EUPHORIE

Privacy Policy

Last updated: July 15, 2025

Protecting your privacy and personal data is a top priority for Euphorie. This Privacy Policy clearly, transparently, and thoroughly explains how we collect, use, store, and protect your personal information, as well as the rights you have as a data subject.

1. Data Controller

The processing of personal data on the website https://euphorie.lu is the responsibility of:

  • Trading Name: Euphorie
  • Sole Proprietor: Webproject
  • Administrative Office: Rue Jean Pierre Sauvage, LU-2514, Kirchberg, Luxembourg
  • Email Contact: office@euphorie.lu

Commercial and Operational Partner: Rivego Trade & Marketing S.A.R.L (Luxembourg)

2. Legal Basis for Data Processing

The processing of personal data is based on the following legal grounds:

  • Consent of the data subject (e.g., for marketing communications);
  • Performance of a contract or pre-contractual steps (e.g., order processing);
  • Compliance with legal obligations (e.g., tax, invoicing, warranty);
  • Legitimate interest of the controller (e.g., fraud prevention, platform management, service improvement).

3. Data Collected

Euphorie collects only the data strictly necessary for the intended purposes, which may include:

a) Registration and account data:

  • Full name
  • Email address
  • Password (securely encrypted)
  • Date of birth (for age verification)

b) Order and billing information:

  • Shipping address
  • Billing address
  • VAT number (if applicable)
  • Purchase history

c) Payment data:

  • Payment details (securely processed by third parties — e.g., Stripe). Euphorie does not store credit card data.

d) Customer support communications:

  • Messages submitted via contact forms or ticket system
  • Email and information related to support requests

e) Technical data (automatically collected):

  • IP address
  • Browser and device type
  • Cookies and session identifiers
  • Access logs and user activity

4. Purpose of Data Processing

Data is collected and processed for the following purposes:

  • Order processing and delivery management
  • Invoice issuance and legal compliance
  • Account and profile management
  • Fraud prevention and platform security
  • Customer service and technical support
  • Marketing communications (with consent)
  • Analytics and service improvement

5. Data Sharing with Third Parties

Euphorie does not sell or transfer your personal data to third parties for commercial purposes.

However, we may share your data with strictly necessary external service providers, such as:

  • Payment processors (e.g., Stripe, banks)
  • Shipping and logistics companies
  • Accounting and tax authorities (as required by law)
  • Email and marketing platforms (e.g., newsletters, promotional messages)

All service providers are contractually bound to comply with GDPR and may only process data in accordance with Euphorie's instructions.

6. Cookies and Tracking Technologies

The website uses essential and analytical cookies to ensure functionality and enhance the user experience.

Users may manage or disable cookies in their browser settings. For more details, please refer to our Cookies Policy (link to be added).

7. Data Retention

Personal data is retained for:

  • The duration of the commercial relationship and up to 5 years after the last order, for legal and operational purposes;
  • Billing data: 10 years, as legally required in Portugal and Luxembourg;
  • Inactive user accounts may be deleted after 24 months of inactivity, with prior email notice;
  • Data collected based on consent will be erased upon request or consent withdrawal.

8. Data Security

Euphorie implements appropriate technical and organizational measures to protect your personal data, including:

  • SSL encryption on all data transmissions
  • Secure data storage and access control
  • Internal access management
  • Monitoring of suspicious activity
  • Backup and disaster recovery systems

Despite our best efforts, no system is 100% immune to risks, and we encourage users to take personal precautions such as using strong, unique passwords.

9. Data Subject Rights

Under the GDPR, you have the following rights:

  • Right of access: to know which data is being processed
  • Right to rectification: to correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to object to processing
  • Right to data portability
  • Right to withdraw consent at any time (without affecting prior processing)
  • Right to lodge a complaint with a supervisory authority

Exercising Your Rights:

You can exercise your rights by emailing us at office@euphorie.lu. We will respond within 30 business days, unless the request is unusually complex.

10. Supervisory Authority

If you wish to file a complaint regarding the processing of your personal data, you may contact:

National Commission for Data Protection (CNPD) – Luxembourg

11. Changes to This Policy

Euphorie reserves the right to update this Privacy Policy at any time, for legal or operational reasons. The updated date will always appear at the top of the document.

Users will be notified of significant changes via email or through a website notice. Continued use of the website following an update constitutes acceptance of the revised terms.