Data protection for the roof-check campaign

Data protection for the roof-check offer

Controller: Toitures GOERENS Sàrl, 48, rue de Gasperich, L-1617 Luxembourg; data protection contact: [email protected]; +352 48 63 47-1.

We process your name, email address, telephone number, home address, the address of the property concerned, confirmations of eligibility requirements, communication and assessment notes and, when the service is carried out, roof images. Mandatory information is necessary for participation, site assessment, appointment arrangements and the service (Article 6(1)(b) GDPR). Without this information, we cannot process the registration.

Cross-checking email, name/home address and building details, together with limited technical abuse checks, serves fair allocation and security (Article 6(1)(f) GDPR). The site is assessed by a person; you can contact us to have incorrect matches reviewed.

Email advertising and the invitation to and preparation for the future customer app are based on two separate, voluntary consents (Article 6(1)(a) GDPR). You can withdraw either independently without losing your participation or roof check. Withdrawal takes effect for the future. No public profile is created for the app and no access is set up without your activation.

Access is granted to the responsible GOERENS employees and necessary IT, hosting and email service providers bound by contract. Location information required for a flight permission may be sent to the competent authority. Further information on the hosting used and any transfers to third countries can be found in this website’s general privacy notice. Your data is not sold.

Short-lived technical registration records, including earlier email confirmation requests, are removed within 48 hours at the latest. This does not affect the separately stored participation record and its reservation. Offer data is retained for processing and then for no more than three years; longer retention occurs only where there is a specific legal obligation or an ongoing legal dispute. Such restricted data is no longer used for advertising. Advertising subscriptions and app invitation requests end on withdrawal and are deleted within three years at the latest if consent is not renewed. Necessary evidence of a withdrawal may be retained on a limited basis.

Drone images focus on the roof concerned. People, neighbouring properties and unnecessary details are avoided where possible or made unrecognisable before the images are shared. Publication for advertising is not part of this participation and requires a separate agreement.

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability and objection; in particular, you may object to direct marketing at any time. Contact us at the address given above. You may lodge a complaint with the Commission nationale pour la protection des données (CNPD), cnpd.public.lu. Technically necessary session cookies secure the form; advertising tracking is not required to participate.