Legal

Privacy Policy

Under the GDPR (EU) 2016/679 · As of August 2026

Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

M-Vision Digital S.à r.l.
Melanie Buhre (managing director)
11a rue Wiltheim · L-5465 Waldbredimus · Luxembourg
Phone: +352 691 980 606
Email: info@m-vision-digital.lu

If you have any questions about data protection, please contact us directly at the email address above.

Principles of data processing

The protection of your personal data is important to us. We process your personal data exclusively on the basis of the statutory provisions of the GDPR and the Luxembourg Data Protection Act.

We process personal data only if:

  • you have given your consent (Art. 6(1)(a) GDPR)
  • the processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR)
  • there is a legal obligation (Art. 6(1)(c) GDPR)
  • there is a legitimate interest (Art. 6(1)(f) GDPR)

Data collection when visiting the website

Each time our website is accessed, technical information is automatically transmitted to our server by the browser of your device:

  • IP address of the requesting device (anonymised)
  • Date and time of access
  • Name and URL of the file retrieved
  • Amount of data transferred
  • Browser type and version as well as operating system
  • Referrer URL (previously visited page)

This data is needed exclusively for the technical provision of the website and to ensure security. It is not attributed to individual persons. Legal basis: Art. 6(1)(f) GDPR.

Contact form

If you send us an enquiry via the contact form on our website, the data you enter is processed:

  • First and last name
  • Email address
  • Service you are interested in
  • Content of your message

This data is stored exclusively for handling your enquiry and for possible follow-up communication. It is not passed on to third parties. It is sent encrypted via the outgoing mail server of our email provider.

After submitting, you receive an automatic confirmation of receipt at the email address you provided; it contains your details for checking.

Legal basis: your consent under Art. 6(1)(a) GDPR, which you give via the checkbox in the form, and Art. 6(1)(b) GDPR (pre-contractual measures). You can withdraw your consent at any time with effect for the future — an informal message to info@m-vision-digital.lu is sufficient.

The data submitted via the contact form remains with us until you ask us to delete it, withdraw your consent or the purpose of storage no longer applies. Statutory retention obligations remain unaffected.

Google Analytics

This website uses Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google).

Google Analytics 4 (GA4)

Purpose: analysis of user behaviour to improve our offering

Data processed: page views, time on site, origin, device type, anonymised IP address

Storage location: servers of Google LLC in the USA (data transfer on the basis of EU standard contractual clauses)

Retention period: 14 months (GA4 default setting)

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner)

We use Google Analytics with IP anonymisation (IP masking) enabled. Your IP address is thereby truncated within the EU/EEA before transmission to Google and can no longer be fully attributed to your device.

Google Analytics is only activated after your express consent via our cookie banner. You can withdraw your consent at any time by adjusting the cookie settings on our website.

Alternatively, you can permanently prevent collection by Google Analytics by installing Google's browser plugin: tools.google.com/dlpage/gaoptout

Further information can be found in Google's privacy policy: policies.google.com/privacy

Social media

Our website includes a link to our Instagram presence. We use a simple link (no embedded plugin), so no data is transmitted to the social network when you merely visit our website.

Only when you click the Instagram link and visit the platform do the provider's privacy terms apply:

Instagram

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Instagram privacy policy

When you visit our Instagram page, Meta processes data for analysis and advertising purposes. We have no influence on this processing. As page operator we receive aggregated, anonymised statistics (Insights) from Meta about the use of our page.

Cookies

Our website uses cookies — small text files stored in your browser. We distinguish between:

Technically necessary cookies

These cookies are strictly necessary for the operation of the website and cannot be deactivated. They do not store personal data. Legal basis: Art. 6(1)(f) GDPR.

  • Session cookies for the functionality of the website
  • Cookie settings (storage of your preference)

Analytics cookies (optional)

Google Analytics sets cookies to analyse your usage behaviour. These are only activated after your express consent. Legal basis: Art. 6(1)(a) GDPR.

Adjusting cookie settings: You can withdraw your consent at any time by deleting the cookies in your browser or visiting our site in incognito mode. For browser-specific instructions, please visit your browser's help pages.

Disclosure to third parties

Your personal data is generally not passed on to third parties, except:

  • you have expressly consented (Art. 6(1)(a) GDPR)
  • disclosure is necessary for the performance of a contract (Art. 6(1)(b) GDPR)
  • there is a legal obligation (Art. 6(1)(c) GDPR)
  • legitimate interests prevail (Art. 6(1)(f) GDPR)

In the context of Google Analytics, data is transmitted to Google LLC in the USA. This transfer takes place on the basis of EU standard contractual clauses under Art. 46 GDPR and only after your consent.

Retention period

We store personal data only for as long as necessary for the respective processing purpose or as required by statutory retention obligations:

  • Contact enquiries: until final processing, then deletion within 3 years, unless a contractual relationship arises
  • Contract data: 10 years (Luxembourg retention obligation)
  • Google Analytics: 14 months (automatic deletion)
  • Server logs: 7 days, then automatic deletion
  • Cookie consent: 12 months

Your rights

As a data subject you have the following rights against us under the GDPR:

Access Right of access to stored data (Art. 15 GDPR)
Rectification Right to correction of inaccurate data (Art. 16 GDPR)
Erasure Right to erasure of your data (Art. 17 GDPR)
Restriction Right to restriction of processing (Art. 18 GDPR)
Portability Right to data portability (Art. 20 GDPR)
Objection Right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact: info@m-vision-digital.lu

Right to lodge a complaint: You have the right to lodge a complaint with the competent data protection supervisory authority. In Luxembourg this is the Commission Nationale pour la Protection des Données (CNPD):
cnpd.public.lu · Phone: +352 26 10 60-1

Data security

We use technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration or unauthorised disclosure.

  • SSL/TLS encryption for all data transmission (HTTPS)
  • Access restrictions to personal data
  • Regular review and updating of security measures

Please note that data transmission over the internet (e.g. by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Changes to this policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services.

The updated privacy policy then applies to your next visit. The date of the last update can be found at the top of this page.

Version of this privacy policy: April 2026
If you have any questions about data protection, you can reach us at any time at info@m-vision-digital.lu