Privacy Policy

1. Data Controller :

• Hermes WebStudio & Digital Solutions
• Hermes Max
• 41, rue de Dudelange
• L-3631 Kayl

2. General Information on Data Processing :
We take the protection of your personal data seriously and process it exclusively in accordance with applicable data protection laws, particularly the General Data Protection Regulation (GDPR).

3. Use of Make.com and MailerSend for Contact Form Data Processing:
We use the services Make.com and MailerSend to automate and efficiently manage the processing of data submitted via the contact form. Personal data such as name, email address, company name, and message are processed in this context.

3.1 Make.com :
Make.com is an automation service that helps us process and forward data from the contact form. Make.com acts as our data processor in accordance with Article 28 GDPR.

• Processed Data: Name, email address, company name, message
• Purpose of Processing: Automation and forwarding of data to internal systems
• Legal Basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
• Further Information: Make.com processes data in compliance with the GDPR. Details can be found in the Privacy Policy of Make.com.
• Why EU Companies with Security Concerns Trust Make to Automate their Processes

3.2 MailerSend :
MailerSend is used to forward data from the contact form via email to us. MailerSend also acts as a data processor in accordance with Article 28 GDPR.

• Processed Data: Name, email address, company name, message
• Purpose of Processing: Sending notification emails to our team to handle your inquiry
• Legal Basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
• Further Information: MailerSend processes data in compliance with the GDPR. Details can be found in the Privacy Policy of MailerSend.
• How MailerSend stays GDPR-compliant

4. Data Security and Protection :
The services Make.com and MailerSend implement technical and organizational measures to ensure the confidentiality and integrity of your data. Data is stored only for as long as necessary to fulfill the intended purpose:

4.1 Your Rights :
You have the following rights:

• Access to information about the processing of your data (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure of your data (Article 17 GDPR), provided no legal retention periods apply
• Restriction of Processing (Article 18 GDPR)
• Objection to data processing (Article 21 GDPR)
• Data Portability (Article 20 GDPR)

To exercise these rights, please contact us: max@hermess.lu

You also have the right to file a complaint with a supervisory authority.

5. Data Processing Agreements :
We have concluded Data Processing Agreements (DPAs) with Make.com and MailerSend in accordance with Article 28 GDPR to ensure GDPR-compliant data processing.

6. Updates to This Privacy Policy:

This Privacy Policy may be updated from time to time. We recommend that you review it regularly to stay informed about any changes.

Effective Date: 10.12.2024

7. Contact for Data Protection Queries :

If you have any questions regarding data protection, you can contact us at max@hermess.lu or reach out to the Luxembourg Data Protection Authority (CNPD):

• Commission Nationale pour la Protection des Données (CNPD)
• 1, Avenue du Rock’n’Roll
• L-4361 Esch-sur-Alzette
• Email: info@cnpd.lu