It is intended to inform you about how Luxinnovation processes your personal data (hereinafter referred to as "your data"), as well as the reasons and conditions for processing this data, depending on your situation and your relationship with Luxinnovation, in accordance with the rules set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR").
The use of the terms and expressions "your data" or "you" refers to the natural persons whose data Luxinnovation processes in the various situations covered by the notices contained in this document. The terms "we", "us" and “our” refer to the Luxinnovation teams.
This notice is intended for users and visitors of the online platform published and managed by Luxinnovation. The "online platform" concept and terms refer to the unique interface that includes a connected space to facilitate user access to Luxinnovation's services and news, as well as several1websites, made available via the Internet.
The aim of this document is to inform you about how Luxinnovation processes your data when you visit the Luxinnovation online platform, as well as the reasons and conditions for processing this data, in accordance with the rules set out by the GDPR.
Contents:
Who is the data controller?
When does Luxinnovation collect your data?
Direct collection
Automated collection
What personal data is collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
Luxinnovation employees
Luxinnovation partners and shareholders
Service providers
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereinafter referred to as "Luxinnovation" or the "Data Controller") is registered with the Luxembourg Trade Register under number C16. Its head office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
Luxinnovation is the data controller, which means that it determines the purposes and means of processing your data.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
When does Luxinnovation collect your personal data?
The Luxinnovation online platform does not require visitors to register in order to view its content. Only the acceptance of cookies is recommended (see our Cookie Management Policy), failing which certain services (sending contact and/or information request forms, registering for an event, submitting a solicited or unsolicited application, registering for a newsletter, etc.) may not be available.
Luxinnovation collects your personal data in several cases:
Direct collection
Your data is collected directly from you when, for example:
you create a user account;
you fill in a contact or information request form;
you register or pre-register to take part in a Luxinnovation support programme (e.g. training programme, training course, e.g. Fit4Start);
you fill in your preference card;
you subscribe to one or more of our newsletters;
you register or pre-register for an event organised or co-organised by Luxinnovation;
you join an online community2;
you apply for an open position or internship, or submit an unsolicited application;
you share one or more articles published on the Luxinnovation website to your social network(s) via the sharing buttons.
Your visit to Luxinnovation's online platform is considered active because you use the services and tools made available to you and you intentionally and voluntarily provide your data for the purposes that are explained in each case.
Automated collection
Provided that you have accepted the cookies created through the use of Luxinnovation's Online Platform, the system may collect your data relating to your browsing when you view our online content (see our Cookie Management Policy in this respect).
When does Luxinnovation collect your personal data?
“Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”). Luxinnovation is committed to the principle of data minimisation and ensures that only appropriate and relevant data is processed as required for the defined purposes.
Depending on the type of collection considered or your use of the Luxinnovation online platform, the personal data collected about you may include the following:
Identification data: surname(s), forename(s); title, positions within the enterprise or public institution of affiliation, gender and nationality;
Contact data:
Academic data: curriculum vitae (including: academic background, training, diplomas, professional experience and names and addresses of former employers);
Electronic authentication data: Cookies and trackers, login and password;
Technical connection and browsing data: date and time of connection, pages visited, browser characteristics (type, language, etc.) and your terminal (type, resolution, etc.), cookies (see our Cookie Management Policy);
Publication data: your social networks, opinions, comments, notes, messages published via forums and the site's community and social functions;
Browsing behaviour data on Luxinnovation's online platform (see our Cookie Management Policy).
Luxinnovation provides you with sharing buttons to enable you to distribute our content via your social networks. Please note that when you use this type of service, you allow the social network to collect data about your behaviour and your browsing on the Luxinnovation online platform. To prevent the unintentional transfer of your data to social networks, Luxinnovation has set up its online platform in such a way that social media services are deactivated. The transfer of data to third parties is technically impossible without your prior consent. This is collected via your explicit consent. When social media services are activated voluntarily by the user and the user has given his/her consent to communication with social networks, the sharing buttons are active and establish the desired connection with the latter. From then on, users are free to share their content via social networks.
