Skip to main content

PRIVACY POLICY

What you'll find here: our privacy policy. What you won't find: the short, succinct version we'd like to give you. Legally we have to keep in all every tiny detail, so, you know, go nuts.

AANB SARL (hereinafter referred to as “we” or “AANB”) a Luxembourg private limited company incorporated under the laws of the Grand Duchy of Luxembourg and registered with the Luxembourg Trade an Companies’ Register under number B250004, whose registered office is at 28, rue du Golf, L-1638 Senningerberg, attaches great importance to the respect of your privacy and is aware of the importance you grant it and is in charge of the collection and processing of your personal data on this website.

In this privacy policy (the “Privacy Policy”), “you” and “your” means you, the individual who is using the website and/or ordering the products, the latter referring to AANB products which may be ordered on our website (the “Product”).

This Privacy Policy will explain how we manage the personal information that we collect and use through this website and how to contact us if you have any further queries about our management of your personal data.

We will process your personal data in relation with our activities in accordance with the applicable laws and regulations (including but not limited to the Regulation n°2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as may be amended or replaced, collectively the “Data Protection Laws”).

1. When is your personal data collected?

During the use of this website, we may collect your personal data in different places or at different times when:

  • You create an account on the website;
  • You buy Products on the website;
  • You get in touch with us for information or support purposes (“Contact” section);
  • You request notifications from us.

We take care to collect only the data strictly necessary for the purposes described below.

2. What type of personal data will be collected?

Your personal data refers to all information that concerns you as a physical individual and that allows you to be identified, directly or indirectly.

The personal data that we may collect when you browse this website is:

  • Identity: title, surname, first names, address, telephone number (fixed and/or mobile), e-mail addresses, date of birth (a copy of an identity document may be kept as proof of the exercise of a right of the data subject);
  • Data relating to the means of payment: postal or bank identity statement, cheque number, bank card number, expiry date of the bank card, visual cryptogram;
  • Data relating to the transaction, such as the transaction number, details of the purchase, subscription, good or service subscribed to;
  • Data relating to the follow-up of the commercial relationship: requests for documentation, requests for trials, Products purchased, services or subscriptions subscribed to, delivery address, history of purchases and services, Product returns, correspondence with you and after-sales service, exchanges and comments from customers and prospects;
  • Data relating to the payment of invoices: terms of payment, receipts, balances, unpaid invoices;
  • Data necessary to carry out canvassing, studies, surveys, Product testing and promotional activities;
  • Data relating to the organization and processing of promotional operation such as the date of participation, the answers given to competitions and the nature of the prizes offered;
  • Data relating to the contributions of persons who post opinions on Products, services or content, in particular their pseudonym;
  • Data of your on-line browsing in relation with accepted non-essential cookies.

Some of the information collected is mandatory to achieve the purposes described below, others are optional. You are systematically informed of the mandatory or optional nature of the information when it is collected. If you do not fill in certain mandatory fields, this may result in AANB being unable to provide you with the ordered Product or be able to make contact with you in the future.

3. Why and how long will we use your personal data?

Data collected in connection with the use of the website are processed for the purposes and legal grounds described below:

a. Management of our relations with our customers and prospects

In order to manage our relations with our customers and prospects, we collect the relevant personal data for customer management, billing management, commercial statistics, canvassing and information operations with a view to canvassing and management of the rights of access, rectification and opposition.

Data: identity, age category, address/region, e-mail address, telephone, correspondence, comments, client opinions, data relating to transactions (data relating to means of payment, bank account, invoices, remittances, deductions, oppositions, bank data), prospecting, selection of prospects.
Legal basis (customers): such processing is necessary for the performance of pre-contractual measures or a contract.
Legal basis (canvassing): such processing is necessary for our legitimate interests in making our Products known on the market.
Duration: customer data is kept during the contractual relationship and five years after its termination. Prospects data is kept for a period of three years from the end of the commercial relationship or the last contact with the prospects. In the event of communication of identity documents for a request for right of access and rectification, the data may be kept for one year and three years in the event of opposition. In the case of payment by bank card, the retention period to serve as proof of the transaction is limited to thirteen months following the date of debit.

b. Handling your enquiries

We process the personal data you provide to us in the context of your requests and enquiries (Contact).

Data: identity, personal data related to enquiries and responses.
Legal basis: consent (your willingness to provide us with this data for processing for a response).
Duration: enquiries and responses are kept for two years from the last contact.

c. Management of our website

We process personal data relevant to the management of our website and the protection of its cyber security (publications, webforms, technical administration, security, statistics, fight against fraud).

