Personal data protection
Last updated: September 2026
1. Data controller
The controller of the data collected on www.partyshop.lu is:
Partyshop S.à r.l.-S
17, rue de Hollerich – L-1741 Luxembourg
Luxembourg trade register: B281024 – VAT: LU35339666
Business permit no. 10159609/0
E-mail: sylvain@partyshop.lu
Phone: +352 27 12 58 54
Processing is governed by Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018 on the protection of natural persons with regard to the processing of personal data.
2. Data collected and purposes
| Purpose | Data concerned | Legal basis | Retention |
|---|---|---|---|
| Order processing and delivery | Name, billing and delivery address, e-mail, telephone, order details | Performance of the contract (art. 6.1.b) | 10 years (accounting obligation) |
| Invoicing and accounting | Billing details, amounts, VAT number where applicable | Legal obligation (art. 6.1.c) | 10 years |
| Customer account management | Login details, order history, saved addresses | Performance of the contract (art. 6.1.b) | Until the account is deleted + 1 year |
| Handling quotation requests and customer service | Name, e-mail, telephone, content of the message | Pre-contractual measures (art. 6.1.b) | 3 years after the last contact |
| Newsletter and commercial offers | E-mail, first name | Consent (art. 6.1.a) | Until consent is withdrawn |
| Abandoned cart reminders | E-mail, cart contents | Legitimate interest (art. 6.1.f) | 30 days |
| Audience measurement and site improvement | Browsing data, truncated IP address, pages viewed | Consent (non-essential cookies) | 13 months maximum |
| Fraud prevention and security | IP address, connection logs | Legitimate interest (art. 6.1.f) | 12 months |
No complete bank card data is stored by Partyshop S.à r.l.-S. Online payments are processed directly by our payment providers.
3. Recipients of the data
Your data is never sold, rented or exchanged. It is disclosed only:
- to authorised employees of Partyshop S.à r.l.-S, within the limits of their duties;
- to our carriers, for the sole purpose of delivering your order;
- to our payment providers, to secure transactions;
- to our host and our software publisher (Odoo S.A.), acting as processors within the meaning of article 28 GDPR;
- to our accountants and, where the law requires it, to the authorities.
Data is hosted within the European Union. Any transfer to a third country may take place only on the basis of an adequacy decision or the European Commission’s standard contractual clauses.
4. Your rights
Under articles 15 to 22 GDPR, you have the following rights:
- Right of access – to obtain confirmation that your data is being processed and to receive a copy of it;
- Right to rectification – to have inaccurate or incomplete data corrected;
- Right to erasure – to have your data deleted, subject to our legal retention obligations;
- Right to restriction of processing;
- Right to portability – to receive your data in a structured, machine-readable format;
- Right to object – to object to processing based on legitimate interest, and at any time to direct marketing;
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to sylvain@partyshop.lu or to Partyshop S.à r.l.-S, 17 rue de Hollerich, L-1741 Luxembourg. You will receive a reply within one month. Proof of identity may be requested where there is reasonable doubt as to the identity of the applicant.
5. Complaints
If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the Luxembourg supervisory authority:
Commission nationale pour la protection des données (CNPD)
15, boulevard du Jazz – L-4370 Belvaux
Tel.: (+352) 26 10 60 1 – cnpd.public.lu
6. Cookies
The website uses cookies:
- Strictly necessary cookies – session, cart, security, language preference. They cannot be disabled and do not require your consent.
- Audience measurement cookies – visitor statistics, placed only after you have given consent.
- Marketing cookies – personalisation of offers and measurement of our campaigns, placed only after you have given consent.
You may change your choices at any time from the cookie management banner, or configure your browser to refuse all or some cookies. Refusing non-essential cookies does not prevent use of the site but may limit certain features.
7. Security
Partyshop S.à r.l.-S implements appropriate technical and organisational measures to protect your data against loss, unauthorised access and disclosure: encrypted connections (HTTPS), restricted named access to management tools, and regular backups.
8. Changes to this policy
This policy may be amended to reflect changes in our services or in the regulations. The applicable version is the one published on this page on the date of your visit.