Imprint & Legal Notice

Beetles & Bugs S.à r.l. – Online & Physical Store

Beetles & Bugs S.à r.l.

Managing Director / Owner

Isabelle Mertes

Registration & Identification

Authorisation No.: 10169469/0

RCS Luxembourg: B287219

National ID No.: 2024 2432 054

VAT No.: LU35830580

Registered Office & Store Address

Beetles & Bugs S.à r.l.

141 route de Trèves

L-6940 Niederanven

Luxembourg

Store Name

beetles & bugs

Opening Hours

Monday – Friday: 10:00 – 18:00

Saturday: 10:00 – 17:00

Contact

Phone: (+352) 34 85 86

Email: welcome@beetlesandbugs.com

Website: www.beetlesandbugs.com

Bank Details

Beetles & Bugs S.à r.l.

Banque et Caisse d’Epargne de l’État Luxembourg

IBAN: LU44 0019 7655 5028 2000

BIC / SWIFT: BCEELULL

Privacy Policy of Beetles & Bugs S.à r.l.

1. Controller and Contact Details

The controller responsible for the processing of your personal data is:

Beetles & Bugs S.à r.l.

141 route de Trèves

L‑6940 Niederanven

Luxembourg

Email: welcome@beetlesandbugs.com

Phone: +352 34 85 86

If you have any questions about this privacy policy or how we process your personal data, you can contact us using the above details. If we appoint a Data Protection Officer (DPO), their contact details will be published here.

2. Scope of this Privacy Policy

This privacy policy explains how we process personal data when you:

• visit our website and online shop

• place an order online or in our physical store

• create a customer account

• participate in our customer card / loyalty programme

• contact us by email, phone or via social media.

3. Categories of Personal Data We Process

Depending on your interaction with us, we may process the following categories of

• Identification and contact  name, postal address, email address, phone number

• Order and contract  items purchased, order number, invoices, payment status, delivery information

• Payment  limited payment information (e.g. payment method, masked card details or transaction ID); full card data is handled by our payment service provider

• Account  login details, customer account information, preferences

• Loyalty / customer card  customer number, points balance, purchase history relevant for the points system

• Communication  content of your messages and enquiries

• Technical data (website): IP address, device information, browser type, date and time of access, cookies and similar technologies.

4. Purposes and Legal Bases of Processing

We process your personal data only where there is a legal basis under the EU General Data Protection Regulation (GDPR), in particular:

4.1 Performance of a Contract (Art. 6(1)(b) GDPR)

We process data to:

• process and fulfil your orders (online and in‑store, where linked to your account or loyalty card)

• manage deliveries, returns and warranty claims

• set up and manage your customer account

• operate our customer card / loyalty programme (collecting and redeeming points, managing your balance)

• communicate with you about orders, deliveries and customer service issues.

4.2 Compliance with Legal Obligations (Art. 6(1)(c) GDPR)

We process data where required to:

• comply with tax and accounting obligations

• comply with consumer and commercial law requirements

• respond to lawful requests from public authorities.

4.3 Legitimate Interests (Art. 6(1)(f) GDPR)

We may process data based on our legitimate interests, for example to:

• ensure the security and stability of our website and IT systems

• prevent and investigate fraud or misuse

• improve our services and customer experience (using aggregated or pseudonymised data where possible).

Where we rely on legitimate interests, we balance these interests against your rights and reasonable expectations.

4.4 Consent (Art. 6(1)(a) GDPR)

In certain cases we process data based on your consent, for example:

• sending you marketing emails/newsletters

• using certain optional cookies and similar technologies

• linking your in‑store purchases to your loyalty profile where not necessary for contract performance.

You can withdraw your consent at any time with effect for the future (see Section 10).

5. Customer Card / Loyalty Programme

If you participate in our customer card / loyalty programme, we process:

• your registration data (e.g. name, contact details)

• your customer card number or customer ID

• data about purchases associated with your card or account (date, store/online, value, items if needed)

• your points balance and redemptions.

We use this data to:

• operate the points system (1 EUR = 1 point, redemption from 500 points = 5 EUR)

• inform you about your points status and benefits

• prevent misuse of the programme.

