Last updated: JAN 2025
Your privacy matters. At Grand Format, we are committed to protecting the personal data of our website users, clients, and partners in accordance with European data protection regulations, particularly the General Data Protection Regulation (GDPR – Regulation EU 2016/679). This policy explains how we collect, use, store, and protect your data, and how we manage cookies on our website.
1. Data Controller
The entity responsible for processing your personal data is:
Grand Format
Email: hello@grand-format.lu
Address: 8, rue le Bataclan – L-4374 Esch/Belval – Luxembourg
Company registration number: B215316 / TVA : LU29488831
Represented by: Simon Cabrejo
As the data controller, Grand Format is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.
2. What Personal Data We Collect
We only collect data that is strictly necessary for the purposes listed below. The data may be collected directly through forms on our site or indirectly via cookies and analytics tools.
Data collected may include:
- Identification data: full name, company name, role/title
- Contact information: email address, phone number
- Browsing data: IP address, browser type, pages visited, duration of visit
- Project-related information: when you submit a request or form
- Marketing preferences: opt-in or opt-out status for communications
We do not collect any sensitive personal data (e.g. health, political views, religious beliefs, etc.).
3. Purposes of Data Processing
We process personal data for the following purposes, based on specific legal grounds:
a) Responding to inquiries and contact requests
To process and respond to messages submitted via our online contact form or by email.
Legal basis: Legitimate interest or consent.
b) Service proposal or commercial relationship
To create proposals, follow-up on discussions, or manage pre-contractual or contractual interactions.
Legal basis: Contractual necessity or legitimate interest.
c) Site usage analysis and performance improvement
To measure site performance and improve user experience based on browsing data.
Legal basis: Legitimate interest or consent (for non-essential cookies).
d) Marketing and communication
To send occasional updates, insights, or promotional content if you have given your consent.
Legal basis: Consent.
e) Legal compliance
To comply with legal obligations or respond to official requests.
Legal basis: Legal obligation.
4. Legal Basis for Processing
Each type of data processing is based on one of the following legal grounds:
- Your explicit consent, given via forms or the cookie banner
- The performance of a contract or pre-contractual measures
- Our legitimate interest in improving our services and protecting our site
- Compliance with legal obligations, such as tax or audit requirements
You may withdraw your consent at any time, without affecting the lawfulness of prior processing.
5. Data Retention Period
We retain your data only for the time necessary to fulfill the purpose for which it was collected, in line with GDPR principles:
| Data type | Retention period |
|---|---|
| Contact form submissions | 3 years after last contact |
| Client/project data | Duration of the business relationship + 5 years |
| Analytics & cookies | 13 months maximum |
| Newsletter subscription data | Until unsubscribed or after 3 years of inactivity |
After the expiration of these periods, your data will be anonymized or deleted.
6. Data Recipients
Your data is strictly confidential. It may be shared with:
- Authorized internal staff of Grand Format
- Trusted service providers (hosting, analytics, CRM), located in the EU or in countries offering adequate protection
- Legal authorities, if required by applicable laws or legal procedures
Under no circumstances will your data be sold or rented to third parties.
7. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate or outdated data
- Erase your data (« right to be forgotten »)
- Restrict or object to processing
- Port your data to another provider
- Withdraw your consent at any time (for marketing or cookies)
To exercise these rights, please email us at [hello@grand-format.lu] with proof of identity. We will respond within one month as required by law.
If you believe your data protection rights have been violated, you may contact the CNPD Luxembourg or another supervisory authority.
8. Cookies Policy
What are cookies?
Cookies are small text files stored on your device when you visit a website. They allow the site to recognize your browser and improve your experience.
What cookies do we use?
| Cookie Type | Purpose | Duration | Consent Required |
|---|---|---|---|
| Essential cookies | Ensure site functionality (forms, navigation, security) | Session | No |
| Performance cookies | Collect anonymous data to improve user experience | 13 months | Yes |
| Marketing cookies | Track behavior for advertising and remarketing | 13 months | Yes |
Upon your first visit, a cookie banner allows you to accept, refuse, or customize your cookie preferences. You can also change your preferences at any time via the « Manage Cookies » link in the footer.
9. Data Security
We take data protection seriously. We implement appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of your personal data, including:
- HTTPS secure connection
- Access restrictions to personal data
- Regular backups and updates
- Staff awareness and confidentiality policies
10. Updates to This Policy
This Privacy & Cookie Policy may be updated at any time to reflect changes in laws, services, or technologies. Any changes will be published on this page with a new effective date.
We encourage you to consult this page regularly.