Privacy Policy

Introduction

velorantia.top SARL ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at velorantia.top or use our restaurant supplier negotiation services.

As a company based in Luxembourg and operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller Information

The data controller responsible for your personal data is:

Data Collection

The data we collect includes personal information that you provide to us directly and information we collect automatically when you use our website. We collect the following types of personal data:

Information You Provide

• Contact information (name, email address, phone number)
• Business information (restaurant name, type of cuisine, location)
• Communication preferences and enquiry details
• Contract documents and supplier information (when using our services)
• Feedback and correspondence with our team

Information Collected Automatically

• IP address and location data
• Browser type and version
• Device information and operating system
• Website usage patterns and page views
• Referral sources and search terms

How We Use Your Information

We use your personal data for the following purposes, based on legitimate business interests and your consent where required:

Service Provision

• Providing restaurant supplier negotiation guidance and consultation services
• Reviewing and analysing supplier contracts
• Developing customised negotiation strategies
• Communicating about your service requirements and project progress

Business Operations

• Processing enquiries and responding to contact requests
• Managing client relationships and providing customer support
• Improving our services and website functionality
• Ensuring legal and regulatory compliance

Marketing and Communications

With your consent, we may use your information to send you relevant updates about our services, industry insights, and promotional materials. You can opt out of marketing communications at any time.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• With trusted service providers who assist us in operating our business (subject to confidentiality agreements)
• When required by law or to comply with legal proceedings
• To protect our rights, property, or safety, or that of others
• In connection with a business transfer or merger (with appropriate safeguards)

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. The retention periods vary depending on the type of data and the purpose for which it was collected:

• Contact enquiries: 3 years from last contact
• Client service records: 7 years after service completion
• Website analytics data: 26 months
• Marketing consent records: Until consent is withdrawn

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: Request information about the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another service provider
• Right to object: Object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure backup and recovery procedures

International Data Transfers

We primarily process your data within the European Economic Area (EEA). If we need to transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) if you believe we have not handled your personal data in accordance with applicable laws.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent: For marketing communications and certain cookie usage
• Contract performance: To provide our negotiation services
• Legitimate interests: For business operations, website improvement, and client relationship management
• Legal obligation: To comply with applicable laws and regulations