Privacy notice — studio rental

Updated 22 October 2026 · 13 Av. Gaston Diderich, L-1420 Luxembourg

This notice explains what happens to your personal data when you book or ask about the Lux Photo Studio room, under the EU General Data Protection Regulation (GDPR) and Luxembourg data-protection law. The conditions of the rental itself are on the studio terms & conditions page.

1. Who is responsible

The controller of your data is AM SE — Andrii Mitin (known as Andre Mitin), self-employed · 13 Avenue Gaston Diderich, L-1420 Luxembourg · RCS A44485.

Questions or requests about your data: info@luxphotopro.com. No Data Protection Officer is appointed (not required for us).

If you book as a company, the invoice is issued by Lux Photo Pro S.à r.l.-S (RCS B290472, VAT LU36089387, same address), and the company name, VAT number and invoice details go to it for that purpose.

2. What we collect

What you give us when you book or send a request:

• your name, e-mail address and phone number;
• the hours you picked, the number of people, the extras you chose and anything you write in the notes field;
• for a company booking: the company name and VAT number;
• optionally: the type of shoot and the name and website or Instagram of the photographer;
• a promo code or, for a Lux Photo Club rate, the e-mail your membership is paid with (checked automatically).

Payment. You pay on a Stripe page. We never see your card number; Stripe tells us that the payment went through, the amount and the booking it belongs to.

Automatically. Our own page counter records that a page was opened and an hour was picked, without cookies and without storing your IP address. If you arrive from an advert, a campaign tag is kept on your device for 30 days. Details and the third-party tools that need your consent are in section 12 of the studio terms.

You are not obliged to give us this data, but without it we cannot take or confirm a booking.

3. Why we use it and on what basis

• Running your booking — holding the slot, taking payment, confirming, changing or cancelling it, refunding, sending the confirmation and the reminder the day before, and giving you access to the room: performance of the rental contract.
• Answering your request — for example “Ask for another time”, or one e-mail if a payment did not go through and the slot is still free: steps taken at your request before a contract, and our legitimate interest in answering you.
• Invoices and accounting — legal obligation under Luxembourg law.
• Keeping the booking system secure and settling disputes — our legitimate interest.
• Analytics and advertising cookies — only with your consent, which you can withdraw at any time with the “Cookies” link at the bottom of the page.

We do not sell your data.

4. Who receives it

We act as controller. The following providers process data on our behalf, under their data-processing terms:

• Stripe — card payments and refunds;
• Cloudflare — hosting of this website;
• Supabase — our booking database (EU region);
• Google — the studio calendar, where your name, contact details, hours and notes appear on the booking, and, only after you accept cookies, Google Analytics;
• Resend — the e-mails we send you (confirmation, reminder, change and cancellation notices);
• Bitrix24 — our order records;
• Telegram — internal notifications to our team about bookings.

Other recipients, only where needed: our accountant, legal advisers and the tax authorities.

5. Transfers outside the EU

Some of these providers are based outside the European Economic Area. Where data is processed there, the transfer relies on an adequacy decision or on the EU Standard Contractual Clauses.

6. How long we keep it

Data	Kept for
Bookings and invoices	10 years (accounting rules in Luxembourg)
Requests that never became a booking	3 years from the last contact
Campaign tag on your device	30 days (you can clear it at any time)

After that the data is deleted or anonymised.

7. Your rights

You can ask us for access to your data, to correct it, to erase it, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent you can withdraw it at any time. Write to info@luxphotopro.com; we answer within one month. We may keep what the law obliges us to keep — for example invoices — until the period in section 6 ends.

You may also lodge a complaint with the Luxembourg supervisory authority: Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux · cnpd.public.lu.

8. Cookies

What runs on this website, what needs your consent and how to change your choice: studio terms, section 12.

9. Security and changes

The website runs over HTTPS, access to bookings is limited to the people who need it, and card data stays with Stripe. If a breach puts your rights at risk, we notify the CNPD and, where required, you. When this notice changes, the date at the top changes with it.

AM SE — info@luxphotopro.com · 13 Avenue Gaston Diderich, L-1420 Luxembourg · RCS A44485.