Data protection.

Controller

ECK IMMOBILIERE S.à r.l.-S.
7, rue du Brill, L-3397 Roeser, Luxembourg
contact@eck-immobiliere.lu

ECK Immobilière & Services is the shared identity used on this website: ECK Immobilière for real estate, ECK Services for complementary services and furniture, and ECK Assist for the digital project-planning assistant. These names do not identify separate companies. In this information, “ECK” means ECK IMMOBILIERE S.à r.l.-S. Each offer or mandate identifies the contracting party and the company carrying out the work.

Data entered on the site

The initial-estimate, comparison and simulation tools perform their calculations in your browser. Values entered in these tools are never stored automatically; only information transferred to an enquiry form and submitted to ECK is stored.

Contact, appointment and assistant forms may store the enquiry type, language, name, email, phone, commune, project or service, preferred date and time, message, receipt time, handling status and a technical identifier used to prevent duplicate submissions. The application does not add your IP address or device data to the enquiry record.

The enquiry assistant uses fixed rules in the browser and calls no external artificial-intelligence model. Its text is transmitted only when you submit the form.

Purposes and legal basis

The data is used to answer your enquiry, arrange an appointment and prepare an initial estimate, quotation or possible contractual relationship. Depending on the request, processing relies on taking pre-contractual steps at your request or ECK’s legitimate interest in answering enquiries and securing communications. A contact enquiry is not consent to marketing.

Hosting and technical data

The public website is hosted with ChatGPT Sites. OpenAI Ireland Limited acts as processor for hosting, maintenance and support and may process technical data generated when you access the site, including your IP address and log, usage and device information, as well as strictly necessary cookies or similar technologies. Optional advertising measurement requires your separate permission; see the sections below. ChatGPT Sites Data Processing Addendum ↗

Retention and recipients

Recipients may include authorised ECK personnel, OpenAI Ireland Limited as technical processor, and the subprocessors required for hosting and database operation as well as, where needed to answer or prepare a service, the relevant email provider or an identified service partner. The information is not disclosed to third parties for advertising. The enquiry record submitted through the public forms becomes due for deletion twelve months after receipt; the technical purge removes it on a subsequent website request. If the enquiry leads to a mandate or contract, only the information needed for that relationship is transferred to the relevant file and retained separately for the applicable statutory periods. Contact ECK to enquire about or request deletion of a specific enquiry.

Public enquiry notifications

When enabled, public enquiry form notifications will be sent through a relay hosted by Gandi in Luxembourg and its outgoing mail service. ECK will receive a data-minimised notice and the enquirer a receipt. The messages will contain only the recipient address, enquiry type and language, a reference and receipt time. Name, phone number and free text will remain in the protected enquiry area. Delivery remains disabled until sending and receipt have been verified.

Your rights

Subject to legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection. You may exercise them via contact@eck-immobiliere.lu and lodge a complaint with the CNPD Luxembourg ↗.

Customer area: accounts, projects and listings

Customer accounts, drafts, projects, listings, photos, messages, offers and acceptances are stored separately from public enquiry forms. The twelve-month purge of public enquiries does not automatically delete this portal data. Its use, retention criteria, sign-in cookie, export and deletion requests are explained in the customer area’s own privacy information, available in French and German: Customer area privacy (FR / DE).

Customer account security emails

Email verification and password reset by email require a configured and enabled delivery service and an explicit request. Registration does not automatically send these messages. A personal, single-use link lasts 24 hours for email verification or 30 minutes for a password reset. Your personal recovery code remains an alternative when email delivery is unavailable.

The database stores only a hash of the token, the account and its security version, purpose, creation, expiry and use times, and a technical reference. Expired or used tokens immediately become unusable; their records are deleted during a subsequent link request or use. When delivery is enabled, the Gandi relay and mail services process the recipient, action type and language, personal link, validity period and delivery reference. No password or project content is included. Project notices and withdrawal receipts remain available in the app without automatic email delivery. Customer area privacy (FR / DE).

Purposes and specific legal bases

A specific appointment, quotation, sale, purchase, rental or valuation request is processed to take pre-contractual steps at your request (Article 6(1)(b) GDPR). Processing of general correspondence may rely on ECK’s legitimate interest in answering enquiries and securing business communications (point f). Retention after a contract for accounting or professional duties relies on the relevant legal obligation (point c). CNPD · GDPR information ↗

Fields marked with an asterisk are required for the selected form. Your phone number is optional in public forms. The customer area requires your name, email and phone number to submit a project or listing; a draft can remain incomplete. For a service enquiry you can leave the date to be agreed; if you choose to suggest a date, you must complete that field. A contact request is not consent to marketing.

