GDPR Compliance
Last Updated: March 29, 2026
Our Commitment to GDPR Compliance
Luxbrook is committed to full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, which came into effect on May 25, 2018.
Data Controller
Luxbrook acts as the data controller for personal data collected through luxbrook.com. For GDPR-related inquiries, contact our Data Protection contact at: gdpr@luxbrook.com
Legal Bases for Processing
We process personal data under the following legal bases as defined in Article 6 GDPR:
- ·Article 6(1)(a) — Consent: Newsletter subscriptions, non-essential cookies
- ·Article 6(1)(b) — Contract: Processing digital product purchases
- ·Article 6(1)(f) — Legitimate Interests: Site analytics, fraud prevention, security
Your Rights Under GDPR
As a data subject in the EEA, you have the following rights under Articles 15–22 GDPR:
Article 15 — Right of Access: You may request a copy of all personal data we hold about you.
Article 16 — Right to Rectification: You may request correction of inaccurate or incomplete personal data.
Article 17 — Right to Erasure: You may request deletion of your personal data where there is no compelling reason for continued processing.
Article 18 — Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
Article 20 — Right to Data Portability: You may request your personal data in a structured, machine-readable format.
Article 21 — Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
Article 22 — Automated Decision-Making: We do not make decisions based solely on automated processing that produce significant legal effects.
How to Exercise Your Rights
Submit a data subject request to: gdpr@luxbrook.com
We will respond within 30 days. We may request verification of your identity before processing your request. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.
International Data Transfers
Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.
Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority. For EU residents, a list of supervisory authorities is available at: edpb.europa.eu
Contact
Data Protection inquiries: gdpr@luxbrook.com
