Privacy Policy

An overview of data protection

General information


The following information provides a simple overview of how we process your personal data when you visit and use our website. Personal data refers to any information that can be used to identify you personally.


Detailed information on data protection can be found in the sections below.


Data Controller

The data controller responsible for processing personal data on this website is:

Bright a.s.b.l.
N°: F14126
2, coin d'Espagne
Hesperange 5976
 
Email: contact@brightasbl.lu


The data controller is the entity that determines the purposes and means of processing personal data.


Depending on the processing activity, we rely on the following legal bases:

- Consent (Art. 6(1)(a) GDPR)

- Contract performance (Art. 6(1)(b) GDPR)

- Legitimate interests (Art. 6(1)(f) GDPR)

Data collection on our website


How do we collect your data?

We collect personal data in two ways:

• Data you provide to us voluntarily, for example when you fill out a contact form or subscribe to our newsletter.  

• Data collected automatically when you visit our website, such as technical data (e.g. browser type, operating system, time of access).


What do we use your data for?

Some data are collected to ensure the proper functioning of the website. Other data are used to analyze user behavior and improve our services, subject to your consent where required.


What rights do you have regarding your data?

You have the right to request information about your stored personal data, its origin, recipients, and purpose. You also have the right to request correction, restriction, or deletion of your data. You may withdraw your consent at any time with effect for the future. You also have the right to lodge a complaint with the competent supervisory authority in Luxembourg (Commission Nationale pour la Protection des Données – CNP).

Analytics and third-party tools

We use analytics tools to understand how visitors interact with our website and to improve our services. These tools are only used with your consent, where required.


Matomo (self-hosted analytics)

This website uses Matomo, an open-source web analytics tool. Matomo is configured to respect your privacy:

- IP addresses are anonymized

- Data is stored on our own servers

- No data is shared with third parties


The use of Matomo is based on our legitimate interest in improving our website (Art. 6(1)(f) GDPR), unless consent is required under applicable law

You can object to the processing of your data at any time by adjusting your browser settings or via the cookie settings on our website.


---


Cookies

Our website uses cookies to ensure proper functionality and to improve user experience.

Cookies are small text files stored on your device.

We use:

- Essential cookies (necessary for the operation of the website)

- Analytics cookies are only set with your prior consent in accordance with Art. 6(1)(a) GDPR and applicable ePrivacy rules.


You can withdraw your consent at any time via the cookie banner or cookie settings on our website.


---


Server log files

The hosting provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This includes:

- Browser type and version  

- Operating system  

- Referrer URL  

- Hostname of the accessing computer  

- Time of the server request  

- IP address  


These data are not combined with other data sources. 

The processing is based on our legitimate interest in ensuring the technical stability and security of the website (Art. 6(1)(f) GDPR).


---


Contact form

If you contact us via the contact form, we will process the data you provide (e.g. name, email, message) in order to handle your request.

The processing is based on your consent (Art. 6(1)(a) GDPR).

You may withdraw your consent at any time.

We retain your data for a maximum of 12 months after your request has been processed, unless legal obligations require longer retention.


---


Newsletter

If you subscribe to our newsletter, we will process your email address to send you updates.

The processing is based on your consent (Art. 6(1)(a) GDPR).

You can unsubscribe at any time using the link in the newsletter.

Your data will be deleted after you unsubscribe, unless legal obligations require otherwise.


---


Embedded content and external services

Our website may include embedded content from third-party services such as YouTube.

When you interact with such content, personal data (e.g. your IP address) may be transmitted to the provider.

These providers may be located outside the European Union. In such cases, data transfers are carried out in accordance with applicable data protection laws, including appropriate safeguards such as standard contractual clauses.

For more information, please refer to the privacy policies of the respective providers.


Last updated: March 2026