Data controller
House of Wine Sàrl-S, 59, rue Belair, L-4713 Pétange, Luxembourg (RCS Luxembourg B255497) – info@hows.lu.
Data and purposes
| Processing | Data | Legal basis |
|---|---|---|
| Orders, payment and delivery | Name, address, email, phone, order details, IBAN (for bank transfers) | Performance of the contract (Art. 6(1)(b) GDPR) and legal accounting obligation (Art. 6(1)(c) GDPR) |
| Age check | Online 18+ confirmation; visual check of the identity document on delivery or pick-up (no copy or record of the document) | Legal youth protection obligation (Art. 6(1)(c) GDPR) |
| Enquiries (contact, tastings) | Name, email, phone, message | Pre-contractual measures (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR) |
| Newsletter | Email, date and time of sign-up (double opt-in) | Consent (Art. 6(1)(a) GDPR) |
| Security and server logs | IP address, browser, timestamp | Legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR) |
| Statistics (Metricool) | Usage data and cookies | Consent via the cookie banner (Art. 6(1)(a) GDPR) |
| Interactive map (Google Maps) | IP address and technical data sent to Google only after manual activation | Consent by click (Art. 6(1)(a) GDPR) |
Service providers and data transfers
- Hosting: Hetzner Online GmbH (Germany, EU)
- Payment: Wero / banks (EU)
- Delivery: INFLOW S.A., a subsidiary of POST Luxembourg (Bettembourg, Luxembourg) – name, address and phone number for delivering the parcel
- Accounting: our accountant in Luxembourg (invoices only)
- Newsletter: MailPoet (run locally on our server; possible third-party services from Automattic Inc., USA)
- Statistics: Metricool Software S.L. (Spain, EU)
- Map: Google Ireland Limited / Google LLC (USA)
We do not sell any data. When you activate services such as Google Maps, data may be transferred to the United States. These transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Retention periods
- Order data and invoices: 10 years (Luxembourg legal accounting and tax obligation).
- Server logs: 7 to 30 days at most.
- Contact requests: 3 years after the last exchange.
- Newsletter: until you unsubscribe (via the link in every email).
Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time, simply by writing to info@hows.lu. You also have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux (cnpd.lu).