Data protection
Data controller
This page explains how personal data is processed when browsing the L’Annexe website and using its quote request form.
The data controller is:
Petro Center SA
Address: –
Email: –
Data Protection Officer
For any questions about your personal data or to exercise your rights, you can contact the data protection officer:
Email: –
Postal address: –
Quote request form
Data processed and purposes
When you use the contact form, we process the information you provide: surname, first name, email address, company, telephone number, message, address and the technical data required to send and secure your request.
This information enables us to receive your message, route it to the appropriate department, process your request and reply to you.
Mandatory fields are identified in the form. Without this information, we may not be able to process your request. All other fields are optional.
Please limit your message to information relevant to your request and avoid sending sensitive data or personal information about third parties when it is not necessary.
Legal basis
The processing is based on [legal basis to be confirmed by the data controller and the DPO; if a task carried out in the public interest is chosen, specify Article 6(1)(e) GDPR and the applicable legal basis].
Recipients
The data is accessible to the people authorised to process your request and, where necessary for their work, to service providers responsible for operating the website and messaging services.
Retention
Form data and related exchanges are retained for [retention period or criteria to be specified], then deleted or archived in accordance with applicable obligations.
Website operation and security
Browsing the website involves the processing of certain technical data: [categories actually recorded, for example IP address, date and time of connection, requested resource, browser and technical errors].
This data is used to ensure website availability, diagnose incidents and prevent abusive access.
Legal basis: [legal basis and applicable legal foundation to be confirmed]
Recipients: [relevant departments and service providers]
Retention period: [retention period for technical logs]
Audience measurement
This website uses cookies. We use cookies to offer you content, improve our services, personalise advertisements, integrate social media features and analyse our traffic. We also share information about your browsing with our social media, advertising and analytics partners. They may combine it with other information you have provided to them or collected when using their services.
Cookies are small text files that websites can use to make the user experience more efficient.
The law states that we may store cookies on your device only if they are strictly necessary for the operation of this website. For all other types of cookies, we need your permission.
Browsing analytics
The website uses Google Analytics 4 (GA4), provided by Google Ireland Limited, to analyse traffic, understand how visitors use the different pages and improve the user experience and performance.
The data processed may include pages viewed, events and interactions on the website, device and browser information, IP address and online identifiers. Google Analytics also uses cookies and similar technologies to measure audience and produce traffic statistics.
Tracking processing subject to consent is activated after you give your consent. You can change your choices or withdraw your consent at any time using the “Manage cookies” link available in the footer. Withdrawal does not affect processing already carried out lawfully.
Legal basis: consent for audience measurement processing subject to consent.
Recipients: Google Ireland Limited and, where applicable, other Google entities involved in providing Google Analytics.
Retention period: data is retained for the period configured in Google Analytics, in accordance with the retention settings defined for the website.
Transfers outside the European Economic Area
[Indicate whether data is transferred or accessible from a country outside the European Economic Area, in particular by audience measurement, hosting or messaging providers.]
[For each transfer concerned, specify the countries, the applicable mechanism — adequacy decision or appropriate safeguards — and how to obtain information about those safeguards.]
Your rights
Depending on the processing and the conditions laid down by the GDPR, you may request access to your data, its rectification or erasure, or restriction of processing. You may also have the right to object and the right to data portability.
Where processing is based on your consent, you may withdraw it at any time.
To exercise your rights, contact [address of the DPO or relevant department], specifying your request. Additional information may be requested where necessary to verify your identity.
Complaints
If you believe that your data is not being processed in accordance with the applicable rules, you may lodge a complaint with the National Commission for Data Protection (CNPD).
Website: https://cnpd.public.lu
Updates
This page is updated whenever the processing activities described are changed.
Last updated: 27 October 2026