Privacy Policy

This Privacy Policy explains how grivandola.top SARL collects, uses, and protects your personal information when you visit our website or use our services.

Last updated: January 2026

Data Controller Information

grivandola.top SARL is the data controller for the personal information we collect. Our contact details are:

  • Company: grivandola.top SARL
  • Address: Avenue de la Porte-Neuve 89, 4918 Differdange, Luxembourg
  • Registration Number: RCSB632541
  • VAT Number: LU63857418
  • Email: [email protected]
  • Phone: +352 23523289

Data We Collect

We collect and process the following types of personal data when you interact with our website and services:

Information You Provide Directly

  • Contact information (name, email address, phone number)
  • Company or restaurant details
  • Project requirements and communication preferences
  • Any other information you choose to provide through our contact forms or communications

Information Collected Automatically

  • IP address and location data
  • Browser type and version
  • Device information and operating system
  • Pages visited and time spent on our website
  • Referring website or source
  • Cookies and similar tracking technologies

How We Use Your Information

We use your personal data for the following purposes based on legitimate business interests and your consent:

  • To respond to your enquiries and provide customer support
  • To deliver our restaurant mobile app development services
  • To communicate about projects, updates, and service improvements
  • To analyse website usage and improve user experience
  • To send marketing communications (with your consent)
  • To comply with legal obligations and protect our business interests
  • To prevent fraud and ensure website security

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

  • Consent: When you provide explicit consent for marketing communications or cookie usage
  • Contract: When processing is necessary to perform our services or enter into a contract
  • Legitimate Interests: For business operations, website analytics, and service improvements
  • Legal Obligation: When required by Luxembourg or EU law

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service providers who assist with website hosting, analytics, and communication tools
  • Professional advisors including lawyers, accountants, and consultants
  • Law enforcement or regulatory authorities when required by law
  • Third parties in connection with business transfers or mergers

All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • European Commission adequacy decisions
  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules or other legally recognised transfer mechanisms

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact enquiries: 3 years after last communication
  • Client project data: 7 years after project completion for business records
  • Website analytics: 26 months (Google Analytics default retention)
  • Marketing communications: Until you unsubscribe or withdraw consent
  • Legal compliance: As required by applicable laws and regulations

Your Rights

Under GDPR and Luxembourg data protection law, you have the following rights regarding your personal data:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at [email protected] or +352 23523289. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and staff training
  • Secure hosting and backup procedures

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) or your local supervisory authority.

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

For general enquiries, you can also contact us at [email protected] or visit our contact page.