GDPR Statement

Effective date: 28 March 2026

img.lu, based in Luxembourg, is fully committed to compliance with the General Data Protection Regulation (GDPR) and national Luxembourg data protection rules.

Data Controller

img.lu (Luxembourg)

Data We Process

We apply strong data minimization: - Only limited technical metadata (anonymized where possible) - Temporary processing of images you explicitly upload - No user accounts, no marketing tracking, no profiling

Simple Analytics is used solely for aggregated, non-personal usage statistics. It collects no personal data and requires no consent for tracking.

Lawful Basis

• Performance of a contract / service requested by you (image processing)
• Legitimate interest (technical functionality, security, and load management)

Our practices align with GDPR’s core principles and support the objectives of the EU Data Act by giving users maximum control over their data with minimal collection.

Data Subject Rights

Under the GDPR you can: - Request access, rectification, or erasure - Object to or restrict processing - Withdraw consent (where applicable) - File a complaint with the CNPD (Luxembourg)

Because we process very little personal data, these rights are easy to exercise.

Data Protection Contact

Email: img@img.lu

You may also contact the Luxembourg supervisory authority: Commission Nationale pour la Protection des Données (CNPD)

This statement forms part of our Privacy Policy.