookie data (if applicable);
Other Data: any information you voluntarily provide to us (e.g., via a contact form).

3. Purposes of Processing

Your data is used for:

Manage your activity bookings;
Communicate with you (confirmation, modifications, support);
Manage payments and billing;
Improve our service (browsing analysis, customer feedback);
Send marketing communications if you have consented (newsletters, promotional offers).

4. Legal Basis

We process your data based on:

Contract performance (for bookings);
Consent (for marketing communications);
Our legitimate interest (for example, for improving our services).

5. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected or as required by legal obligations (e.g., accounting, customer rights).

6. Data Sharing

We may share your data with:

Service providers (payment, website hosting, marketing);
Legal authorities if required by law.
We require our service providers to respect data confidentiality and security.

7. Data Security
We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

8. Cookies

We use (or may use) cookies to improve your browsing experience, generate statistics, or manage certain site functionalities. You can configure your browser to refuse some or all cookies, but this may impact certain site functionalities.

9. Your Rights

In accordance with applicable regulations (GDPR), you have the following rights:

Right to access your data;
Right to rectification;
Right to erasure (“right to be forgotten”);
Right to restriction of processing;
Right to data portability;
Right to object to processing;
Right to withdraw your consent (for marketing communications).

To exercise your rights, you can contact us at the address indicated in our legal notice.

10. Policy Modifications

We may update this privacy policy at any time. The most recent version will always be available on our site with the update date.

11. Contact

For any questions about this policy or your personal data, you can contact us via the email or phone indicated in the “Contact / Legal Notice” section of our site.