BioLuxea · legal information
Privacy and cookies
This notice explains which personal data BioLuxea currently uses during the pre-registration phase, why, and which choices and rights you have.
Version 1 September 2026
Who is responsible?
BioLuxea is the controller for the processing described here. BioLuxea is registered under Dutch Chamber of Commerce number 88269248 and establishment number 000054144485. For privacy questions or requests, email bioluxea@gmail.com with “Privacy request” in the subject line.
The public business and contact information available for this phase is listed on the contact and business-information page.
What we process and why
| Situation | Data and purpose | Basis |
|---|---|---|
| Launch registration | Email address, selected line, language, consent/form version, and limited campaign/referrer tags to send the requested launch and availability updates and prove the registration context. | Consent; you may withdraw it at any time. |
| Contact | Name and contact details you provide, message content, and our response, to answer and administer your request. | Legitimate interest in responding, steps at your request, or a legal obligation, depending on the question. |
| Website and security | Device, browser, IP, request, security, and cookie information needed to deliver and protect the Shopify storefront. | Necessary operation, security, and legitimate interests; consent where required for non-essential technology. |
Do not send payment-card data, passwords, health information, or other unnecessary sensitive information through the contact form or email.
Recipients, Shopify, and transfers
Shopify hosts the storefront and customer-registration form and processes data for delivery, security, and the configured Shopify services. Approved service providers may receive only the data needed for their task. We do not sell pre-registration email addresses.
Shopify and its subprocessors may process data outside the European Economic Area using recognised safeguards where required. Shopify separately explains its cross-store and enhanced-services processing in the Shopify Consumer Privacy Policy; relevant choices can be exercised through the Shopify Privacy Portal.
Retention and security
Launch-registration data is retained while the selected updates are sent and until you unsubscribe or the launch communication ends. We may retain a limited suppression or consent record where needed to honour your choice, demonstrate compliance, or handle a dispute. Contact records are kept only as long as needed for the question and applicable obligations. Access is limited and appropriate technical and organisational measures are used.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. We may ask for proportionate identity verification. We normally respond within one month and will explain any lawful extension or refusal.
You may also complain to the Dutch Data Protection Authority through autoriteitpersoonsgegevens.nl. Please contact us first if you would like us to resolve the issue directly.
Cookies and similar technology
Necessary Shopify technology supports core delivery, language, form security, consent choices, and fraud prevention. Analytics, advertising, or cross-store technology must not be activated without the required choice. The live Shopify privacy banner is the controlling preference interface; available technology can change when Shopify or an approved app changes.
Children and changes
The registration is not directed at children, and we do not knowingly request children’s data. We update this notice when the website, services, recipients, or legal requirements materially change and show the new date here.