PRIVACY POLICY

Preamble

G&W Experiences Sàrl-S places particular importance on respecting your privacy and protecting your personal data. This privacy policy aims to inform you clearly about how your data is collected, used, and protected during your navigation on our site and your purchases. G&W Experiences Sàrl-S reserves the right to modify this policy at any time. It is recommended to consult it regularly.

Data Controller

The data controller is G&W Experiences Sàrl-S, located at 144 Z.A.E. Wolser A, L-3225 Bettembourg, Luxembourg, RCS: B298517, VAT: LU36934483, Email: gw-experiences@outlook.com, Telephone: +352 661 81 68 86.

Types of Data Collected

Data Provided Voluntarily
When using the site, we may collect the following information: First and last name, billing address, shipping address, email address, phone number, and payment information. This data is collected notably during the creation of a customer account, the placing of an order, or a request via the contact form.

Data Collected Automatically
Certain data is collected automatically during your navigation: IP address, browser type, operating system, pages visited, and duration of visit. This data is used for statistical and security purposes.

Purposes of Processing

Personal data is used to process and deliver your orders, manage payments and billing, communicate with you (customer service, notifications), improve the site and user experience, ensure site security, and send marketing communications if accepted.

Legal Basis for Processing (GDPR)

Processing is based on your consent, performance of a contract, legal obligations, or the legitimate interest of the company.

Data Transmission

Your data may be transmitted only to necessary service providers. For delivery, this includes Post Luxembourg, DHL, or G&W Experiences internal service, transmitting name, address, and phone number. For payment, this includes PayPal, banking providers, and Shopify Payments. These providers have their own privacy policies. No data is sold or transferred to third parties.

Transfer Outside the EU

Certain data may be transferred outside the European Union (e.g., cloud services, analytical tools). In this case, these transfers are framed by guarantees compliant with the GDPR.

Retention Period

Data is retained only for the time necessary: customer data for up to 7 years due to accounting obligations, marketing data until a request for deletion, and technical data for a limited duration.

Data Security

G&W Experiences implements all reasonable measures to protect your data, including secure hosting, SSL encryption, and limited access to data. Since no Internet transmission is totally secure, a residual risk remains.

User Rights

In accordance with the GDPR, you have the following rights: right of access, right of rectification, right of deletion, right of opposition, and right to portability. Any request can be sent to: gw-experiences@outlook.com

Cookies

The site uses cookies to ensure its proper functioning, analyze traffic, and improve the user experience. Types of cookies used include necessary cookies, analytical cookies, and functional cookies. You can disable cookies via your browser settings. Some features of the site may then no longer function correctly.