Privacy Policy

Last updated: August 19, 2026

STEFFEN TRAITEUR S.à r.l. attaches particular importance to the protection of your personal data and the respect of your privacy.

The purpose of this privacy policy is to inform you clearly and transparently about how your personal data is collected and processed when you use the website www.steffentraiteur.lu.

It specifies, in particular, what data may be collected, for what purposes, on what legal bases, how long it is retained, and what your rights are.


1. Data Controller

The data controller for personal data processing carried out within the framework of this website is:

STEFFEN TRAITEUR S.à r.l.

Limited liability company with a capital of €12,500

8, route d’Arlon
L-8410 Steinfort
Luxembourg

Luxembourg RCS: B98506
VAT No.: LU19935887

Telephone: (+352) 399 650 300
Email: traiteur@steffen.lu

In the course of its activities, STEFFEN TRAITEUR S.à r.l. determines the purposes and means of personal data processing implemented on the website.


2. Data That May Be Collected

Depending on your use of the website and your interactions with STEFFEN TRAITEUR S.à r.l., different categories of data may be collected.

2.1. Data directly provided by the user

When you use the forms on the website, particularly the contact form or quote request form, we may collect, among other things:

  • first name and last name;
  • email address;
  • phone number;
  • company or organization;
  • position;
  • postal address;
  • country;
  • information related to the planned event;
  • number of participants;
  • event date and times;
  • type of service sought;
  • event location;
  • reason or nature of the request;
  • any information you freely choose to provide in the message field or additional information field.

We invite you to communicate only the information necessary for your request in the free-text fields and not to transmit sensitive data or information concerning third parties when it is not necessary.

2.2. Technical Data

When you browse the website, certain technical data may also be collected automatically, including:

  • IP address;
  • connection date and time;
  • browser type and version;
  • operating system;
  • device used;
  • pages viewed;
  • information related to browsing and website operation;
  • data related to cookies and similar technologies, in accordance with your consent choices.

This data may be necessary for the operation, security, and maintenance of the website.

The collection and use of data for statistical or audience measurement purposes depend on the tools actually installed on the website and, where required by regulations, on your consent.


3. Purposes of Processing

Your data may be processed for the following purposes:

Management of contact requests

Data transmitted via forms may be used to:

  • respond to your requests;
  • contact you about your request;
  • provide you with the requested information;
  • ensure follow-up of exchanges.

Management of quote and event requests

When you request a commercial proposal, the information provided may be used to:

  • understand your needs;
  • prepare a suitable proposal;
  • evaluate the characteristics of your event;
  • contact you to clarify your request;
  • ensure commercial follow-up of your project;
  • prepare, if applicable, the conclusion and execution of a contract.

Management of the commercial relationship

When necessary, your data may be used to ensure the follow-up of the commercial relationship, particularly before, during, and after the provision of a service.

Website security and operation

Certain technical data may be processed to:

  • ensure website security;
  • detect and prevent fraudulent access attempts;
  • guarantee its proper functioning;
  • diagnose technical problems;
  • ensure its maintenance.

Audience measurement and website improvement

When audience measurement tools are used, data may be processed to understand how visitors use the website and to improve its content, ergonomics, and performance.

When consent is required, these processing operations are only implemented after obtaining your consent via the cookie manager.

Compliance with legal obligations

Certain data may also be processed when necessary to comply with a legal or regulatory obligation applicable to STEFFEN TRAITEUR S.à r.l.


4. Legal Bases for Processing

Depending on the purpose pursued, data processing is based on different legal bases provided for by Regulation (EU) 2016/679 (“GDPR”).

Performance of pre-contractual measures or a contract

When you contact us to obtain a quote or prepare a service, the processing of your data may be necessary for the performance of pre-contractual measures taken at your request or for the performance of a contract.

Consent

Certain processing operations are based on your consent, particularly when it is required for the use of certain cookies, tracking technologies, or audience measurement tools.

You can withdraw your consent at any time according to the procedures indicated in the website’s cookie manager.

The withdrawal of consent does not affect the lawfulness of processing carried out before this withdrawal.

