Privacy Policy

Last Updated: 1st January 2026

Effective Date: 1st January 2026

Introduction

tavonexri.top SARL ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website tavonexri.top or use our services.

Data Controller Information

The data controller for your personal information is tavonexri.top SARL, a company registered in Luxembourg with registration number RCSB963258, VAT number LU96142584, and registered address at Rue Chimay 4, 3499 Dudelange, Luxembourg.

Data We Collect

We may collect and process the following categories of personal data about you:

  • Contact Information: Name, email address, phone number, postal address
  • Business Information: Company name, job title, industry details
  • Communication Data: Records of correspondence and enquiries
  • Technical Data: IP address, browser type, device information, operating system
  • Usage Data: Information about how you use our website and services
  • Marketing Data: Your preferences for receiving marketing communications

How We Use Your Information

We use your personal data for the following purposes and under the following legal bases:

  • Service Provision: To provide our spa guest experience optimisation services (Legal basis: Contract performance)
  • Communication: To respond to your enquiries and provide customer support (Legal basis: Legitimate interests)
  • Marketing: To send you relevant information about our services with your consent (Legal basis: Consent)
  • Legal Compliance: To comply with legal obligations and protect our rights (Legal basis: Legal obligation)
  • Website Improvement: To analyse website usage and improve our services (Legal basis: Legitimate interests)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Third-party companies that provide services on our behalf (e.g., hosting, analytics, email marketing)
  • Legal Authorities: When required by law or to protect our legal rights
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Contact information is typically retained for 3 years after last contact, whilst marketing data is retained until you withdraw consent.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Request transfer of your data to another organisation
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing communications

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) if you believe we have not handled your personal data in accordance with applicable law. Contact details: CNPD, 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette, Luxembourg.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Luxembourg and the European Union, including the General Data Protection Regulation (GDPR).