Privacy Policy

Last updated: 1st January 2026

Data Controller Information

The data controller for your personal information is magnatrixa SARL, a company registered in Luxembourg with registration number RCSB715826, located at Rue des Bains 34, 4404 Differdange, Luxembourg. For privacy-related enquiries, please contact us at privacy@magnatrixa.pro or call +352 23242482.

Data Collection

We collect personal data that you voluntarily provide to us when you use our services. The data we collect includes:

• Contact Information: Name, email address, phone number, company name, and postal address
• Business Information: Details about your spa business, equipment requirements, and budget considerations
• Communication Records: Content of your enquiries, consultation notes, and correspondence with our team
• Technical Information: IP address, browser type, device information, and website usage data

How We Use Your Information

We process your personal data for the following purposes, based on legitimate business interests and your consent:

• To provide spa equipment comparison and consultation services
• To respond to your enquiries and communicate with you about our services
• To prepare customised equipment recommendations and analysis reports
• To improve our services and website functionality
• To comply with legal obligations and maintain business records
• For marketing purposes, only with your explicit consent

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: legitimate interests for providing our services and responding to enquiries, contractual necessity for fulfilling service agreements, consent for marketing communications, and legal compliance for maintaining business records as required by Luxembourg law.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances: with trusted service providers who assist us in operating our business (subject to confidentiality agreements), when required by law or legal process, to protect our rights and interests, or with your explicit consent for specific purposes.

Data Retention

We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy. Typically, we retain contact information and communication records for up to 7 years after our last interaction, business and consultation records for up to 10 years for legal and tax purposes, and website analytics data for up to 26 months. You may request earlier deletion of your data, subject to our legal obligations.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure data transmission, access controls, regular security assessments, and staff training on data protection principles. However, no method of transmission over the internet is completely secure.

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In Luxembourg, the competent authority is the Commission Nationale pour la Protection des Données (CNPD). You may also contact the supervisory authority in your country of residence.

This Privacy Policy is governed by Luxembourg law and complies with the General Data Protection Regulation (GDPR) and applicable Luxembourg data protection legislation.