Privacy Policy
Last updated: March 2026
1. Data Controller
tevaxia.lu
Contact: contact@tevaxia.lu
2. Data Collected
Browsing data: When you visit the website, technical data may be collected automatically (IP address, browser type, pages visited, visit duration) via Google Analytics for audience measurement purposes.
Data entered in the calculators: The data you enter in the calculation tools (amounts, areas, dates) is processed on the client side (in your browser) if you do not have an account. If you create an account, your saved valuations are stored on our servers (hosted by Supabase, European infrastructure) and associated with your account.
User account: You can create an account via email/password or through a third-party service (Google, LinkedIn). In all cases, we collect your email address and name (as provided by the authentication service). Passwords are hashed and not readable. Your saved valuations (calculation parameters, results) are stored and accessible only by you. You may delete your account and all your data at any time by contacting us.
Sign in via Google or LinkedIn: If you choose to sign in via Google or LinkedIn, we receive your name and email address from these services. We do not receive your Google or LinkedIn password, contacts, or any other data from your account. Authentication is handled by Supabase Auth via the OAuth 2.0 / OpenID Connect protocol. You can revoke access at any time from your Google account settings (myaccount.google.com) or LinkedIn security settings.
Contact: If you contact us by email, we collect your email address and the content of your message solely for the purpose of responding to you.
3. Legal Basis for Processing
The processing of browsing data is based on your consent (Article 6(1)(a) GDPR). The processing of account data is based on the performance of a contract (Article 6(1)(b) -- provision of the cloud storage service). You may withdraw your consent at any time.
4. Cookies
The website uses cookies for audience measurement purposes (Google Analytics). These cookies collect anonymised information about website traffic. You may refuse them via your browser settings.
5. Data Retention Period
Browsing data is retained for a maximum of 14 months (standard Google Analytics duration). Contact emails are retained for the time necessary to process your request, then deleted.
6. Your Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR) and the Luxembourg law of 1 August 2018, you have the following rights:
- Right of access to your personal data
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
To exercise these rights, contact us at contact@tevaxia.lu.
7. Supervisory Authority
In the event of a dispute, you may lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, Luxembourg.
8. International Transfers
The use of Google Analytics involves a transfer of data to the United States. This transfer is governed by the European Commission's standard contractual clauses and the EU-US Data Privacy Framework adequacy decision.
User account data is hosted by Supabase (AWS infrastructure, eu-central-1 region, Frankfurt). Passwords are hashed and are never stored in plain text.