Legal

Privacy Policy

Last updated: 11 September 2026

This notice explains how Luxa Experience processes the personal data of people who visit the website, submit an enquiry through the contact form or communicate by email or WhatsApp, in accordance with Regulation (EU) 2016/679 (GDPR).

Data Controller

Luxa Experience di Yvonne Mendy, Via Mannelli 167, Florence, Italy — VAT No. 07571580484 — email: info@luxaexperience.com.

Personal data processed

We may process your full name, email address, company or institution, country, enquiry type, message content and any other information you provide voluntarily. The website and its technical providers may also process technical data such as IP address, browser type, access date and time, referring page and data required for service security and operation.

Purposes and legal bases

Data is processed to respond to enquiries and prepare possible services or proposals, on the basis of steps requested before entering into a contract; to manage contractual and professional relationships; to comply with legal obligations; and to protect the website, prevent abuse and establish or defend legal claims, on the basis of the Controller’s legitimate interests. Data submitted through the form is not used for newsletters or marketing without specific consent or another valid legal basis.

Required and optional data

Fields marked as required are necessary to review and respond to your enquiry. Without them, the form cannot be submitted. Other information is optional.

Recipients and service providers

Data may be processed by providers supporting the website and communications, only as necessary for their services: Aruba for hosting and email; Formspree for contact-form processing; external technical content and service providers, including Google Fonts and jsDelivr; and WhatsApp/Meta when you choose to contact Luxa through WhatsApp. Data may also be disclosed to professional advisers or public authorities where required by law or necessary to protect a legal right.

International transfers

Some providers may process data outside the European Economic Area. Where this occurs, transfers rely on an adequacy decision or other safeguards recognised by the GDPR, such as Standard Contractual Clauses, as stated by the relevant provider. You may contact the Controller for information about the safeguards that apply.

Retention periods

Enquiries that do not lead to a professional relationship are kept for as long as necessary to handle them and, as a rule, no longer than 12 months after the last communication. Contractual or administrative data is retained for the duration of the relationship and afterwards for the periods required by law, generally up to 10 years. Technical logs are retained according to provider timeframes and as necessary for security, maintenance and the protection of legal rights.

Processing and security

Processing is carried out using digital tools and organisational and technical measures appropriate to the risk. Luxa Experience does not sell personal data and does not use it for solely automated decision-making or profiling.

Cookies and technical technologies

The website uses only technical functions necessary for its operation and stores the selected language preference in your browser. External resources loaded by the website may result in technical data being transmitted to their providers. If analytics, advertising tools or other non-essential cookies are introduced in the future, this notice and the consent mechanism must be updated before they are activated.

Your rights

Where provided by the GDPR, you may request access, correction, erasure, restriction and portability of your personal data, object to processing or withdraw consent without affecting prior lawful processing. Requests may be sent to info@luxaexperience.com. You may also lodge a complaint with the Italian Data Protection Authority.

External services

When you open a link to an external service such as WhatsApp, the terms and privacy notice of that provider also apply.

Changes to this notice

This notice may be updated following changes to the website, the services used or applicable law. The date of the latest update appears at the beginning of this page.