Data: identity, functions, e-mail address, contact data, navigation data (IP address, technical data on the equipment and browser, time stamp, pages visited, links consulted, city of connection, number of visits, date and time), data on the management of publications and contacts, data on the management of technical service providers and data on the audience and use of the online services and Products.
Duration: log data is stored for six months, data required for the production of audience and usage statistics for online services is stored for a maximum of thirteen months, exchange data with technical service providers is stored during the contract and for five years after the end of the contract in question, data for the preparation of possible publications and webforms is stored for a maximum of five years.
Legal basis for non-technical cookies: consent.
Legal basis for personal data relating to contracts with technical service providers: such processing is necessary for the performance of pre-contractual measures or a contract. Legal basis: such processing is necessary for our legitimate interests to implement actions to monitor the functioning and security of our website and to fight fraud.

We do not share any personal data for commercial purposes with third parties. We do not carry out profiling activities based on automated decision.

d. Accounting

In order to comply with our various legal obligations arising from the exercise of our commercial activities, we process the relevant personal data for the purpose of drawing up and monitoring our accounts.

Data: identity, address, bank details, information on the nature of transactions carried out, payment of invoices, fees, taxes and duties.
Legal basis: such processing is necessary, as far as our legal obligations are concerned, to comply with these obligations.
Duration: ten years from the end of the financial year. Beyond that, the data may be archived for ten years on a separate computer medium with authorized access.

e. Partnership management

We collect and process personal data relevant to the monitoring of partnership agreements, the implementation of these partnerships and internal and external communication related to these partnerships.

Data: identity, contact details, project monitoring, project implementation exchanges, statistics.
Legal basis: such processing is necessary for the execution of pre-contractual measures or a contract.
Duration: data are kept during the contractual relationship and five years after their termination.

f. Managing our relationships with our suppliers

In order to manage our relationships with our suppliers, we collect relevant personal data to administer contracts, orders, invoices, establish payment vouchers, financial and turnover statistics by supplier, select suppliers and maintain supplier documentation.

Data: surnames, first names, address, telephone, e-mail, supplier documentation, contracts, orders, invoicing elements (invoices, outstanding payments, credit notes).
Legal basis: such processing is necessary for the execution of pre-contractual measures or a contract.
Duration: during the contractual relationship and for a period of five years.

g. Communication and event management

We collect and process personal data relevant to the management of our communication (newsletters, downloadable documents, press) and our events (registration, logistical organization, evaluation, statistics).

Data: identity, email address, contact details, contact management, follow-up of event organization, statistics.
Legal basis: such processing is necessary for our legitimate interests in implementing communication actions to publicize our Products and services.
Legal basis: such processing, when the communication actions are consecutive to the voluntary transmission of your e-mail address with a view to receiving newsletters or downloading documents on our platform, is based on your consent (which may be withdrawn at any time).
Duration: data for the sending of newsletters is kept as long as the data subject does not un-subscribe, press relations data is kept for five years, data related to events is not kept beyond five years after the event has taken place.

h. Job application management

In order to manage applications for a job, we process personal data relevant to the review and selection of applications.

Data: identity (name, surname, e-mail address, address, photograph), professional data, cover letters and exchanges, application interviews and interview notes, job wishes expressed by applicants, assessment of professional skills based on objective criteria and in direct and necessary connection with the job sought.
Legal basis: such processing is necessary for the execution of pre-contractual measures or a contract.
Duration: destruction after rejection of application or conservation for two years in case of agreement of the applicant (for future vacancies).

We do not share any personal data for commercial purposes with third parties. We do not carry out profiling activities based on automated decision.

4. Recipients of your personal data

The personal data collected on this website are exclusively intended for the use of AANB. They are nevertheless likely to be transmitted to third parties with which AANB is in relation with in the context of the execution of the services, such as the hosting and computer operation of the site, the management and processing of payments on the site or the delivery and possible returns of the Products. In particular, the data relating to the payment method (credit card number, expiry date, authorization number, security code) are collected directly by our service provider STRIPE.

Finally, AANB may be obliged to transmit personal data concerning you to a third party at the request of the judicial authorities, tax or any other public authority empowered by law. They are not transmitted to any other third party.

AANB also ensures that any transfer of your personal data to authorized third parties does not result in a transfer to a third country outside the European Union, or is at least secured in accordance with GDPR.

5. Protection of your personal data

We implement security measures that are appropriate and reasonable in view of the risks represented by the processing, in order to protect your personal data against destruction, loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing.

