Privacy

1. Who is responsible?

2. What data we process

• Orders: name, address, email, phone number, order and invoice.
• Payment: card payments are handled entirely by Stripe. We never see or store card numbers.
• Contact and quote forms: the data you enter there.
• Visiting the website: technical data such as IP address, browser and time, so the site works securely and correctly.

3. Why – and on what legal basis

• To process your order and stay in touch with you (contract, Art. 6(1)(b) GDPR).
• For our legal obligations, e.g. accounting and invoices (Art. 6(1)(c) GDPR).
• To answer your enquiries and run the site securely (legitimate interest, Art. 6(1)(f) GDPR).

4. Who sees the data

Only the services we need: Odoo S.A. (hosting and shop software, EU), Stripe (payment) and our email provider. We never sell or pass on your data for advertising.

5. Cookies and statistics

We only use technically necessary cookies – e.g. for the cart, login and language. No advertising cookies.

To understand how our site is used, we keep anonymous visitor statistics with Plausible Analytics (via Odoo, servers in the EU). No cookies are set and no personal data is stored – we simply see, for example, how many people are on the site and which pages they view (legitimate interest, Art. 6(1)(f) GDPR).

6. How long we keep it

We keep order and invoice data as long as the law requires (up to 10 years for accounting). Contact requests are deleted as soon as they are no longer needed.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Just write to us at contact@kappstand.lu. You can also lodge a complaint with the CNPD (Commission nationale pour la protection des données).

Last updated: October 2026