Privacy Policy for bllld.lu
Last Updated: May 3, 2025
At bllld.lu, we value your privacy and are dedicated to protecting your personal information. This Privacy Policy outlines how we collect, use, store, share, and protect your data when you interact with our website (www.bllld.lu), use our real estate or property management services, or contact us. As a Luxembourg-based company, we adhere to the General Data Protection Regulation (GDPR) and Luxembourg’s data protection regulations to ensure transparency and security in our data practices.
This policy applies to all users, including website visitors, clients, prospective clients, and partners who engage with bllld.lu. By using our services or website, you acknowledge and agree to the practices described in this policy.
1. Information We Collect
We collect personal and non-personal information to provide and improve our services. The types of information we collect include:
1.1 Information You Provide
Personal Details: Full name, email address, phone number, postal address, and date of birth (if required for contracts or identity verification) when you:
Inquire about properties for sale or rent.
Request property viewings or consultations.
Sign up for newsletters or marketing communications.
Enter into a purchase, rental, or service agreement.
Financial Information: Bank account details, credit card information, or other payment details for processing transactions, such as deposits, rental payments, or property purchases.
Property Preferences: Details about your housing needs, such as preferred location, property type (e.g., apartment, house, studio), budget, and specific requirements (e.g., pet-friendly, furnished).
Documents: Copies of identification documents, proof of income, or other records required for legal or contractual purposes, such as anti-money laundering checks or mortgage applications.
Feedback and Correspondence: Information shared through contact forms, emails, surveys, or customer support interactions.
1.2 Information Collected Automatically
Website Usage Data: When you visit www.bllld.lu, we collect:
IP address, browser type, operating system, and device information.
Pages visited, time spent on pages, and click patterns.
Referral sources (e.g., how you arrived at our website).
This data is collected via cookies, web beacons, and similar technologies (see Section 8 for details).
Analytics Data: Aggregated and anonymized data on user behavior to understand trends and optimize our website and services.
Geolocation Data: Approximate location based on your IP address to tailor property suggestions to your region (only with your consent).
1.3 Information from Third Parties
Partners and Service Providers: We may receive data from real estate partners, such as property developers or listing platforms, when you express interest in properties listed through bllld.lu.
Public Sources: Information from public records, such as property registries, to verify ownership or transaction details.
Credit Agencies: Credit reports or financial background checks, where necessary for rental or purchase agreements, with your explicit consent.
2. How We Use Your Information
We process your personal information for the following purposes:
Service Delivery:
To provide property listings, schedule viewings, and facilitate purchases or rentals.
To process payments, issue invoices, and manage contracts.
To personalize property recommendations based on your preferences.
Customer Support:
To respond to inquiries, complaints, or requests via email, phone, or our website.
To provide ongoing support for tenancy or property management services.
Marketing and Communication:
To send newsletters, property alerts, or promotional offers about new listings or services (only with your consent).
To inform you about market trends, events, or updates relevant to real estate in Luxembourg.
Website Improvement:
To analyze website performance and user behavior to enhance functionality and user experience.
To troubleshoot technical issues and ensure the security of our platform.
Legal and Compliance:
To comply with Luxembourg’s tax, anti-money laundering, and property transaction laws.
To verify identities and prevent fraud or unauthorized activities.
To maintain records as required by law (e.g., for tax audits).
Business Operations:
To manage client relationships and improve our service offerings.
To conduct internal audits, data analysis, and research to refine our business processes.
3. Legal Basis for Processing
We process your personal information based on the following legal grounds under GDPR:
Contractual Necessity (Art. 6(1)(b)): To fulfill agreements, such as processing a property purchase, rental contract, or service request.
Consent (Art. 6(1)(a)): For optional activities, such as sending marketing emails, using non-essential cookies, or collecting geolocation data. You may withdraw consent at any time (see Section 7).
Legal Obligation (Art. 6(1)(c)): To comply with Luxembourg and EU laws, including tax reporting, anti-money laundering checks, and property transaction regulations.
Legitimate Interests (Art. 6(1)(f)): For purposes like improving our website, preventing fraud, or ensuring network security, provided these interests do not override your rights.
Vital Interests (Art. 6(1)(d)): In rare cases, to protect your safety or that of others (e.g., emergency contact information).
4. Sharing Your Information
We may share your personal information with trusted third parties under strict confidentiality agreements. These include:
Service Providers:
Payment processors (e.g., banks, credit card companies) to handle transactions.
