1. Introduction
StorageLux (operated by Ntera S.à r.l.) is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and Luxembourg law.
Data Controller: Ntera S.à r.l., trading as StorageLux
Contact: info@ntera.lu · +352 691 420 024
2. Data We Collect
We collect the following personal data when you use our services:
- Identity data: First name, last name
- Contact data: Email address, phone number, home address
- Location data: Pickup and delivery address, commune
- Service data: Booking details, service type, items stored, storage dates
- Payment data: Billing information (processed securely; we do not store card details)
- Communications: Emails, messages, and notes exchanged with our team
- Website usage data: Pages visited, browser type, IP address (via analytics)
3. How We Use Your Data
We use your personal data for the following purposes:
- Service delivery — To process bookings, schedule pickups and deliveries, and manage your stored items
- Account management — To maintain your customer account and storage inventory
- Billing — To generate invoices and process payments
- Customer support — To respond to enquiries and resolve issues
- Service improvements — To analyse usage and improve our operations
- Legal compliance — To meet our obligations under Luxembourg and EU law
We rely on contract performance as our primary legal basis for processing. Where we send marketing communications, we rely on your consent, which you may withdraw at any time.
4. Data Sharing
We do not sell your personal data. We may share your data with:
- Our team members — drivers, warehouse staff, and customer service
- Payment processors — for secure payment handling
- Cloud service providers — for website hosting and email delivery
- Legal authorities — where required by law
All third-party providers are contractually bound to protect your data and process it only as instructed by StorageLux.
5. Data Retention
We retain your personal data for as long as you remain a customer and for up to 5 years after your last transaction, as required by Luxembourg tax and accounting law. Marketing consent records are retained until consent is withdrawn.
6. Your Rights
Under GDPR, you have the following rights:
- Right of access — Request a copy of the data we hold about you
- Right to rectification — Request correction of inaccurate data
- Right to erasure — Request deletion of your data (subject to legal obligations)
- Right to portability — Receive your data in a structured, machine-readable format
- Right to object — Object to processing based on legitimate interests
- Right to withdraw consent — Withdraw marketing consent at any time
To exercise any of these rights, email info@ntera.lu. We will respond within 30 days.
You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg: cnpd.public.lu.
7. Cookies & Consent
StorageLux uses cookies in accordance with the EU ePrivacy Directive and GDPR. We distinguish between the following categories:
| Category | Purpose | Consent Required | Retention |
|---|---|---|---|
| Strictly Necessary | Booking form functionality, session security, CSRF protection | No (GDPR Recital 47) | Session only |
| Analytics | Understanding how visitors use our site (anonymised data) | Yes — opt-in only | Up to 26 months |
| Marketing | Relevant advertising on third-party platforms | Yes — opt-in only | Up to 90 days |
Consent storage: Your cookie preferences are stored in your browser's localStorage under the key sl_cookie_consent for 365 days. This record itself does not track you — it only stores your preference locally on your device.
Withdrawing consent: You can change or withdraw your cookie consent at any time by clicking "Cookie Settings" in the footer of any page on storagelux.lu, or by clearing your browser's local storage. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Legal basis: We rely on your freely given, specific, informed, and unambiguous consent (GDPR Article 6(1)(a)) for non-essential cookies. Strictly necessary cookies are processed under our legitimate interest in operating the website (GDPR Article 6(1)(f)).
8. Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be communicated to existing customers by email. The current version is always available at storagelux.lu/legal/privacy.html.