Privacy Policy

Introduction

Brightfutureora SARL ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website brightfutureora.top or use our construction project budget control services.

Data Controller Information

The data controller for your personal information is Brightfutureora SARL, a company registered in Luxembourg with registration number RCSB711466, located at Avenue de la Gare 120, 9370 Ettelbruck, Luxembourg. For privacy-related inquiries, please contact us at privacy@brightfutureora.top or call +352 24842499.

Data We Collect

We may collect and process the following types of personal data about you through our data collection practices:

• Contact Information: Name, email address, phone number, company name, and mailing address
• Professional Information: Job title, company details, project information, and business requirements
• Communication Data: Records of correspondence and communications with us
• Technical Data: IP address, browser type, device information, and website usage data
• Project Data: Information related to construction projects and budget control requirements

How We Use Your Information

We use the personal information we collect for various purposes related to how we use your data and provide our services:

• To provide and maintain our construction project budget control services
• To respond to your inquiries and provide customer support
• To process and fulfill service requests and contracts
• To send you important updates about our services and policies
• To improve our website and services based on your feedback
• To comply with legal obligations and regulatory requirements
• To protect our legitimate business interests and legal rights

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: contract performance when providing our services, legitimate interests for business operations and marketing, legal compliance with Luxembourg and EU regulations, and your consent for specific processing activities like marketing communications.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our cookie usage, please review our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: with trusted service providers who assist in our business operations, when required by law or to protect our legal rights, with your explicit consent, or in connection with a business transfer or merger.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Typically, we retain contact information for active business relationships and up to 7 years after the end of our business relationship for legal and tax compliance purposes.

Your Rights

Under GDPR and Luxembourg data protection law, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for specific processing activities

International Data Transfers

As we operate primarily within the European Union, your personal data is generally processed within the EU/EEA. If we need to transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the following information:

Supervisory Authority

If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (Commission Nationale pour la Protection des Données - CNPD) or your local data protection authority.