IT providers for website hosting, cloud storage, or analytics.
Marketing platforms to manage newsletters or campaigns (with your consent).
Real Estate Partners:
Notaries, for drafting and registering property deeds.
Property developers or landlords, to coordinate viewings or agreements.
Mortgage brokers or banks, to facilitate financing (with your consent).
Legal and Regulatory Authorities:
Luxembourg tax authorities, for compliance with fiscal obligations.
Law enforcement or regulatory bodies, to comply with legal requests or prevent fraud.
Professional Advisors:
Lawyers or accountants, for legal or financial advice related to transactions.
We do not sell, rent, or share your personal information for marketing purposes with third parties without your explicit consent. All third parties we work with are required to comply with GDPR and protect your data.
5. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), such as to a non-EEA service provider, we ensure appropriate safeguards, including:
Standard Contractual Clauses: Legally binding agreements approved by the European Commission.
Adequacy Decisions: Transfers to countries recognized by the EU as having adequate data protection laws.
Binding Corporate Rules: For intra-group transfers, where applicable.
We take all reasonable steps to ensure your data is processed securely and in accordance with this policy.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specific retention periods include:
Transactional Data: Retained for 10 years to comply with Luxembourg tax and accounting laws.
Contractual Data: Kept for the duration of the contract plus 5 years to address potential disputes or legal claims.
Marketing Data: Retained until you unsubscribe or withdraw consent, after which it is deleted within 30 days.
Website Usage Data: Typically retained for 12 months for analytics, then anonymized or deleted unless required for legal purposes.
Identification Documents: Kept for the duration required by anti-money laundering laws (usually 5 years after the end of the business relationship).
When data is no longer needed, it is securely deleted or anonymized.
7. Your Rights
As a data subject under GDPR, you have the following rights regarding your personal information:
Right to Access: Request a copy of the data we hold about you.
Right to Rectification: Correct inaccurate or incomplete information.
Right to Erasure (“Right to be Forgotten”): Request deletion of your data, where no legal basis for retention exists.
Right to Restrict Processing: Limit how we use your data in certain circumstances.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Data Portability: Receive your data in a structured, machine-readable format or have it transferred to another controller.
Right to Withdraw Consent: Revoke consent for optional processing (e.g., marketing) at any time without affecting prior processing.
Right to Lodge a Complaint: Contact the Luxembourg National Commission for Data Protection (CNPD) at www.cnpd.lu if you believe your rights have been violated.
To exercise these rights, please contact us at info@bllld.lu or via the contact details in Section 12. We will respond within one month, though complex requests may take up to three months. We may require identity verification to process your request.
8. Cookies and Tracking Technologies
We use cookies and similar technologies (e.g., web beacons, pixel tags) to enhance your experience on www.bllld.lu. Cookies are small text files stored on your device that help us:
Ensure website functionality (essential cookies).
Analyze user behavior and improve our services (analytics cookies).
Personalize content and ads (marketing cookies).
You can manage cookie preferences through our Cookie Consent tool or your browser settings. Essential cookies are required for website functionality and cannot be disabled. For more details, please review our separate Cookie Policy at www.bllld.lu/cookie-policy.
9. Data Security
We implement robust technical and organizational measures to protect your data, including:
Encryption: Secure transmission of data using SSL/TLS protocols.
Access Controls: Restricting data access to authorized personnel only.
Regular Audits: Conducting security assessments to identify and address vulnerabilities.
Backups: Maintaining secure backups to prevent data loss.
Despite these measures, no system is entirely immune to risks. We encourage you to use strong passwords, keep your devices secure, and report any suspicious activity to us immediately.
10. Third-Party Links
Our website may include links to third-party websites, such as property listing platforms, mortgage calculators, or government portals. We are not responsible for the privacy practices, security, or content of these sites. We recommend reviewing their privacy policies before sharing personal information.
11. Children’s Privacy
Our services and website are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly. If you believe we have collected data from a child, please contact us at info@bllld.lu.
12. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or industry standards. Significant changes will be communicated via:
A prominent notice on our website.
An email to registered users (where feasible).
The latest version of this policy will always be available at www.bllld.lu/privacy-policy. We encourage you to review it regularly.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:
bllld.lu
Email: info@bllld.lu
Address: 5 Grand Rue, Roeser, L-3394, Luxembourg
Phone: +352 661 130 804