The main legal basis is the performance of the loyalty contract (Art. 6(1)(b) GDPR). Marketing communications related to the loyalty programme may additionally be based on your consent or our legitimate interest, depending on the channel and applicable law.

6. Recipients of Personal Data

We share your data only where necessary and in accordance with the GDPR, in particular with:

• Service providers (processors) that act on our instructions, such as:

• IT and hosting providers

• payment service providers

• shipping and logistics partners

• customer relationship and newsletter tools

• Professional advisors (e.g. tax advisors, auditors, lawyers) where necessary

• Public authorities where we are legally obliged to do so.

These recipients are located primarily within the EU/EEA. If we transfer data to recipients outside the EU/EEA, this will only take place where an adequate level of protection is ensured (e.g. by adequacy decision or standard contractual clauses).

7. Data Retention

We store personal data only for as long as necessary for the purposes described in this policy or as required by law.

• Order and contract  retained for the duration of the contract and for the statutory retention periods (e.g. tax and accounting law, typically 10 years).

• Customer account and loyalty  retained for as long as your account/loyalty membership is active; if you request deletion, we will delete or anonymise your data unless legal retention obligations apply.

• Marketing  retained until you object or withdraw your consent, or until the purpose no longer applies.

• Technical and log  retained for a short period necessary to ensure security and functionality of our website, unless longer storage is required for security or legal reasons.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• enable basic functions (e.g. shopping cart, login)

• analyse usage (e.g. visitor counts, pages visited)

• provide certain comfort and personalisation features.

Technically necessary cookies are used on the basis of our legitimate interest in providing a functional website and online shop.

Non‑essential cookies (e.g. analytics or marketing cookies) are used only with your consent. You can manage your cookie preferences via the cookie banner / cookie settings on our website and in your browser settings.

Further details can be found in our separate Cookie Policy, if provided.

9. Marketing Communications

With your consent, we may use your contact details (e.g. email address) to send you newsletters and information about our products, offers and promotions.

You can unsubscribe at any time by:

• clicking the “unsubscribe” link in the email, or

• contacting us using the contact details in Section 1.

If allowed by applicable law, we may also send you marketing communications based on our legitimate interest where you are an existing customer and we clearly inform you about your right to object.

10. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal

• Right of access: to obtain confirmation as to whether we process your personal data and information about this processing, as well as a copy of the data.

• Right to rectification: to have inaccurate personal data corrected and incomplete data completed.

• Right to erasure (“right to be forgotten”): to have your personal data erased where certain conditions are met.

• Right to restriction of processing: to have processing restricted in certain cases.

• Right to data portability: to receive your personal data in a structured, commonly used and machine‑readable format and to transmit it to another controller where legally possible.

• Right to object: to object at any time, on grounds relating to your particular situation, to processing based on legitimate interests; you also have the right to object at any time to processing for direct marketing purposes.

• Right to withdraw consent: where processing is based on your consent, you can withdraw that consent at any time with effect for the future.

To exercise your rights, you can contact us at any time using the contact details in Section 1.

11. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.

In Luxembourg, the competent authority is:

Commission nationale pour la protection des données (CNPD)

15, Boulevard du Jazz

L‑4370 Belvaux

Luxembourg

Website: https://cnpd.public.lu/

12. Obligation to Provide Data

In the context of our business relationship, you may be required to provide certain personal data that are necessary for the conclusion and performance of the contract or which we are legally obliged to collect.

If you do not provide such data, we may not be able to conclude or perform the contract (for example, we cannot deliver your order without your name and address).

Participation in the loyalty programme or receipt of marketing communications is voluntary; however, if you do not provide the necessary data or consent, you will not be able to use those specific services.

13. Automated Decision-Making and Profiling

We do not use automated decision‑making, including profiling, which produces legal effects concerning you or similarly significantly affects you, within the meaning of Article 22 GDPR.

If this changes in the future, we will inform you separately and provide all information required by law.

14. Changes to this Privacy Policy

We may update this privacy policy from time to time, for example to reflect changes in our processing activities or legal requirements.

The current version of this privacy policy is available on our website and can be consulted in our store. If we make material changes, we will inform you in an appropriate manner.