All employees and processors of AANB who have access to your personal data in the course of their duties are bound by strict professional confidentiality. They access only the data they need to perform their duties.

6. Your Rights

As we process your personal data, you have the following rights at any time and within the limits set by law:

  • to access your personal data (to know which data has been collected and processed and to obtain a copy of it), to request their correction if they are inaccurate or incomplete, their deletion if they are obsolete;
  • to object the processing of your data on legitimate grounds (in particular for commercial prospecting purposes);
  • if the preconditions are met, request that the processing of your data be limited or definitively deleted (right to erasure);
  • request to receive a copy of the personal data you have provided to us in a structured format (portability), unless this right infringes the rights and freedoms of third parties;
  • withdraw your consent at any time for processing operations based on it;
  • not to be subject to a decision based solely on automated processing, including profiling.

Please also be informed that data subjects have also, in France, the right to set guidelines for the retention, deletion or disclosure of your personal data after your death.

You may exercise any of these rights free of charge by contacting us by e-mail at the following address: support@aanb.lu or AANB SARL 28 rue du Golf, L-1638 Senningerberg, Luxembourg. In order for us to satisfy your request and to avoid any identity theft, a copy of both sided of a valid identity document must be attached to your mail. You can also lodge a complaint with the National Commission for Data Protection (CNPD), via their web-site: www.cnpd.lu (or in France cnil.fr).

7. Changes to our privacy policy

We may change the content of our website and how we use cookies, and consequently our Privacy Policy may change from time to time in the future. We therefore encourage you to review them when you visit the website from time to time to stay informed of how we are using personal information.

8. Cookie policy

Our Site uses essential cookies to ensure the proper user experience. What are cookies? They are small files of letters and numbers that are sent to your computer when you visit a website. Your computer saves the cookies and sends them back to the website when you visit the website again. Cookies can be used to follow your activity on a website and across websites, and that information helps websites to understand your preferences and improve your website experience.

Our Site uses the following types of cookies:

  • Strictly necessary cookies, which help the website to function, for example by allowing you to browse between pages, log into secure areas or use the shopping cart.
  • Functionality cookies. These are used to recognize you when you return to our Site. This enables us to remember your preferences (such as language) and personalize our content for you.
  • Analytical cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our website works. The aggregated statistical information concerning browsing habits is anonymous.

Our Site doesn’t use Targeting (aka Marketing or Profiling) cookies. These cookies record your visit to the site, the pages you have visited, and the links you have followed. The objective usually is to personalize advertising messages to send you the adverts that you will find relevant or interesting. And the information may be shared with third parties for this purpose.

Here is the list of cookies we use:

WORDPRESS COOKIE NAME DURATION PURPOSE
wordpress_{hash} WordPress uses the login wordpress_{hash} cookie to store authentication details. Its use is limited to the Administration Screen area, /wp-admin/
wordpress_logged_in_{hash} Session Remember User session. WordPress sets the after login wordpress_logged_in_{hash} cookie, which indicates when you’re logged in, and who you are, for most interface use.
wordpres_test_cookie Session Test if cookie can be set. WordPress also sets wordpress_test_cookie cookie to check if the cookies are enabled on the browser to provide appropriate user experience to the users. This cookie is used on the front-end, even if you are not logged in.
wp-settings-{user_id} 1 year Customization cookie. Used to persist a user’s wp-admin configuration. The ID is the user’s ID. This is used to customize the view of admin interface, and possibly also the main site interface.
wp-settings-time-{user} 1 year Time at which wp-settings-{user} was set
wp-saving-post 1 day Auto-saving cookie: wp-saving-post is a WordPress cookie created when auto-saving a post in the editor. Used to track if there is saved post exists for a post currently being edited. If exists then let user restore the data.
wp-postpass_{hash} 10 days Used to maintain session if a post is password protected
wordpress_sec There is not yet any general information about this cookie based on its name only. If you have any information about this cookie, please share in the comments section below.
woocommerce_cart_hash session Helps WooCommerce determine when cart contents/data changes.
woocommerce_items_in_cart session Helps WooCommerce determine when cart contents/data changes.
wp_woocommerce_session_ 2 days Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.
woocommerce_recently_viewed session Powers the Recent Viewed Products widget.
store_notice[notice id] session Allows customers to dismiss the Store Notice.

Got Questions?

We value transparency, so get in touch if you want any more information about how we handle your data or would like us to delete your data or have any concerns or complaints about the way we collect data here.