Privacy policy

1. Data controller

Carrosserie Palanca Sàrl
36, Zone d'activité Z.A.R.E Ouest
L-4384 Ehlerange, Grand Duchy of Luxembourg
Telephone: (+352) 57 37 37
Email: info@palanca.lu

2. Data protection contact

For questions about the processing of your data or to exercise your rights, contact us at info@palanca.lu or at the postal address above.

3. Data processed when you visit

When you visit this website, the hosting infrastructure may process technical data sent by your browser. This can include your IP address, request date and time, requested page, referring page, browser type and version, operating system, host name, and HTTP status code. This data is used to deliver the website, maintain its operation, prevent misuse, and protect system security. This website does not use it to create advertising profiles.

4. Contact form, email and telephone

When you use our contact form, we process the information you provide, including your name, email address, phone number, and message. We use it to reply to your request, prepare a quote, or arrange an appointment. To prevent spam, the form uses a hidden input, temporary request limits per IP address, and automated content filters. If you contact us by email or telephone, we process the contact details and message you provide for the same purposes.

5. Purposes and legal bases

Depending on the circumstances, processing is based on:

• your consent under Article 6(1)(a) GDPR;
• pre-contractual steps or performance of a contract under Article 6(1)(b) GDPR;
• a legal obligation under Article 6(1)(c) GDPR; or
• our legitimate interests in operating, securing, and managing the website and our business under Article 6(1)(f) GDPR.

6. Cookies and local storage

This website does not currently use analytics, tracking, or marketing cookies. Your accessibility preferences are stored locally in your browser under a11y-settings.

These settings remain on your device and can be reset from the accessibility panel or removed through your browser settings.

7. Recipients and service providers

Personal data is available only to people who need it for the purposes described above. Technical providers, including hosting and email providers, may process data where necessary to provide their services. Data may also be disclosed where required by law or needed to perform a contract. We do not sell personal data.

8. Transfers outside the European Economic Area

If a service provider processes data outside the European Economic Area, the transfer must rely on an adequacy decision or appropriate safeguards under Articles 44 and following of the GDPR.

9. Retention

We retain personal data only for as long as needed for its purpose and to meet legal obligations. Enquiries are retained while they are handled. If they lead to a business relationship, commercial, accounting, and tax retention periods apply, generally between six and ten years. Technical log retention depends on the hosting infrastructure and is limited to operational and security needs.

10. Data security

We use technical and organisational measures appropriate to the risk to protect data against loss, alteration, destruction, or unauthorised access. HTTPS encrypts transmission between your browser and the website, although absolute security over the internet cannot be guaranteed.

11. Your rights

Subject to the conditions of the GDPR, you have the right to:

• access your data and obtain a copy;
• correct inaccurate or incomplete data;
• request erasure or restriction of processing;
• receive portable data where applicable;
• object to processing based on legitimate interests; and
• withdraw consent at any time without affecting earlier lawful processing.

Use the contact details in section 2 to exercise these rights.

12. Automated decisions and profiling

This website does not use automated decision-making or profiling that produces legal or similarly significant effects.

13. Right to complain

If you believe that your personal data has been processed in breach of the GDPR, you may lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD):

Commission nationale pour la protection des données
15, Boulevard du Jazz
L-4370 Belvaux, Grand Duchy of Luxembourg
Telephone: (+352) 26 10 60-1
Website: cnpd.public.lu

14. Changes to this policy

We may update this policy when the website, our services, or the legal framework changes. The current version is always the one published on this page.

Last updated: August 2026.