Privacy Policy

Bed & Roof Data Protection Statement

At Bed & Roof (bedandroof.com), we treat your personal information with the same care and professional integrity that we apply to finding or managing your home. This document explains how we collect, safeguard, and process your personal data in strict alignment with the EU General Data Protection Regulation (GDPR)and the specific regulations governing the Luxembourg real estate sector.
Ownership & Accountability

‍

The digital architecture of this website and all associated real estate advisory operations are managed by:
    •    Data Controller: Aukse Poehle
    •    Direct Point of Contact: contact@bedandroof.com
    •    Core Business: Property hunting, sales, letting, consultations, and market analysis within the Grand Duchy of Luxembourg.

‍
How We Handle Your Information (By Lifecycle)

To keep this policy as straightforward as possible, we have organized our data processing based on how you interact with our brand, rather than using abstract legal categories.
1. When You Browse Our Site or Read Our Blog
    •    What happens: We collect technical details, such as anonymized traffic statistics and browser preferences, via digital tracking scripts.
    •    Why we do it: To keep our digital hub stable, secure, and to ensure our blog content remains relevant to the local market.
    •    Legal foundation: Our Legitimate Interest (Art. 6(1)(f) GDPR) to run a functional website, alongside your Explicit Consent (Art. 6(1)(a) GDPR) for non-essential cookies.

‍

2. When You Submit a Property Inquiry or Request a Valuation

•    What happens: We collect your name, email, phone number, and specific property details or project criteria you share through our contact forms.
    •    Why we do it: To follow up on your requests, provide tailored market evaluations, and kickstart your property hunt or listing process.
    •    Legal foundation: Taking necessary Pre-contractual Steps (Art. 6(1)(b) GDPR) based on your direct request.
    •    Retention window: If our conversations do not lead to a formal contract, your digital files and contact data are securely purged from our active databases after a maximum of 2 years.

‍

3. When We Finalize a Mandate (Sales, Buying, or Management)

    •    What happens: In addition to standard transaction records, we collect official identification (passports or ID cards), proof of residence, and source-of-funds documentation.
    •    Why we do it: Real estate professionals in Luxembourg are legally bound to prevent financial crimes. This data allows us to verify identities and fulfill anti-money laundering obligations.
    •    Legal foundation: Fulfilling a strict Legal Obligation (Art. 6(1)(c) GDPR) under the Luxembourg Law of 12 November 2004 on the fight against money laundering and terrorist financing, under the direct supervision of the Administration de l'enregistrement, des domaines et de la TVA (AED).
    •    Retention window: By law, all signed contracts, accounting files, and mandatory AML identity records must be securely archived for 5 years following the official end of our business relationship.
‍

Who Inside or Outside the EU Has Access?

We do not sell, lease, or distribute your personal details to commercial advertising networks. Your information is only shared with trusted parties who help us deliver our services:
    •    Operational Vendors: GDPR-compliant cloud hosts, database managers, and secure email routing platforms operating inside the European Union.
    •    Collaborating Professionals: Licensed co-brokers or partner real estate agencies, strictly when you have authorized us to work with them on a property search or transaction.
    •    Regulatory Bodies: Public authorities, judicial officers, or the AED, exclusively when we are legally required to do so by Luxembourg statute.

‍
A Note on International Data Flows: Some of our website optimization tools (like Google, Meta, and LinkedIn) process data on servers based in the United States. We ensure these transfers comply with European standards by relying on the EU-U.S. Data Privacy Framework or utilizing approved Standard Contractual Clauses to guarantee your data stays safe.

‍

Your Rights and Choices

The GDPR grants you total control over your digital footprint. You can exercise the following options at any time by sending a message to contact@bedandroof.com:
    •    Access & Portability: Request a readable digital transcript of all data we maintain under your profile.
    •    Correction & Erasure: Update incorrect contact details or demand the permanent deletion of your files (provided it doesn't conflict with our statutory 5-year AML archiving duties).
    •    Restrictions & Objections: Pause certain processing activities or challenge data handled under our legitimate business interests.
    •    Consent Withdrawal: Revoke your marketing or tracking permissions instantly without any negative impact on our general services.
‍

Regulatory Support: If you believe your data has been handled incorrectly, you have the right to file an official grievance with Luxembourg's data protection authority:
Commission Nationale pour la Protection des Données (CNPD) > 15, Boulevard du Jazz, L-4370 Belvaux | cnpd.public.lu
Website Cookie Directory
Cookies are small data files saved on your browser to streamline your web experience. We do not run any tracking, analytics, or marketing pixels unless you click "Accept All" or opt-in via our banner preference center.

‍

A) System Essential Cookies

These are strictly necessary to make our website work properly and cannot be disabled.
    •    br_cookie_consent: Remembers your privacy choices for 1 year so we don't ask for your preferences on every page visit.
    •    Language Selection: Remembers your chosen reading language for the duration of your active browsing session.

‍

B) Insights & Performance Tracking

These help us evaluate how visitors find our site and interact with our blog articles so we can continuously improve our layout.

‍
Service Provider
Technical Script / ID
Core Operational Purpose
Expiry
Google LLC
Google Analytics

G-CRHN80RY1E
Compiles fully anonymized data regarding traffic sources, clicks, and page viewing durations.
Up to 2 years

‍
C) Marketing & Re-Targeting Pixels

These tools help us evaluate the success of our social media campaigns and allow us to show relevant real estate updates to people who have shown interest in our brand.
Service Provider
Technical Script / ID
Core Operational Purpose
Expiry
Meta Platforms, Inc.
Facebook Pixel

1443318830821114
Tracks campaign performance and enables relevant property updates on Instagram and Facebook.
Up to 90 days
LinkedIn Corp.
LinkedIn Insight Tag

9920817
Evaluates professional network ad engagement and demographic traffic patterns.
Up to 90 days

‍
How to adjust your preferences: You can change your tracking choices at any moment by clicking the permanent "Cookie Settings" button located in the bottom-left corner of any page on our website.

‍

CONTACT & SUPERVISORY AUTHORITY

For any questions or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

Bed&Roof sarl-s
18, rue du Gruenewald
L-7392 Blaschette
Luxembourg
hello@bedandroof.com

If you are not satisfied with our response, or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Luxembourg data protection authority:

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux
Luxembourg
www.cnpd.lu

‍

‍

‍