Privacy policy
This policy describes how SQUARE PLUS S.A. (hereinafter “SQUARE PLUS” or “we”) collects, uses and protects your personal data when you use the website squareplus.lu, in accordance with Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018 on data protection.
1. Data controller
SQUARE PLUS S.A., a public limited company (société anonyme) under Luxembourg law, registered with the Luxembourg Trade and Companies Register under number B237609, with its registered office at 3, Place François-Joseph Dargent, L-1413 Luxembourg. Contact: info@squareplus.lu – +352 27 72 88.
2. Data collected
- Contact, information request and viewing request forms : surname, first name, e-mail address, telephone number, message, search criteria (property type, location, budget, floor area, number of rooms).
- Agent area (access restricted to agency staff): username, e-mail address, encrypted password, professional profile information.
- Browsing data : IP address, browser type, pages viewed, audience measurement data, via cookies and similar technologies (see our cookie policy).
3. Purposes and legal bases
- Responding to your information requests and arranging viewings – pre-contractual steps taken at your request (art. 6.1.b GDPR).
- Managing the business relationship and following up your property project – legitimate interest (art. 6.1.f GDPR).
- Managing agent area accounts – performance of the contract (art. 6.1.b GDPR).
- Measuring website audience and displaying interactive maps – consent (art. 6.1.a GDPR), which you may withdraw at any time via the cookie banner.
- Complying with our legal obligations, in particular anti-money laundering requirements applicable to estate agents – legal obligation (art. 6.1.c GDPR).
4. Recipients
Your data is processed by authorised SQUARE PLUS staff. It may be transmitted to our technical service providers acting as processors: website hosting (Hostinger, servers located in the European Union), e-mail tools, as well as to Google (Google Maps, audience measurement) where you have accepted the corresponding cookies. Your data is never sold to third parties.
5. Transfers outside the European Union
Certain service providers (in particular Google) may process data outside the European Union. Such transfers are governed by appropriate safeguards within the meaning of the GDPR (adequacy decision or standard contractual clauses).
6. Retention period
- Contact and viewing requests: 3 years from the last exchange.
- Files relating to a transaction: statutory retention period applicable to estate agents (10 years).
- Agent area accounts: duration of the relationship, then deletion.
- Cookies: according to the periods indicated in the cookie policy (13 months maximum for consent).
7. Your rights
You have the right of access to your data and the rights to rectification, erasure, restriction of processing, objection and data portability, as well as the right to withdraw your consent at any time. To exercise these rights, write to us at info@squareplus.lu or by post to the registered office, enclosing proof of identity. You may also lodge a complaint with the National Commission for Data Protection (CNPD), 15, boulevard du Jazz, L-4370 Belvaux – www.cnpd.lu.
8. Security
SQUARE PLUS implements appropriate technical and organisational measures (encrypted HTTPS connection, restricted access, encrypted passwords, backups) to protect your data against loss, unauthorised access or disclosure.
9. Updates
This policy may be amended at any time. Version in force: September 2026.