Legal
Privacy Policy
How we collect, use, and protect your personal data.
Last updated: July 2026
Who we are
Bazar International de Luxembourg asbl is the data controller responsible for the personal data described in this policy. You can reach us at B.P. 2266, L-1022 Luxembourg, or by email at info@bazar-international.lu.
What data we collect
Contact form: your name, email address, phone number (optional), the category and subject of your enquiry, and the message you write to us.
Stand Portal: the email address you use to request a sign-in link, so we can verify you are an authorised stand representative.
Donations: if you donate online, your payment is processed directly by Stripe, our payment provider. We do not receive or store your card details.
Why we collect it
We use this data only to respond to your enquiry, manage your stand information, and process your donation. We do not sell or rent your data, and we do not use it for advertising.
How long we keep it
Contact form messages are kept for as long as needed to handle your enquiry and for a reasonable period afterwards, then deleted. Stand Portal sign-in links expire after 15 minutes and can only be used once. Donation records are kept as required by Luxembourg accounting law.
Who we share it with
We use a small number of trusted service providers to run this site: Resend (to deliver emails), Stripe (to process donations securely), Sanity (to manage website content), and Cloudflare (to protect our contact form from spam — see "Cookies" below). These providers only receive the data they need to perform their service and may not use it for their own purposes.
Cookies
This website keeps cookies to a minimum. We use one functional cookie to remember your preferred language and, if you sign in to the Stand Portal, one secure session cookie to keep you logged in. Neither is used for tracking or advertising.
Our contact form uses Cloudflare Turnstile to block spam and automated submissions. Unlike traditional CAPTCHAs, Turnstile does not use tracking cookies or profile visitors across other websites.
For site statistics, we use Plausible Analytics, a privacy-friendly tool that does not use cookies and does not collect any personal data.
Because we do not use tracking, advertising, or profiling cookies, this site does not show a cookie consent banner.
Your rights
Under the GDPR, you have the right to access, correct, or delete your personal data, to object to or restrict its use, and to request a copy of it. To exercise any of these rights, contact us at info@bazar-international.lu. If you believe your data has been mishandled, you may also lodge a complaint with Luxembourg's data protection authority, the Commission Nationale pour la Protection des Données (CNPD), at cnpd.public.lu.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or for legal reasons. The date at the top of this page shows when it was last revised.