Hosting under Luxembourg law

Where the data is, who runs it, who can ask for it.

The three questions every supplier form asks, answered in plain words. The contract versions are on the legal page.

The short version

What you can write in the form

Where
In Luxembourg, in LuxConnect DC1.1 in Bettembourg, on hardware we own. Nothing is stored outside the EU.
Who
Us. One Luxembourg company owns and runs every server, the mail system and the customer portal. Nobody else processes your data; the datacenter operator has the building, not the systems.
Who can ask
Luxembourg courts and authorities, and authorities of other EU Member States where their law binds us or through the EU channels. A request from outside the EU has no effect here. We hand over what an order covers and nothing more, and we tell you unless the order forbids it.

FAQ

Questions we get from procurement

Not your data. Our own billing uses a payment provider that processes outside the EEA; that touches payment and identity-check data, never what you host.

The data processing agreement from the legal page. It lists the locations and the sub-processors, of which there are none for customer data.

Whether your use of a service makes you an essential or important entity is your own assessment. If your auditor needs a specific statement from us, open a ticket and you get it in writing.

The request is checked for a legal basis under EU law or the law of a Member State that binds us, answered with the minimum, and you are informed unless the order forbids it. How many such requests we get per year is on the transparency report.

Guides

Read before you order

Questions

Need a written statement?

Tell us what your auditor wants to see and we answer with a reference to the contract.

Contact