Legal obligation

Certain data may be processed when necessary to comply with a legal obligation applicable to STEFFEN TRAITEUR S.à r.l.

Legitimate interest

Certain processing operations may also be based on the legitimate interest of STEFFEN TRAITEUR S.à r.l., particularly to ensure website security, prevent abuse, manage received requests, and improve its services, provided that the rights and freedoms of the data subjects are not disproportionately affected.


5. Mandatory or Optional Nature of Data

Mandatory fields in forms are indicated as such.

The information requested in these fields is necessary to enable STEFFEN TRAITEUR S.à r.l. to process your request.

If you do not provide the necessary information, we may not be able to respond to your request or prepare a suitable proposal.

Optional information may be freely provided and, if applicable, allows us to better understand your request.


6. Recipients of Data

Your data is primarily intended for authorized personnel within STEFFEN TRAITEUR S.à r.l. who need to know it to process your request or manage the commercial relationship.

It may also be communicated, to the extent necessary for the performance of their duties, to certain technical service providers acting on behalf of STEFFEN TRAITEUR S.à r.l., particularly in the following areas:

  • website hosting;
  • IT maintenance and development;
  • IT security;
  • technical management of the website;
  • sending and receiving emails;
  • tools necessary for website operation.

These service providers act only within the framework of STEFFEN TRAITEUR S.à r.l.’s instructions when they act as processors and are subject to applicable data protection obligations.

Your data is not sold or rented to third parties.


7. Hosting and Technical Service Providers

The site is hosted by:

o2switch

Chemin des Pardiaux
63000 Clermont-Ferrand
France

SIRET: 510 909 807 00032
RCS Clermont-Ferrand
SAS with a capital of €100,000

o2switch states that it operates its own infrastructure and hosts data in France.

As part of its hosting services, o2switch may process certain technical data and connection data necessary for the operation and security of the infrastructure. The conditions and terms applicable to this processing are specified in its data protection documentation.

The site was designed and developed by:

Thibaut Marquis
Website: tmarquis.fr

and

Yann Sainty
Website: yann-sainty.com

These service providers may, as part of their technical interventions, access certain data necessary for the maintenance, development, or security of the website.


8. Retention Period

STEFFEN TRAITEUR S.à r.l. retains personal data only for the period necessary to achieve the purposes for which it was collected, subject to legal obligations requiring a longer retention period.

By way of indication:

Contact requests

Data related to a contact request is retained for the time necessary to process and follow up on the request.

If no commercial relationship is established, it may then be deleted or archived in accordance with applicable internal retention rules.

Quote requests

Data necessary for the preparation and follow-up of a quote is retained for the period necessary for the management of the pre-contractual relationship and then, when necessary, for the periods applicable to the commercial relationship and legal obligations.

Data necessary for legal obligations

Certain data may be retained for the period imposed by applicable legal or regulatory provisions.

Technical data and connection logs

Certain technical data may be retained for a limited period necessary for the security, operation, and maintenance of the website or for compliance with applicable legal obligations.

Cookies

The retention and operation periods for cookies and similar technologies are specified in the Cookie Policy and in the consent manager accessible from the website.


9. Cookies and Similar Technologies

The website uses cookies and similar technologies necessary for its operation and may, depending on the activated functionalities, use cookies for audience measurement purposes or for other functionalities.

When your consent is required, the cookies concerned are only placed after your choice in the consent manager.

You can modify or withdraw your consent at any time using the cookie manager accessible from the website.

For more information on the cookies used, their purposes, their retention period, and any third parties involved, please consult our Cookie Policy.


10. Data Security

STEFFEN TRAITEUR S.à r.l. implements appropriate technical and organizational measures to protect personal data against, in particular:

  • accidental or unlawful destruction;
  • loss;
  • alteration;
  • unauthorized disclosure;
  • unauthorized access;
  • any other form of unlawful processing.

Access to data is limited to individuals and service providers who need it in the course of their duties or missions.

Despite the measures implemented, no computer system or method of transmission over the Internet can guarantee absolute security.


