Privacy & Cookie Policy

1. Data Controller Information

The data controller responsible for personal information collected through this website is:

2. Personal Data We Collect

We only collect personal information that you voluntarily provide when contacting us or requesting a quotation for lighting fixtures:

• Contact Information: Full name, email address, and optional phone number.
• Enquiry Details: Specific messages, lighting project specifications, architectural plans (if provided), and requested fixture selections.
• Technical Data: Anonymized server logs including request timestamps, user-agent, and masked IP hashes utilized strictly for security, rate-limiting, and spam prevention.

3. Lawful Basis and Purpose of Processing

We process your personal data under the following legal bases pursuant to Article 6 of the GDPR:

• Legitimate Interests & Pre-contractual Measures (Art. 6(1)(b) & (f)): Responding to enquiries, providing personalized quotations, advising on luminaire specifications, and coordinating product viewings at our Żebbuġ showroom.
• Legal Obligations (Art. 6(1)(c)): Maintaining statutory accounting, tax, and sales records where transactions take place.
• Security (Art. 6(1)(f)): Protecting our digital infrastructure against brute-force abuse, malicious bot traffic, and form spam relay.

4. Cookies & Local Storage

We respect your digital privacy and adhere to the principle of data minimization:

• No Tracking or Advertising Cookies: We do not deploy third-party advertising cookies, behavioral tracking pixels, or cross-site tracking scripts.
• Strictly Necessary Functional Storage: We utilize browser localStorage solely to remember your chosen lighting fixtures in the cart during your session so your selection is preserved as you browse our catalogue. This storage is localized entirely to your browser.
• Local Font Hosting: All website typography is self-hosted directly on our servers in Malta/EU, ensuring zero IP address transfers to third-party font networks.

5. Data Retention & Sharing

Enquiry communications are retained only as long as necessary to fulfill your request and conclude project consultations (typically up to 12 months for general enquiries, or as required by Maltese commercial and tax laws for executed orders). We never sell, lease, or monetize your personal data.

6. Your Statutory Rights

Under the GDPR, you retain the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of your data ("Right to be Forgotten") where retention is no longer justified.
• Object to or restrict data processing in specific circumstances.
• Lodge a complaint with the supervisory authority: Information and Data Protection Commissioner (IDPC), Level 2, Airways House, High Street, Sliema SLM 1549, Malta (idpc.org.mt).

To exercise any of these rights, please email us directly at info@paraluxe.eu.