Privacy Policy
Last updated: 31 mars 2026
1. Data controller
Euphron Kayros S.à r.l.
55 Rue de Luxembourg, 4391 Pontpierre, Luxembourg
RCS Luxembourg: B241078 — VAT: LU31883840
Contact: contact@baswil.lu
2. Data collected
We collect the following data when you place an order:
- First and last name
- Email address
- Phone number
- Shipping address (street, city, postal code, country)
- Payment data (handled directly by Stripe — we never have access to it)
3. Purposes of processing
Your data is used to:
- Process and ship your order
- Send you an order confirmation email
- Provide after-sales service and handle returns
- Comply with our legal and accounting obligations
4. Legal basis
Processing of your data is based on the performance of the sales contract (article 6.1.b GDPR) and on our legal obligations (article 6.1.c GDPR).
5. Recipients of the data
Your data may be shared with the following service providers:
- Stripe — payment processing (PCI DSS certified)
- Resend — sending transactional emails
- Vercel — site hosting
- Carrier — delivery of your order
We do not sell or rent your personal data to third parties.
6. Retention period
Your order data is retained for the duration required to perform the contract and for the applicable legal retention periods (10 years for accounting documents in Luxembourg).
7. Your rights
Under the GDPR, you have the following rights:
- Right to access your personal data
- Right to correct inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
To exercise these rights, contact us at contact@baswil.lu. You can also file a complaint with the Commission Nationale pour la Protection des Données (CNPD) of Luxembourg.
8. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration. Payments are handled entirely by Stripe over an encrypted connection (TLS/SSL).
9. International transfers
Some of our service providers (Stripe, Vercel, Resend) may process data outside the European Economic Area. These transfers are governed by standard contractual clauses approved by the European Commission or by adequacy decisions.
10. Changes
We reserve the right to modify this privacy policy at any time. The version in force is the one published on this page along with its update date.
