Privacy policy.
This policy explains what data we collect, how we use it, and your rights regarding data protection, in compliance with the GDPR.
Data controller
The data controller for your personal data is OwnTime.lu.
For any questions about this policy or your data, you can contact us at: mail@owntime.lu
Data we collect
We collect only the data strictly necessary:
Via the contact form
Technical data (browser)
Your language preference is stored in your browser's local storage (localStorage) under the key ot_lang. This data stays on your device and is not sent to our servers. No cookies are used.
Purpose of processing
Data submitted via the contact form is processed exclusively to:
- Contact you to schedule a personalised demonstration of the OwnTime platform.
- Answer your questions about our services.
- Assess your needs and tailor our offer to your business.
We do not process your data for marketing purposes without your explicit prior consent.
Legal basis
The processing of your data is based on your consent (Art. 6(1)(a) GDPR), expressed when submitting the contact form.
You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.
Retention period
Your data is retained for a maximum period of 12 months from the date of your request, or until you request its deletion.
After this period, or following a deletion request, your data is permanently erased from our systems.
Your rights
Under the GDPR, you have the following rights:
Right of access
Obtain a copy of your personal data held by OwnTime.
Right to rectification
Correct inaccurate or incomplete data relating to you.
Right to erasure
Request the deletion of your personal data (‘right to be forgotten’).
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to the processing of your data on legitimate grounds.
Right to withdraw consent
Withdraw your consent at any time, with no retroactive effect.
You also have the right to lodge a complaint with the CNPD (Commission Nationale pour la Protection des Données), the Luxembourg supervisory authority.
Data security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or accidental disclosure.
Data submitted via our contact form is transmitted over a secure connection (HTTPS).
Subprocessors
To operate, our site uses the following service providers who may process some of your data as subprocessors (Art. 28 GDPR):
Resend — Email delivery
Name, email address, phone number, business name and message — received when the contact form is submitted in order to deliver the email notification.
A Data Processing Agreement (DPA) is available at resend.com. Resend processes data in accordance with the GDPR.
No other third-party service is used by this site. Fonts and images are served from our own server: your browser contacts no external domain while you read these pages.
Contact us
To exercise your rights or for any questions about this privacy policy, contact us: