Privacy Policy

In accordance with the EU General Data Protection Regulation (GDPR)

1. Controller

The controller responsible for data processing on this website is:

Ourblick SARL
39 Rue du Sanatorium
L-9425 Vianden, Luxembourg

Email: contact@ourblick.com

2. Overview of Data Processing

We take the protection of your personal data very seriously. We process personal data only to the extent necessary to provide a functional website and our content and services.

2.1 Data Collected via the Contact Form

When you use our contact form, the following data is collected:

Name
Email address
Subject
Message text

Purpose: Processing your enquiry or reservation request.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to customer enquiries).

Storage duration: Your data will be deleted after your enquiry has been fully processed, unless statutory retention obligations apply.

2.2 Server Log Files

The hosting provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

Browser type and version
Operating system used
Referrer URL (previously visited page)
Hostname of the accessing computer
Time of the server request
IP address

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring the secure and efficient operation of the website).

3. Cookies and Sessions

This website uses cookies. For detailed information, please see our Cookie Policy.

3.1 Session Cookies

We use technically necessary session cookies to enable the core functionality of the website (e.g. password protection, language selection). These cookies are automatically deleted when you close your browser.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring website functionality).

3.2 CSRF Cookies

For the security of our forms, we use CSRF tokens (Cross-Site Request Forgery protection). These are technically necessary and do not track any personal data.

4. External Services (CDN)

To provide an optimal user experience, we use the following external services:

4.1 Bootstrap (jsDelivr CDN)

We use Bootstrap via the jsDelivr Content Delivery Network for layout and design. When loading these files, your IP address is transferred to jsDelivr (Prospect One, Poland).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an efficient and secure website delivery).

4.2 Font Awesome

We use Font Awesome icons. When loading these, your IP address is transferred to Fonticons, Inc. (USA).

Legal basis: Art. 6(1)(f) GDPR.

4.3 Google Fonts

Our 404 error page uses Google Fonts. When this page loads, a connection to Google servers (Google LLC, USA) is established and your IP address is transferred.

Legal basis: Art. 6(1)(f) GDPR.

4.4 Cloudflare Turnstile

To protect your enquiries via the contact form from unwanted or automated spam messages, we use the "Turnstile" service provided by Cloudflare, Inc. (USA). This service performs a non-interactive challenge to determine whether the form is being submitted by a human or an automated program (bot), without requiring image puzzles or user interaction.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting our web offerings from abusive automated spying and spam).

5. Data Transfer to Third Countries

Through the use of Font Awesome, Google Fonts, and Cloudflare Turnstile, data may be transferred to the USA. The USA is considered a country with an adequate level of data protection based on the EU-US Data Privacy Framework.

6. Your Rights

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR): You can request information about your stored personal data.
Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
Right to erasure (Art. 17 GDPR): You can request the deletion of your data.
Right to restriction of processing (Art. 18 GDPR): You can request the restriction of data processing.
Right to data portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR): You can object to data processing based on legitimate interests.

To exercise these rights, please contact us at: contact@ourblick.com

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for Luxembourg is:

Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux, Luxembourg
Phone: +352 26 10 60 1
Website: https://cnpd.public.lu

8. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in our data processing practices or legal requirements. The current version is always available on this page.

Last updated: March 2026