Privacy Policy

This privacy policy explains how grendolavi.top SARL collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Last updated: January 2026

Data Controller Information

The data controller for your personal information is:

• Company: grendolavi.top SARL
• Registration Number: RCSB297364
• Address: Rue Aldringen 119, 4979 Differdange, Luxembourg
• Email: [email protected]
• Phone: +352 26183479

Data We Collect

We collect and process various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us and information we collect automatically through your use of our website.

Information You Provide to Us

When you contact us through our website forms, request information, or engage our services, we may collect:

• Name and contact details (email address, phone number)
• Company or restaurant name and business information
• Messages and enquiries you send to us
• Service preferences and requirements
• Any other information you choose to provide

Information We Collect Automatically

When you visit our website, we automatically collect certain technical information:

• IP address and location data
• Browser type and version
• Device information and operating system
• Pages visited and time spent on our website
• Referring website and exit pages
• Date and time of visits

How We Use Your Information

We use of your data is based on legitimate business interests, contractual necessity, and your consent where required. We process your personal information for the following purposes:

Service Provision

• Responding to your enquiries and providing requested information
• Delivering our supply chain management services
• Managing client relationships and communications
• Processing service requests and consultations

Website Operation

• Ensuring website functionality and security
• Improving user experience and website performance
• Providing customer support and technical assistance

Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Protecting our rights and interests
• Preventing fraud and ensuring security

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interests: For business communications, website analytics, and service improvement
• Contract Performance: To provide requested services and fulfil contractual obligations
• Consent: For marketing communications and non-essential cookies
• Legal Obligations: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your data in the following limited circumstances:

• With service providers who assist in website operation and business functions
• When required by law or to protect our legal rights
• In connection with a business transfer or merger
• With your explicit consent for specific purposes

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Our standard retention periods are:

• Contact enquiries: 3 years from last contact
• Client data: Duration of business relationship plus 7 years
• Website analytics: 26 months maximum
• Marketing data: Until consent is withdrawn

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold
• Right of Rectification: Correct inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Oppose processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at [email protected] or +352 26183479. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure data transmission using encryption
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection practices

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

Children's Privacy

Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided personal data to us, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website with a new "last updated" date.

Contact Information

If you have any questions about this privacy policy or our data protection practices, please contact us:

• Email: [email protected]
• Phone: +352 26183479
• Post: grendolavi.top SARL, Rue Aldringen 119, 4979 Differdange, Luxembourg

Supervisory Authority

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority. In Luxembourg, this is the Commission Nationale pour la Protection des Données (CNPD).