As Luxinnovation's online platform is not intended for minors under the age of 15, the data listed above concerning minors is not collected intentionally by our teams. Should our teams learn that this is the case, despite all the precautions taken, the data of those concerned under the age of 15 will be deleted as soon as possible.
For what purposes does Luxinnovation process your data and what is the legal basis for this processing?
The GDPR requires any processing to comply with one of the six legal bases listed therein:
the consent of the person concerned,
need for the performance of a contract concluded with the data subject or pre-contractual measures at the latter's request,
a legal obligation,
protection of the vital interests of a natural person,
the fact that the processing is necessary for Luxinnovation to fulfil its missions in the public interest or,
the legitimate interest of the data controller.
Depending on your situation and the reasons for which you are in contact with Luxinnovation, you can find the purposes of the processing of your data and the applicable legal bases set out below:
| Aims | Legal basis |
|---|---|
| Creating and managing user accounts | Performance of pre-contractual measures and the contract concluded by users |
| Enabling data subjects to use the functionalities of the Luxinnovation online platform | Performance of pre-contractual measures and the contract concluded by users |
| Manage the relationship between Luxinnovation and the user | Performance of any pre-contractual measures and the contract concluded by users |
| Hosting online communities | Performance of any pre-contractual measures and the contract concluded by users |
| Allowing the user to access other websites, tools and services provided by Luxinnovation | Performance of pre-contractual measures and the contract concluded by users |
| Prospective purposes | Luxinnovation's legitimate interests in developing and promoting its activities |
| Ensuring and reinforcing the security and stability of our systems | Luxinnovation's legitimate interests in protecting its activities from intentional and unintentional incidents |
| Defending and safeguarding Luxinnovation's rights in court | Luxinnovation's legitimate interests in protecting itself in the event of litigation |
For further information, please refer to the specific notices:
Join online communities
Who has access to your personal data?
Luxinnovation employees
Your personal data is only processed by duly authorised Luxinnovation employees, within the limits of their respective duties. These employees are regularly made aware of GDPR issues. A GDPR Officer is appointed to provide them with all his expertise in the event of questions.
Luxinnovation partners and shareholders
Your data may also be processed by Luxinnovation's data recipients ("recipients”). In the context of the above-mentioned purposes, depending on the scenario in question, the latter refers to any third party supporting Luxinnovation's activities. Under these conditions, Luxinnovation may transfer your data to its institutional partners (ministries, Luxembourg administrations and/or federations, professional chambers, universities, public research organisations, embassies, professional organisations) or non-institutional partners (Luxembourg private research organisations, service providers for the joint organisation of events, for example).
For the purposes of its international activities (preparing international trade and investment missions, responding to requests from enterprises located outside the European Economic Area, etc.), Luxinnovation may transfer your data to an international organisation or country located outside the European Economic Area:
subject to an adequacy decision by the European Commission;
in the absence of an adequacy decision by the European Commission, if Luxinnovation ensures that such transfers are balanced by appropriate safeguards (such as the European Commission's standard contractual clauses) in order to guarantee an adequate level of protection for the data transferred in all circumstances – to obtain a copy of the appropriate safeguards put in place in a specific situation, data subjects may contact Luxinnovation's GDPR officer via the email address GDPR@luxinnovation.lu;
in the absence of an adequacy decision or appropriate guarantees, on the basis of your explicit consent.
Service providers
In order to provide its services, Luxinnovation uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
our suppliers are selected according to strict criteria: they offer sufficient guarantees to implement appropriate technical and organisational measures.
contracts concluded with each service provider include either a confidentiality clause or a data protection agreement.
How long is your data kept?
Luxinnovation only keeps personal data for the retention period strictly necessary for the purposes of collection (listed and detailed for each situation that may concern you; for more information, please refer to the relevant point) – including the statutory limitation period applicable to our relationship – and to comply with our own legal and regulatory obligations.
