What data we process on mako.lu, why we do so, and how you exercise your rights under the General Data Protection Regulation.
Last updated: August 11, 2026
The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
For any question about data protection and to exercise your rights, write to us at info@mako.lu.
We collect only the data we actually need for the purpose at hand.
Each time a page is requested, your browser transmits technically necessary data to our server, where it is stored in log files:
The purpose is the technical operation of the site along with its stability and security. The legal basis is our legitimate interest in a secure service free of disruption (Art. 6(1)(f) GDPR). This data is not combined with other sources and is not evaluated for marketing purposes.
The contact form and the enquiry feature on the machine pages let you reach us without obligation. In doing so we process:
This data serves to handle your enquiry and to prepare a possible contract; the legal basis is Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR where your message has no contractual context. The hash of the IP address serves solely to fend off automated bulk submissions — five enquiries per hash per fifteen minutes — and allows no conclusion about the IP address itself (Art. 6(1)(f) GDPR). Your enquiry is stored in our database, forwarded by e-mail to the responsible mailbox and, where that feature is enabled, answered with an acknowledgement of receipt. Providing the data is voluntary; without a name and e-mail address, however, we cannot process an enquiry.
For notifications and acknowledgements of receipt we use the Microsoft Graph interface of Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Where that route is not configured, messages are sent via our e-mail provider's SMTP server. In both cases the sender and recipient details and the content of the message are processed. The legal basis is Art. 6(1)(b) and (f) GDPR.
The accessibility tools on this site — font size, contrast, reading guide and read-aloud — store your selection in your browser's local storage so that it is retained on your next visit. This information does not leave your device and is not evaluated by us; you can delete it at any time in your browser settings.
The read-aloud feature uses the speech synthesis of your browser or operating system. Depending on the vendor and the voice selected, that speech may be generated on the servers of the browser or system provider; we have no control over this.
No cookies are set on the public pages — neither for analytics nor for marketing or profiling. A single cookie is used in the password-protected administration area (mako_admin_session); it keeps our staff signed in, is technically necessary for that purpose and expires after seven days or on sign-out. Because no consent-requiring cookies are used on the public pages, there is no consent banner here.
We embed no maps, videos or social media plugins directly in our pages. The addresses in the footer and on the contact page are plain links to Google Maps; the icons link to our profiles on Facebook, Instagram and TikTok. Only when you click such a link does your browser establish a connection to the provider concerned, transmitting your IP address among other things. We have no control over that processing; the privacy terms of the respective provider apply.
The typeface used is bundled when the site is built and served from our own server. No connection to Google Fonts or any other font provider is made when the pages are loaded.
Within our company, only those departments that need your data to handle your request have access to it. In addition, the following may be recipients:
We conclude agreements pursuant to Art. 28 GDPR with our processors.
You have the following rights in relation to us:
An informal message to info@mako.lu is enough. We reply within one month; if a request is particularly extensive, we will inform you that this period has been extended.
If you believe that we process your data unlawfully, you may — without prejudice to any other remedy — lodge a complaint with the competent supervisory authority: Commission nationale pour la protection des données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg — cnpd.public.lu
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place. Quotations, rental agreements and sales are decided exclusively by our staff.
We adapt this policy when our website or the legal framework changes. Only the version published here applies; this version dates from August 11, 2026.
Questions? Get in touch
