Skip to Content

Legal notices and processing and protection of personal data


Legal Notices

 

Indoor Forest Sarl-s SIS, 15 Rue Edmond Reuter, L-5326 Contern (RCS LU :  B261188), hereinafter also Indoor Forest, is the data controller of the personal data it obtains from its clients and potential clients in the context of transactions and services on the site b-smart.lu, and the brand Bévakasha.

The principles and obligations set out in this document apply to any company belonging to Indoor Forest that acts as the owner on the site.

 

For any questions regarding the processing of your personal data, you can send a message to our GDPR manager: b-smart@indoorforest.lu (or send a letter to

Indoor Forest , 15 Rue Edmond Reuter, 5326 Contern, Luxembourg.

Company Register Number: B261188)

 

The message will be handled by the person responsible for GDPR (legislation on data protection and privacy in force in the Grand Duchy of Luxembourg as well as Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC, and the European and national regulations transposing it).

 

1.       Principles – Purposes – Data subjects – Categories of personal data

 

We collect personal data that you voluntarily provide to us by subscribing to our newsletter, filling out contact forms, and sending us an email.

We also collect data from your use of the website and its services when you visit web pages and fill out forms.

In principle, your personal data is only used to process your requests.

 

Indoor Forest processes personal data in the context of transactions, agreements related to the site b-smart.lu. Mainly, these are professional personal data of clients or potential clients of Indoor Forest.

 

The processing is therefore done exclusively to provide services to clients and potential clients, execute the contracts concluded, manage the administration/accounting of clients. The processing is therefore limited to what is necessary for the execution of agreements and to what is necessary for the purposes of the legitimate interests pursued by Indoor Forest (among other things, to offer services to potential and interested clients).

 

Mainly, the personal data processed is very limited to what is necessary for Indoor Forest to fulfill its contractual obligations, manage the site, and offer services to clients (data of a contact person at the client, email and professional phone). Indoor Forest does not process sensitive data.

The data is centralized in the CRM database of Indoor Forest.

Indoor Forest does not use automated processes or profiling.

 

It may also be that personal data is verified before concluding a contract or processing a request in the context of our "Client-acceptance" procedures.

 

2.       Recipients of personal data – Subcontractors

 

Indoor Forest may grant access to data to its employees and agents, but will limit this access to those who need it to fulfill the obligations of Indoor Forest.

 

There are other subcontractors as listed below especially in the context of the application of "cookies."

 

Personal data is not transferred outside the European Economic Area (namely the European Union, the Liechtenstein, Iceland, and Norway), unless the country or the organization(s) concerned to which the personal data is transferred guarantees a level of adequate protection. However, reference is also made to the cookies policy, given the subcontractors involved.

 

3.       Measures of organizational and technical security

 

Indoor Forest has appropriate technical and organizational security measures necessary for the protection of personal data, among other things against destruction, loss, alteration, unauthorized disclosure, or unauthorized access. These measures are quite standard given the nature, scope, the context and purposes of processing as well as the risks of use and the likely impact on the freedoms and rights of the individuals concerned in the event of a data breach.

 

4.       Data retention

 

Indoor Forest retains and maintains personal data for as long as necessary (a) due to the limitation periods during which the data subjects can assert their rights in court against our company (b) useful under business objectives and to inform and make offers to registered individuals (c) to fulfill its obligations as the owner on the Indoor Forest site under applicable agreements and regulations and the professional relationship (d) thereafter passively based on legal obligations and the necessity that certain files containing personal data may still be accessed.

 

5.       Rights of data subjects

 

Any data subject has :

-       The right of access – the right to receive a copy of all personal data that Indoor Forest holds about them.

-       The right to rectify personal data that is collected by Indoor Forest.

-       The right to request the deletion of personal data unless a legitimate reason justifies their retention.

-       The right to receive personal data in a structured, commonly used, and machine-readable format to transfer it to another entity.

-       The right to object at any time, for reasons related to their particular situation, to the processing of personal data, unless there are legitimate and compelling reasons to continue the processing.

-       The right to claim a limitation on the processing of their data.

Pour exercer vos droits, vous pouvez envoyer un mail à l’adresse susmentionnée (b-smart@indoorforest.lu). We will respond within 30 days after verifying the identity of the person who makes a request regarding personal data at Indoor Forest.

 

6.       Right to lodge a complaint

 

Although Indoor Forest places great importance on compliance with legislation on the protection and processing of personal data, you can always file a complaint with or the competent administration in the country where you reside or with

 

NATIONAL COMMISSION FOR DATA PROTECTION

1, Avenue of Rock’n’Roll

L-4361 Esch-sur-Alzette

By appointment:

Monday to Friday (09:00-12:00, 14:15-16:30)

Tel: (+352) 26 10 60 -1

Fax: (+352) 26 10 60 - 29

 

Complaints Service

1, Avenue of Rock'n'Roll

L-4361 Esch-sur-Alzette

 

 

SUMMARY

 



Data Controller

Indoor Forest Sarl-S SIS

15 Rue Edmond Reuter

L-5326 Contern

Nature and Purpose of Processing

The management of the Indoor Forest site by the owner, the execution of agreements with site users, the information and offering of services to site users, the processing of requests from clients or interested persons

Types of Personal Data Processed

Personal data is very limited (contact person for the company / professional email / professional phone number)

Data about the entity (the company, the business) of the client.

Categories of Data Subjects

Contact persons or representatives of users or potential users of the site b-smart.lu

Location(s) of the Processing of personal data

Microsoft Cloud with Microsoft Cloud security

Servers or cloud services of subcontractors (processors) such as Facebook/Google/LinkedIn (very limited – see Cookie Policy) who commit in their general terms to comply with the GDPR legislation.

Third countries to which personal data is Transferred

None, except the possibility of having a provider or IT service provider with services or servers in third countries, but then in any case with respect to GDPR and possibly on the condition that it is within the EU.

Subcontractors (suppliers)

Execution / Publication / Hosting

Indoor Forest – Odoo

 

These companies have committed to comply with the GDPR legislation in all data processing.

 

Especially in the context of "cookies" the subcontractors mentioned below, but very limited.

Retention

(a) as long as a professional relationship exists with the company with which the data subject is linked

(b) thereafter passively in view of legal obligations (accounting / fulfilling contractual and legal obligations) where

(c) to provide services (marketing)

Contact address

b-smart@indoorforest.lu

 

Other Suppliers (subcontractors) – see also our cookie policy

 

Name and address of the supplier

Country of data storage

Type of service

Concerned data





Facebook Ireland Ltd.

 4 Grand Canal Square

Grand Canal Harbour

Dublin 2

Ireland

Member countries of the Union European & USA

Social media

COOKIE: Pages viewed, data technical of the browser and the tool used to connect to the site. 

Google LLC

 1600 Amphitheatre Parkway

Mountain View, CA 94043

USA

Member countries of the Union European & USA

Statistical analyses (Google Analytics), social media (Google+), Google fonts

COOKIE: Pages viewed, clicks, technical data of the browser and the tool used to connect to the site.

LinkedIn Ireland Unlimited Company

Wilton Plaza, Wilton Pl, Grand Canal Dock, Dublin 2, Ireland

Member countries of the Union European

Social media

COOKIE: Pages viewed, data technical of the browser and the tool used to connect to the site.