Privacy policy · Me and My Luxembourg

In short: this site has no visitor statistics, no advertising or social media trackers, no accounts and no cookies of its own. Like any website, it can't be delivered without our host handling some technical data. If you email us, we receive your message. And the directory publishes business details that sometimes name a person. This page explains each of these.

Last updated 30 October 2026.

Who is responsible

Me and My Luxembourg (www.me-n-my.com/luxembourg) is run by Brigitte Sarti, 61, rue Klensch, L-3250 Bettembourg, Luxembourg. She is responsible (the "controller") for the personal data described here. You can reach us at hello@me-n-my.com. See also the legal notice.

What the site uses, and what it doesn't

No visitor statistics or analytics tools.
No advertising, tracking or social media scripts, and no "like" or "share" buttons.
No cookies set by this site.
No accounts, comments or contact forms.
No fonts, maps, videos or other content loaded from other companies. The font is served from this site. Links to maps and other websites only open those sites when you click them.
The only scripts are the site's own, for the menu, search and filters. They don't store anything in your browser: no cookies, no local storage and no session storage.

Our host also asks browsers to report failed connections to it ("Network Error Logging"). If a page fails to load, your browser may send Cloudflare a short report with the page address and the type of error. Successful visits aren't reported.

Search and filters

When you search or filter the listings, your words are kept in the page address after a "#" sign, for example /listings/#q=vet. Browsers don't send that part of an address to the server, so the filtering happens in your browser and your search words aren't sent to us or our host.

Two exceptions. If JavaScript is switched off in your browser, the search box sends an ordinary request such as /listings/?q=vet. The words are then part of the address you request, and our host processes and may log it like any other page request (see Hosting). And if you copy, bookmark or share a search link, the words are in that link.

Hosting

The site is hosted on Cloudflare Pages, run by Cloudflare, Inc. in the United States. When you open a page, Cloudflare's servers process technical data about the request: your IP address, the page address requested, the date and time, your browser's identification (user agent) and, if your browser sends it, the page you came from.

Why: to deliver the pages to you, keep the site secure, protect it against attacks and misuse, and find faults.
Legal basis: our legitimate interest in running a website that works and is secure (GDPR article 6(1)(f)). A website can't be delivered without this.
Who receives it: Cloudflare, as our processor under its data processing addendum, which is part of its terms for accounts like ours. Cloudflare uses the sub-processors it lists here.
Outside the EU: Cloudflare may process this data in the United States and other countries. For transfers to the US it relies on its certification under the EU-U.S. Data Privacy Framework, and otherwise on the EU's standard contractual clauses (Cloudflare's explanation).
How long: Cloudflare doesn't publish a fixed period for these request logs. Under its data processing addendum it keeps personal data only as long as needed to provide the service. We haven't set up any log storage or log export of our own, so we don't keep copies of these logs.

Cloudflare also uses some of this data for its own purposes, such as network security. See Cloudflare's privacy policy.

When you email us

If you write to hello@me-n-my.com, we receive your email address, your name if you include it, whatever you put in the message, and the technical details every email carries (such as when it was sent). We use it only to reply and, when that's what you asked, to add, correct or remove information on the site.

The legal basis is our legitimate interest in answering messages and keeping the directory accurate (GDPR article 6(1)(f)). When a business asks us about its listing or another arrangement, it is also to take the steps it asked for (article 6(1)(b)).

Our email is hosted by Zoho Mail, as our processor. Our account is on Zoho's EU service (zoho.eu), provided by Zoho Corporation B.V. in the Netherlands. Zoho says it stores the data of EU accounts in its data centres in the EU (Amsterdam and Dublin). It also says that, in rare cases, support and engineering staff of its group company in India may access EU account data remotely, where that is needed to solve a technical problem. That remote access counts as a transfer outside the EU, and Zoho covers it with the EU's standard contractual clauses (Zoho's privacy FAQ, Zoho and the GDPR).

We don't sell your message or your address, and we don't pass them on to anyone for their own use. The only company that processes them for us is our email provider. We never add you to a mailing list because you wrote to us.

We keep emails for as long as we need them to deal with what you asked. Twice a year we go through the mailbox and delete conversations whose last message is more than two years old. We may keep a message longer only if we need it to establish or defend a legal claim, or if the law requires us to. After deletion, a copy can remain in Zoho's encrypted backups for up to three months.

People named in the listings

Listings describe businesses, organisations and public services. Some of them name a person: for example a vet, a teacher, a maker who trades under their own name, or the person behind a social media account in "Local voices". That is personal data, even when it is already public.

What we publish: the name, business name and professional title or qualifications the person publishes, business address, phone number, email, website or social media account, opening hours, languages and what they offer. No private details, ratings or reviews.
Where it comes from: the person's or business's own website and public social media profile, official sources such as public authorities and professional bodies, and published guides such as Visit Luxembourg or the Michelin Guide.
Why: to help people who are new to Luxembourg find local services, especially ones that work in English.
Legal basis: legitimate interests (GDPR article 6(1)(f)): ours in running a useful directory, and the public's in finding services. To keep this fair to the people listed, we only use details they publish themselves so that customers can find them, only in a professional context, without ratings or reviews, and anyone can have their listing corrected or removed.
Who can see it: anyone who visits the site. Cloudflare hosts it for us.
How long: as long as the service is offered and the details are accurate. We review listings regularly and update or remove them when something changes, a business closes or the details can no longer be confirmed.
Your choice: if you are listed, you can ask us to correct your details or object to the listing at any time at hello@me-n-my.com. If you object, we remove your personal details promptly.

Links to other websites

Most listings and guides link to other websites. Those sites have their own privacy policies and may use cookies. We aren't responsible for how they handle your data.

Your rights

Under the GDPR you can ask to see the personal data we hold about you, have it corrected or deleted, restrict its use, receive a copy of it, and object to its use where we rely on legitimate interests. Write to hello@me-n-my.com. We'll reply within one month.

You can also complain to the Luxembourg data protection authority, the CNPD (Commission nationale pour la protection des données).

Changes

Before we add anything that changes this, such as visitor statistics, a newsletter, advertising, affiliate links or payments, we'll update this page and the date at the top.