Data protection

Data Protection Notice for Customers

Parc Merveilleux S.A. is required to collect and process personal data voluntarily provided by customers (via contact forms, emails, etc.) as part of its activities. Parc Merveilleux S.A. is committed to complying with all applicable legal provisions concerning the protection of personal data.

Data Controller
The data controller responsible for processing the customer’s personal data is Parc Merveilleux S.A., located at L-3260 Bettembourg, Route de Mondorf, registered in the Luxembourg Trade and Companies Register under number B6833. Parc Merveilleux S.A. can be contacted by mail at the above address or by email at dpo@parc-merveilleux.lu.

Purpose and Legal Basis for Processing Personal Data
Parc Merveilleux S.A. will only process personal data that allows the customer to be identified, directly or indirectly, to the extent necessary for the following purposes:

1. The preparation and execution of the contract between the customer and Parc Merveilleux S.A.
2. Compliance with legal obligations to which Parc Merveilleux S.A. is subject.
3. Protection of the legitimate interests of Parc Merveilleux S.A. or a third party.
4. Processing carried out with the customer’s consent.

Recipients of Personal Data
The recipient of the customer’s personal data is Parc Merveilleux S.A.

However, personal data may be shared with third parties who are contractually engaged with Parc Merveilleux S.A. for the execution of subcontracted tasks. These third parties will only have limited access to the data and are required to comply with applicable data protection laws.

The sharing of personal data with other third parties is possible only with the customer’s consent.

Data Retention Period
The customer’s personal data will be retained for as long as necessary to fulfill the purposes mentioned above or until the customer withdraws their consent.

Throughout the retention period, Parc Merveilleux S.A. will implement appropriate technical and organizational measures to ensure the confidentiality and security of the data.

Customer Rights Regarding the Processing of Their Personal Data
The customer has the right to:

• Access, rectify, delete, and transfer their personal data.
• Restrict the processing of their personal data.
• Object to the processing of their personal data.

For personal data processing based on the customer’s consent, the customer may withdraw their consent at any time. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

The customer can exercise their rights by sending an email to dpo@parc-merveilleux.lu, in accordance with any contractual, legal, or regulatory obligations.

The customer also has the right to file a complaint with the Luxembourg data protection authority, the Commission Nationale pour la Protection des Données.