Privacy Policy

Last updated: 31 mars 2026

1. Data controller

Euphron Kayros S.à r.l.
55 Rue de Luxembourg, 4391 Pontpierre, Luxembourg
RCS Luxembourg: B241078 — VAT: LU31883840
Contact: contact@baswil.lu

2. Data collected

We collect the following data when you place an order:

  • First and last name
  • Email address
  • Phone number
  • Shipping address (street, city, postal code, country)
  • Payment data (handled directly by Stripe — we never have access to it)

3. Purposes of processing

Your data is used to:

  • Process and ship your order
  • Send you an order confirmation email
  • Provide after-sales service and handle returns
  • Comply with our legal and accounting obligations

4. Legal basis

Processing of your data is based on the performance of the sales contract (article 6.1.b GDPR) and on our legal obligations (article 6.1.c GDPR).

5. Recipients of the data

Your data may be shared with the following service providers:

  • Stripe — payment processing (PCI DSS certified)
  • Resend — sending transactional emails
  • Vercel — site hosting
  • Carrier — delivery of your order

We do not sell or rent your personal data to third parties.

6. Retention period

Your order data is retained for the duration required to perform the contract and for the applicable legal retention periods (10 years for accounting documents in Luxembourg).

7. Your rights

Under the GDPR, you have the following rights:

  • Right to access your personal data
  • Right to correct inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

To exercise these rights, contact us at contact@baswil.lu. You can also file a complaint with the Commission Nationale pour la Protection des Données (CNPD) of Luxembourg.

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration. Payments are handled entirely by Stripe over an encrypted connection (TLS/SSL).

9. International transfers

Some of our service providers (Stripe, Vercel, Resend) may process data outside the European Economic Area. These transfers are governed by standard contractual clauses approved by the European Commission or by adequacy decisions.

10. Changes

We reserve the right to modify this privacy policy at any time. The version in force is the one published on this page along with its update date.