Privacy policy

Last updated: 24 September 2026

We are pleased about your interest in pv MAX. Here you will learn which personal data we process when you use our website and our webshop or when you are in a business relationship with us, why we do this, and what rights you have. The basis is the EU General Data Protection Regulation (GDPR) and the Luxembourg law of August 1, 2018, on the organization of the National Data Protection Commission and the general data protection regulation.

Our webshop is exclusively aimed at businesses. We primarily process personal data from contacts in our client companies.

1 Controller

pv MAX S.à r.l.
Rue de Blaschette 1
L-7353 Lorentzweiler
Luxembourg

Phone: +352 288 089 800
Email: hello@pv-max.com
RCS Luxembourg B288531

2 Your data at a glance

3 Hosting and server log files

The website and webshop run on the company software Odoo. The servers are operated by an external hosting service provider on our behalf.

With each request, the server automatically stores information that your browser transmits: IP address, date and time of access, requested address, referrer URL, browser type and version, as well as operating system. We need this data to operate the website stably and securely and to detect attacks (legitimate interest, Art. 6 para. 1 lit. f GDPR). We delete the log files as soon as they are no longer needed for this purpose, unless they are required for a longer period to clarify a security incident.

4 Data processing on the website and in the web shop

4.1 Encryption

The connection to our website is encrypted via TLS. You can recognize this by "https://" and the lock symbol in the browser.

4.2 Cookies

We only use cookies that are technically necessary for the operation of the website. We do not use analysis or marketing cookies.

• session_id: holds your session, your login, and your shopping cart
• frontend_lang: remembers the selected language
• tz: remembers your browser’s time zone for displaying dates and times

The legal basis is our legitimate interest in a functioning website (Art. 6 para. 1 lit. f GDPR) and the exception for strictly necessary cookies in the Luxembourg law of May 30, 2005, on data protection in electronic communications. You can delete or block cookies in your browser. The registration and shopping cart will not work then.

4.3 Visitor statistics in Odoo

Odoo records page views in its own database (country, language, pages viewed, time). If you are logged in, these views are associated with your customer account. We use this to better manage inquiries and orders (Art. 6 para. 1 lit. f GDPR). The data does not leave our system.

4.4 Contact form, email and registration as a new customer

If you contact us via the contact form, by email, or by phone, we process your information to respond to your inquiry, such as your name, company, email address, phone number, and message. The inquiry will be stored in our CRM so that we can associate follow-up questions.

When you register your company as a new customer, we collect the company name, address, country, VAT ID number, preferred language, contact person with position, email address, and phone number. We verify the information and then set up your company as a customer.

The legal basis is the initiation of a contract (Art. 6 para. 1 lit. b GDPR), and for general inquiries, our legitimate interest in providing a response (Art. 6 para. 1 lit. f GDPR).

4.5 Customer account, web shop and orders

Our webshop is a pure B2B shop. You can see prices and ordering options after logging in with your customer account. We create customer accounts for verified business customers.

For customer accounts and orders, we process:

• Login data: email address, encrypted password
• Master data: company, address, VAT number, contact person, phone, email
• Order data: items ordered, quantities, prices, delivery and invoice address, delivery requests
• Wish list and product comparison, if you use them
• Documents: quotations, order confirmations, delivery notes, invoices

In the customer account, you can view your data, orders, and invoices. We verify the VAT ID number through the EU Commission's VAT Information Exchange System (VIES). We manually check orders in the webshop before acceptance, particularly freight, credit limit, and approval.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our statutory retention obligations (Art. 6(1)(c) GDPR).

4.6 Payment and factoring

We bill by invoice; there is no online payment available in the shop. We can assign our claims to a factoring company. For this purpose, we transmit invoice data, company and contact information, and outstanding amounts to this company. The legal basis is our legitimate interest in secure receivables financing (Art. 6 para. 1 lit. f GDPR) as well as contract fulfillment (Art. 6 para. 1 lit. b GDPR).

4.7 Links to social networks

On our website, we link to our profile on LinkedIn. It is a simple link. Only when you click on it do you leave our website, and LinkedIn's privacy policy applies. No data is transmitted to LinkedIn when you simply visit our pages.

4.8 Links to other websites

Our pages contain links to manufacturers and partners. The respective providers are responsible for their data processing.

5 Recipients and service providers

Your data will only be shared if it is necessary for the stated purposes. Service providers working on our behalf have been contractually obligated according to Art. 28 GDPR.

A transfer to countries outside the European Economic Area only takes place if there is an adequacy decision from the EU Commission (e.g., EU-US Data Privacy Framework) or appropriate safeguards such as EU standard contractual clauses are in place.

6 How long we store your data

We store personal data only as long as necessary for the respective purpose:

• Enquiries without a contract: until the enquiry has been fully processed and no further questions are expected
• Customer account and master data: for the duration of the business relationship
• Order and invoice documents: for the duration of the statutory commercial and tax retention periods in Luxembourg
• Server log files: see section 3

7 Your rights

You have the right to:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR), unless a retention obligation applies
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on our legitimate interest (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

Just write to us at hello@pv-max.com.

8 Right to lodge a complaint

You can file a complaint with a data protection authority. The responsible authority for us is the Luxembourg National Data Protection Commission:

Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux
www.cnpd.lu

You can also contact the supervisory authority at your place of residence or workplace.

9 Obligation to provide data

For an inquiry, registration, or order, we need the information marked as mandatory fields. Without them, we cannot process the inquiry or conclude a contract. Automated decision-making, including profiling, as per Article 22 of the GDPR does not take place.

10 Changes

We will adjust this privacy policy if our website, our service providers, or the legal situation changes. The version published here will apply.