11. Data Transfers Outside the European Economic Area

STEFFEN TRAITEUR S.à r.l. prioritizes, where possible, service providers and infrastructures that process data within the European Union or the European Economic Area.

If certain services used on the website involve a transfer of data to a country outside the European Economic Area, STEFFEN TRAITEUR S.à r.l. ensures that this transfer is governed in accordance with GDPR requirements, particularly by an adequacy decision of the European Commission or by appropriate safeguards where necessary.

The list of third-party services actually used on the website can be consulted in the Cookie Policy and the consent manager when these services use cookies or similar technologies.


12. Your Rights

In accordance with applicable data protection regulations, you have the following rights, depending on the circumstances and conditions provided by the GDPR:

Right of access

You can request confirmation that your data is being processed and, if applicable, obtain a copy of the personal data concerning you.

Right to rectification

You can request the correction of inaccurate or incomplete data.

Right to erasure

You can request the deletion of your data when the conditions provided for by the regulations are met.

Right to restriction of processing

You can request the restriction of the processing of your data in the cases provided for by the GDPR.

Right to object

You can object to certain processing operations based on the legitimate interest of STEFFEN TRAITEUR S.à r.l., subject to the conditions provided for by the regulations.

Right to data portability

Where this right is applicable, you can request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or request its transmission to another data controller.

Right to withdraw your consent

Where processing is based on your consent, you can withdraw it at any time.

The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.


13. Exercising Your Rights

To exercise your rights or for any questions regarding the processing of your personal data, you can contact STEFFEN TRAITEUR S.à r.l.:

By email:
traiteur@steffen.lu

By mail:

STEFFEN TRAITEUR S.à r.l.
Attention: Data Protection Officer
8, route d’Arlon
L-8410 Steinfort
Luxembourg

In order to protect the data of data subjects, STEFFEN TRAITEUR S.à r.l. may be required to request additional information to verify the identity of the applicant when necessary.

STEFFEN TRAITEUR S.à r.l. strives to respond to requests within the deadlines provided by applicable regulations.


14. Complaint to the Supervisory Authority

If you believe that the processing of your personal data constitutes a violation of applicable regulations, you have the right to lodge a complaint with the competent supervisory authority.

In Luxembourg, the competent authority is:

National Commission for Data Protection (CNPD)

15, Boulevard du Jazz
L-4370 Belvaux
Luxembourg

Website: cnpd.lu

You can contact the CNPD, in particular, if you believe that your rights have not been respected after contacting STEFFEN TRAITEUR S.à r.l.


15. Data Concerning Third Parties

When you transmit information concerning another person to STEFFEN TRAITEUR S.à r.l., particularly in the context of organizing an event, you undertake to communicate only the information necessary for the purpose pursued and, where required, to have previously informed the person concerned.

You must not transmit sensitive data or particularly confidential information via the website that is not necessary for processing your request.


16. Data of Minors

The website is not intended to directly collect data concerning minors.

When data concerning minor participants is necessary for the organization of an event, its processing is carried out within the framework of the service concerned and according to the terms applicable to that service.


17. Links to Third-Party Sites

The website may contain links to sites or services operated by third parties.

STEFFEN TRAITEUR S.à r.l. is not responsible for the data protection practices of these third-party sites.

We invite you to consult their own privacy policies before transmitting personal data to them.


18. Modification of this Policy

This privacy policy may be modified at any time to take into account, in particular:

  • changes in legislation and regulations;
  • recommendations from supervisory authorities;
  • changes in the services offered on the website;
  • the implementation or modification of technical service providers;
  • changes in data processing carried out by STEFFEN TRAITEUR S.à r.l.

The version published on the website is the version applicable on the date of consultation.

The date of the last update appears at the top of this page.


19. Additional Documents

For additional information, you can also consult:

  • Legal Notice
  • Cookie Policy
  • the consent manager accessible from the website.

STEFFEN TRAITEUR S.à r.l.
8, route d’Arlon
L-8410 Steinfort
Luxembourg

RCS Luxembourg: B98506
VAT No.: LU19935887
Tel. : (+352) 399 650 300
Email: traiteur@steffen.lu