All data contained in contact or information request forms, preference sheets, newsletter subscriptions, event registrations, applications, etc., and a fortiori your personal data, is collected and stored in Luxinnovation's database from the date of issue. It will be deleted within 36 months of the date of last contact, unless you exercise your right to erasure before this period expires.
When Luxinnovation learns (via social networks, a definitive absence of response, verbal communication, non-delivery of emails sent by our services, etc.) that an employee or representative of an enterprise with which our teams are in contact for one of the purposes listed above has left that company, the contact file of the person concerned is deactivated from all our systems. This person has been removed from all Luxinnovation mailing lists to which he or she previously belonged.
When a natural person withdraws his or her consent or asserts his or her rights, his or her data is amended (depending on the request made to Luxinnovation) or deleted from the mailing lists with which he or she is associated.
The purpose of this specific notice is to explain the processing of your personal data in the context of the recruitment process. It is addressed to all persons who submit their application to Luxinnovation, hereinafter referred to as "Applicants" or "You".
Contents:
Who is the data controller?
What personal data is collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereinafter referred to as "Luxinnovation" or the "Data Controller") is registered with the Luxembourg Trade Register under number C16. Its head office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
Luxinnovation is the data controller, which means that it determines the purposes and means of processing your data.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
What personal data is collected?
“Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”).
The personal data collected by Luxinnovation is listed below (this list is not exhaustive and may be modified at any time at the discretion of our Human Resources department):
Identification data: surname, first name, nationality and any information required under immigration laws (residence or work permits);
Contact data: Email address, postal address, telephone number;
Academic data: Curriculum vitae and cover letter (including previous positions held and names of previous employers, educational background);
Professional career: professional qualifications, skills and abilities;
Results of personality and/or skills tests;
AND: Any additional information you spontaneously decide to share with Luxinnovation during the recruitment process, whether during a telephone interview or a bilateral interview (such as a copy of your diplomas, a copy of your identity papers, letters of recommendation, your hobbies, your personal situation, your salary expectations, your preferences in terms of working hours, etc.).
Luxinnovation may collect this information either directly from applicants when they submit their application and/or when they take part in an interview (telephone or face-to-face), or from a recruitment consultant duly appointed by Luxinnovation, or from a current Luxinnovation employee who recommends you. Luxinnovation may also collect additional information about your application from public sources (such as LinkedIn).
As part of its recruitment policy, Luxinnovation formally refrains from soliciting and collecting any sensitive personal information (alleged racial or ethnic origin, etc.; political views; religious or philosophical beliefs; sex life or sexual orientation; union membership; your state of health, etc.). In order to help our Human Resources teams in this matter and to facilitate their work in terms of the GDPR, Luxinnovation urges you to only provide information that is strictly useful for processing your application. If, despite all precautions, such information is communicated to us, it will be deleted immediately.
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
When you apply for a full-time job or an internship, or submit an unsolicited application, your personal data will be processed for the following purposes:
| Aims | Legal basis |
|---|---|
Receiving and analysing applications | Pre-contractual measures at your request |
Managing the recruitment process for the position concerned | Luxinnovation's legitimate interests in the efficient and high-quality management of its recruitment process |
Communicating with you and/or informing you of the outcome of the recruitment process | Pre-contractual measures at your request |
Creating a pool of candidates for the position in question | Luxinnovation's legitimate interests in the efficient and high-quality management of its recruitment process |
For statistical purposes | Luxinnovation's legitimate interests in acquiring historical knowledge about its recruitment processes |
Conducting our reporting activities | Luxinnovation's legitimate interests in sharing knowledge about its recruitment processes |
Guaranteeing your safety and that of our premises during your visit for an interview | Luxinnovation's legitimate interests in securing its buildings and infrastructure |
Defending and safeguarding Luxinnovation's rights in court | Luxinnovation's legitimate interests in protecting itself in the event of litigation |
Keeping the curriculum vitae, cover letter and any other documents provided by the applicant who is not selected for the position, in order to create a pool of CVs or to offer another position | Consent of the data subject |
Who has access to your personal data?
