Privacy Policy

Last updated: 16.11.2025

This Privacy Policy describes how KOLOT, S.à r.l.-S, located at 56, rue du Parc, L–3542 Dudelange, Luxembourg, processes personal data when you visit our website kolot.lu or contact us.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR – EU 2016/679) and Luxembourg’s Data Protection Act of 1 August 2018.

If you have any questions, you can reach us at:
[email protected]

1. Data We Collect

1.1. Data you provide voluntarily

When you contact us using our forms, we may receive:

  • Name
  • Email address
  • Phone number (if included)
  • Message content
  • Any optional information you choose to provide

This data is not stored in any database — it is only transmitted to our email inbox.

We do not collect payment information, account data, or sensitive categories of data.

2. Automatically Collected Data

2.1. Analytics (Google Analytics 4)

We use Google Analytics 4 for statistical and performance measurement.

Collected data may include:

  • Device type and browser
  • Country/region
  • Pages visited
  • Time spent on the website
  • Events (scrolls, clicks, etc.)
  • Non-identifying technical data

GA4 does not collect IP addresses (they are anonymized by Google by design).

2.2. Server logs

Since the site runs on Nginx/Apache, minimal technical logs may be generated automatically:

  • IP address
  • Browser information
  • Date/time of visit
  • Requested URLs

Logs are kept only for security purposes and automatically rotated.

3. Cookies

We only use:

  • Analytical cookies (GA4) — optional
  • No technical cookies (the site works without them)
  • No marketing cookies
  • No chat widgets or tracking pixels

The cookie banner blocks all non-essential cookies until you consent.

For full details, please refer to our Cookie Policy (published separately).

4. Legal Basis for Processing

We process your personal data on the following bases:

  • Art. 6(1)(a) GDPR – Consent
    For analytics and the use of cookies.
  • Art. 6(1)(f) GDPR – Legitimate interest
    To secure our website (server logs).
  • Art. 6(1)(b) GDPR – Contract or pre-contract
    When you contact us to discuss a project.

5. How We Use Your Data

We use your data solely for:

  • Responding to your inquiries
  • Preparing project proposals
  • Ensuring website functionality and security
  • Improving website performance (analytics)

We do not:

  • Sell or share personal data
  • Use data for advertising
  • Create user profiles

6. Data Storage & Retention

  • We do not store contact form submissions in any database.
  • Messages are kept in our email system only as long as needed to reply or maintain communication.
  • Server logs are retained only for short technical periods.
  • Analytics data is kept within Google Analytics according to Google’s retention settings.

7. Data Hosting & Transfers

Our hosting is moving to:

Europe (France – Gravelines)
This ensures all data stays within the European Union.

Google Analytics may process data outside the EU, but only with GDPR-standard safeguards provided by Google (e.g., SCCs).

8. Your GDPR Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion
  • Withdraw consent at any time (for cookies/analytics)
  • Restrict or object to processing
  • Lodge a complaint with CNPD Luxembourg

CNPD contact: https://cnpd.public.lu

To exercise your rights:
[email protected]

9. Children’s Privacy

Our services are intended for adults.
We do not knowingly collect data from persons under 16 years old.

10. Security Measures

We implement:

  • HTTPS encryption
  • Secure servers and EU hosting
  • Regular updates and monitoring
  • Minimal data collection
  • Restricted access to inbox communications

11. Updates to This Policy

We may update this Privacy Policy when needed.
The latest version will always be available on this page.