Internal follow-up records the enquiry status and, if you volunteer this information, how you found ECK, such as Google, a recommendation or a flyer. This optional information helps compare enquiry sources in ECK’s legitimate interest in improving how customers make contact. It does not affect the handling of your enquiry, is not inferred automatically and is not shared with advertising platforms. It follows the enquiry’s retention period. You may request correction or deletion, or object to this use, by contacting contact@eck-immobiliere.lu.

Recipients, statistics, transfers and retention

Recipients may include authorised ECK personnel, OpenAI Ireland Limited as technical processor for ChatGPT Sites, its published subprocessors and, where required to answer or provide a service, the relevant email providers or an identified service partner. OpenAI subprocessor list ↗

ChatGPT Sites automatically measures traffic and provides ECK with aggregated unique-visitor and page-view statistics. Secure and reliable delivery, error detection and general site improvement are the legitimate interests pursued under Article 6(1)(f) GDPR. Optional advertising measurement requires your separate permission; see the sections below. Official ChatGPT Sites documentation ↗

ChatGPT Sites does not currently offer data residency, so processing is not restricted to Luxembourg or the EEA. For transfers outside the EEA, the ChatGPT Sites Data Processing Addendum provides for EU Standard Contractual Clauses or an adequacy decision. ChatGPT Sites Data Processing Addendum ↗

ECK’s internal rule: the enquiry record submitted through the public forms becomes due for deletion twelve months after receipt; the technical purge removes expired records on a subsequent site request. If the enquiry leads to a mandate or contract, only the information needed for that relationship is transferred to the relevant file and retained separately for the applicable statutory periods. KYC/AML and transaction evidence is kept for five years after the relationship or occasional transaction ends and extended only in cases provided by law. Accounting evidence is kept for ten years from the end of the relevant financial year. Contract evidence is archived only as necessary until the applicable limitation period expires. Technical platform data is processed for the service term and thereafter as required for post-termination obligations and deletion under the ChatGPT Sites Addendum.

Automated decisions and complaints

The local tools and ECK enquiry assistant carry out neither profiling nor automated decision-making with legal or similarly significant effects. Rights can be exercised at contact@eck-immobiliere.lu; complaints may be filed with the CNPD, 15 boulevard du Jazz, L-4370 Belvaux ↗.

Necessary confirmation and preferences

The __Host-eck_receipt cookie displays confirmation after an enquiry has been saved: reference, category, email preparation status and a signed technical identifier, without a name, contact details or message. It expires after 10 minutes (Secure, HttpOnly, SameSite=Lax, path /). If your browser blocks this cookie, confirmation remains in the form.

The __Host-eck_consent cookie remembers your choice for 180 days (Secure, HttpOnly, SameSite=Lax, path /). On refusal or withdrawal, eck_consent_blocked also blocks measurement for 180 days. These cookies are limited to the website address visited. Each choice is stored on the server for 180 days with a random identifier, time, language and information version, to respect and document your decision. It is not linked to your customer file. Technical deletion occurs on a subsequent site request.

eck_consent_change sends only a temporary signal between tabs and is immediately removed from local storage.

Google Ads: optional enquiry measurement

If ECK enables Google Ads measurement, it starts only after your separate consent (Article 6(1)(a) GDPR). Google does not load before permission. Refusing does not restrict the forms. Property and service enquiries are measured separately; a visit or failed submission does not count as an enquiry.

After permission, Google may receive technical connection data such as IP address and browser, advertising click identifiers and an event with a technical conversion identifier. ECK does not send your enquiry reference, name, email, phone, address or message in this event. Enhanced conversions and advertising personalisation are disabled. eck_ads_sent: markers in sessionStorage prevent repeated sends during the tab session.

Google cookies starting with _gcl_ attribute conversions to ads; Google specifies a 90-day duration. Google mechanisms may vary by browser and settings. Google · cookies ↗

Google, withdrawal and rights

Measurement recipient: Google Ireland Limited and its service providers. Processing may involve transfers outside the EEA under Google’s terms and their safeguards. Google’s retention of data is separate from cookie lifetime. Google · data protection ↗ Google · data protection terms ↗

You can refuse or withdraw permission through “Cookie settings” at the bottom of every page. Withdrawal blocks further events, deletes accessible advertising cookies on this site and reloads the page if measurement was active. It does not retrospectively erase data already received by Google or affect the lawfulness of earlier processing. For your rights and complaints to the CNPD: Data protection.

The Google inventory must be checked in a browser after account configuration. This description is not evidence of active measurement.