Privacy policy
Version of 20 October 2026
devissolaire.lu is built to process as little data as possible. We use no accounts, no audience measurement, no advertising and no tracking cookies, and we do not keep quote requests.
1. Controller
[Operator – company name], [Registered address, Luxembourg], RCS [RCS number].
Data protection contact: privacy@devissolaire.lu
2. Visiting the site
To serve pages and protect the site against abuse, our server technically records the IP address, date, requested page and browser type. These logs are kept for at most 14 days, then deleted. Legal basis: our legitimate interest in running a secure site (Art. 6(1)(f) GDPR).
Cookies: the site sets no tracking or advertising cookies. The request form uses a single technical cookie ("csrftoken") that protects against forged form submissions; it is strictly necessary and does not require your consent.
3. Checking your roof
When you search for an address, our server sends it to the public services of the national geoportal (Administration du cadastre et de la topographie, Luxembourg) to obtain the coordinates, the commune and the solar cadastre data. The address is not stored; a result may stay in a temporary cache for at most one hour to speed up an identical search.
Your browser then loads the map directly from geoportail.lu, which therefore receives your IP address, as with any visit to that public site. See the geoportal's privacy policy. The map only loads after your search.
Legal basis: your request (Art. 6(1)(b) GDPR) and our legitimate interest in providing the tool (Art. 6(1)(f) GDPR).
4. Quote request
Data: name, e-mail address, phone, address of the building and commune, project details (type of building, ownership, roof, consumption, interests, timing, message) and, if you used the roof check, the solar cadastre data of your roof.
Purpose: forwarding your request to installers so that they contact you and send you a quote, and sending you a confirmation e-mail.
Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box in the form, and pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
Recipients: at most 3 photovoltaic installation companies established in Luxembourg that we work with. Each receives your request in a separate e-mail and, from receipt, becomes an independent controller of your data (and must inform you about its own processing). The site's operator, itself an installer, may be one of these companies. The list of partner companies is available on request.
Retention: we keep no copy of your request. It only exists in the server's memory while it is being sent, then it is deleted; it is not written to our database or our logs. Our e-mail sending provider keeps only technical delivery data (recipient, date) for a limited time.
Consequence: because we keep nothing, after sending we can neither find your request nor tell you exactly which companies received it. We can tell you which companies may have received it; the companies that contacted you can answer your access or erasure requests.
Withdrawing consent: you can withdraw your consent at any time with the companies that contacted you. This does not affect the forwarding already done.
5. Anonymous statistics
We count, per day and commune, the number of searches and requests. These counters contain no personal data.
6. Contact by e-mail
If you write to us, we use your message only to answer you and delete it at the latest 12 months after the end of the exchange.
7. Processors and transfers
Hosting and e-mail sending by providers acting on our instructions, with servers in the European Union. We do not transfer your data outside the European Economic Area. There is no automated decision-making or profiling.
8. Security
Encrypted connection (HTTPS), no storage of requests, restricted and protected administration access, no third-party tracking tools.
9. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw your consent. Write to privacy@devissolaire.lu. You may also lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux.
10. Minors
The service is meant for building owners; it is not intended for people under 16.
11. Changes
We will update this policy if our service or the law changes; the version date is at the top of the page.