Last updated: 24-03-2026

1. Data Controller

The data controllers are: Elaine Lopes and Rui Lopes, Route de Luxembourg L-3243 Bettembourg – Luxembourg.

2. Data Collected

Depending on your use of the website, we may collect:

• Identity & contact: first name, last name, email, phone number, delivery/billing address;
• Order & payment: order details, history, information necessary for invoicing. (Card data is processed by our payment providers; we do not store it.)
• Customer account (if created): login details, preferences;
• Browsing data: IP address, device/browser type, pages visited, cookies/trackers;
• Support: exchanges via form/email.

3. Purposes and Legal Bases

We process your data to:

• Manage orders, payments, deliveries (contract performance);
• Customer service / after-sales (contract performance / legitimate interest);
• Legal obligations (accounting, invoicing, fraud prevention);
• Audience measurement / website improvement (consent or legitimate interest depending on tools);
• Marketing (newsletter, if activated) (consent, unsubscribe at any time).
  Mandatory information is indicated at the time of collection.

4. Recipients

Your data may be shared with:

• Technical service providers (hosting, maintenance);
• Payment providers (e.g. Stripe/PayPal/Google Pay depending on your settings);
• Carriers / logistics;
• Emailing and analytics tools.
  We do not sell your data.

5. Data Retention Period

• Order/invoicing data: legal retention period;
• Customer account: as long as the account is active;
• Support: time necessary for processing + archiving;
• Cookies: depending on their nature (see cookie policy).

6. Transfers outside the EU

Some service providers may process data outside the EEA. In such cases, we implement appropriate safeguards (standard contractual clauses, etc.).

7. Your Rights

You have the following rights: access, rectification, erasure, objection, restriction, portability, withdrawal of consent. You may also lodge a complaint with the competent authority (Luxembourg: CNPD).

8. Security

We implement technical and organizational measures to protect your data (restricted access, updates, etc.).

9. Contact

For any request: info@casulo.lu (subject: “GDPR – Casulo Sensory”).