Privacy.

The data controller is Restaurant Auberge Lamy II Sàrl, 51 Rue d'Asselborn, L-9907 Troisvierges, Luxembourg (info@hrl.lu). We collect the minimum data necessary, and never sell it.

Newsletter

If you subscribe to our newsletter, your email address is processed by our provider Leat to send you our news (legal basis: your consent). You can unsubscribe at any time via the link in every email; your address is then removed from the mailing list.

Lamy Family (loyalty programme)

If you join the Lamy Family, your registration and profile (first name, last name, date of birth, email address, phone number) are collected and processed by our loyalty provider Leat, on its dedicated portal (legal basis: your consent and the performance of the loyalty programme). The date of birth is used solely to send you a birthday offer; the phone number is used to contact you about a booking or your account, never for marketing. You can view, edit or delete your information from your member area, or by contacting us.

Reservations

Table reservations are handled by Zenchef and room bookings by Lighthouse, on their own platforms. The data you enter there (name, contact details, date) is processed by these providers as processors, solely to manage your reservation.

Analytics

We use Plausible Analytics, a cookie-free analytics tool that collects no personal data and does not track visitors across sites. Statistics are aggregated and anonymous, hosted in the European Union.

Retention periods and transfers

Newsletter: your address is kept for as long as you are subscribed and deleted when you unsubscribe. Lamy Family: your profile is kept for the duration of your membership and deleted when it ends (on request or after two years of inactivity). Reservations: data is retained for the statutory accounting and tax retention periods (ten years at most).

Our providers (Leat for the newsletter and loyalty programme, Zenchef and Stardekk/Cubilis for reservations, Vercel for hosting) process data within the European Union; where a provider uses sub-processors outside the EU, it does so under the European Commission's standard contractual clauses.

Your rights

Under the GDPR (Regulation 2016/679), you have the right of access, rectification, erasure, restriction, data portability and objection regarding your personal data. Where processing relies on your consent (newsletter, loyalty programme), you may withdraw it at any time: via the unsubscribe link in every email, your member area, or a simple message to info@hrl.lu; withdrawal does not affect processing already carried out. You may also lodge a complaint with the CNPD (Commission nationale pour la protection des données, cnpd.lu).