The only persons authorised to process your personal data are Luxinnovation's Human Resources department and the relevant departmental managers.
They process the data in accordance with the confidentiality requirements imposed by the GDPR.
Depending on the hierarchical position of the job offer, Luxinnovation may present a summary of the recruitment process to its Luxembourg shareholders and institutional partners. Luxinnovation may also be required to provide certain information relating to your recruitment file to representatives of regulated professions such as auditors, accountants or lawyers.
Luxinnovation has integrated the Skeeled recruitment platform into its website to manage job opportunities and applications. Skeeled is a Luxinnovation subcontractor, based in Europe and whose data is hosted in the European Union, which meets all the fundamental criteria required by the GDPR.
How long will your data be kept?
In the event of applications not being accepted by Luxinnovation, personal data will be kept and archived by the Human Resources Department for 24 months from the recruitment closing date or the date of refusal for unsolicited applications in order to safeguard Luxinnovation's rights in the event of litigation. With your consent, Luxinnovation will keep your data, without archiving it, for a period of 24 months in order to be able to offer you another position. After that period, the data will be permanently removed from all our systems.
The consent you give Luxinnovation to process your personal data is retained for a period of 24 months from the date of your consent.
If the recruitment process is successful, you will join the Luxinnovation team as a full-time employee or intern (depending on the position obtained). All information provided during the candidate selection phase is recorded in your employee file. The Human Resources department will provide you with a document informing you of how your personal data is processed.
The purpose of this specific notice is to explain the processing of your personal data in the context of Luxinnovation's support programmes. It is addressed to all persons, employees or legal representatives of the companies that Luxinnovation supports, hereinafter referred to as "You."
Contents:
What personal data is collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
Luxinnovation employees
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereafter "Luxinnovation") is registered under number C16 with the Luxembourg Trade Register. Its registered office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
Depending on the support project, Luxinnovation is either the data controller (which alone determines the purposes and means of processing your data), or the joint data controller (which determines the purposes and means of processing your data in collaboration with its shareholders and partners). In the context of national funding programmes, Luxinnovation acts as a subcontractor collecting data on behalf of the data controller (the Ministry of Economic Affairs).
What personal data is collected?
“Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”).
The personal data collected for the purposes of supporting enterprises is listed below (this list is not exhaustive and may be modified at any time, at Luxinnovation's discretion):
Identification data: surname(s), forename(s), gender; title, positions within the company, legal name of the company concerned;
Contact data:
Landline/mobile phone (business or personal, depending on what is provided by the data subject),
Postal address (business or personal, depending on what is provided by the data subject),
Email address (business or personal, depending on what is provided by the data subject);
Electronic authentication data: Cookies and trackers, login (email address account creation) and password;
Other data: preferred language of communication (FR, DE, LU, EN, etc.).
Luxinnovation collects this data when you request its services via the forms set up on our online platform and when you participate in a support project offered from its catalogue of services.
Luxinnovation undertakes to collect only personal data that is necessary and relevant for the management of its support files. In order to help our teams in this matter and facilitate their work in terms of the GDPR, Luxinnovation asks its contacts to provide only information that is strictly useful for the management of their file.
In order to ensure the quality and authenticity of the data collected, and a fortiori of personal data, Luxinnovation would be grateful if you could provide us with reliable information.
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Some of the purposes for which Luxinnovation processes your data are based on Luxinnovation's missions of general interest, as detailed below (updated articles of association of 14 May 2012, article 2):
Aims | On the basis of Luxinnovation's public interest missions, as described in its updated articles of association, article 2: |
|---|---|
Customer acquisition in Luxembourg | §1 "To undertake, by all human, material and electronic means, any information, assistance and liaison measures, both at national and international level, with the aim of promoting R&D&I, technology transfer and the creation of innovative enterprises in the Grand Duchy of Luxembourg." |
Detection of needs, follow-up and support for individual projects | §4 "To assist enterprises, research organisations and R&D&I project sponsors in identifying their innovation needs, and in defining, organising, implementing and managing their R&D&I projects and programmes." |
Processing of financing applications and sending the same to the Ministry of Economic Affairs | §4 "To assist enterprises, research organisations and R&D&I project sponsors in identifying their innovation needs, and in defining, organising, implementing and managing their R&D&I projects and programmes." §7 "To communicate, on its own initiative, any information or proposal relating to the implementation of R&D&I policies in the private and public sectors to the ministers responsible for the economy, small businesses and public-sector research." |
Networking for collaboration between business and research | § 5 "To promote and facilitate technology transfer, national, community and international aid schemes for enterprises, research organisations and R&D and innovation project sponsors, as well as approve innovation consulting and support service providers." |
Newsletters and other Luxinnovation information For statistical purposes | § 3 "To raise awareness and inform the general public about innovation, creativity, design and R&D." |
Invitation to events organised or co-organised by Luxinnovation | § 5 "To promote and facilitate technology transfer, national, community and international aid schemes for enterprises, research organisations and R&D and innovation project sponsors, as well as approve innovation consulting and support service providers." |
Cluster catalogues online: publication on a website hosted by Luxinnovation of the contact details, CEO name(s) and areas of expertise of cluster partner enterprises managed by Luxinnovation. | §4 "To assist enterprises, research organisations and R&D&I project sponsors in identifying their innovation needs, and in defining, organising, implementing and managing their R&D&I projects and programmes." § 5 "To promote and facilitate technology transfer, national, community and international aid schemes for enterprises, research organisations and R&D and innovation project sponsors, as well as approve innovation consulting and support service providers." |
Statistical analysis of requests for support and participation in projects | §7 "To communicate, on its own initiative, any information or proposal relating to the implementation of R&D&I policies in the private and public sectors to the ministers responsible for the economy, small businesses and public-sector research." Luxinnovation's legitimate interests in protecting itself in the event of litigation |
Transfer of information to Luxinnovation shareholders and partners (within and outside the EU) | Consent of the data subject §8 "To study and analyse, at the request of one of the ministers responsible for the economy, small businesses or public-sector research, any project or programme from an enterprise, research organisation or R&D&I project sponsor requesting the benefit of an aid scheme or measure, or any other matter relating to R&D&I, the creation of innovative enterprises and technology transfer." |
Luxinnovation also processes your data for other purposes not explicitly provided for in Luxinnovation's articles of association:
| Aims | Legal basis |
|---|---|
Project follow-up | Legitimate interest of Luxinnovation to be informed about the continuation of projects |
Follow-up on the development of the supported enterprise | Luxinnovation's legitimate interests in conducting statistical studies |
Analysis of applicant companies' eligibility criteria | Execution of contractual measures Legal obligation: ban on financing enterprises not incorporated in Luxembourg and/or those in financial difficulty |
Information for Luxinnovation shareholders (particularly those in charge of subsidy payments) | Luxinnovation's legitimate interest in keeping abreast of project progress, measuring the impact of its intervention and the success of its programmes |
Defending and safeguarding Luxinnovation's rights in court | Luxinnovation's legitimate interests in protecting itself in the event of litigation |
Who has access to your personal data?
Luxinnovation employees
Your personal data is only processed by duly authorised Luxinnovation employees, within the limits of their respective duties. These employees are regularly made aware of GDPR issues. A GDPR officer is appointed to provide them with all his expertise in the event of questions.
Luxinnovation partners and shareholders
Your data may also be processed by Luxinnovation's data recipients ("recipients”). In the context of the above-mentioned purposes, depending on the scenario in question, the latter refers to any third party supporting Luxinnovation's activities. Under these conditions, Luxinnovation may transfer your data to its institutional partners (ministries, Luxembourg administrations and/or federations, professional chambers, universities, public research organisations, embassies, professional organisations) or non-institutional partners (Luxembourg private research organisations, service providers for the joint organisation of events, for example).
For the purposes of its international activities (preparing international trade and investment missions, responding to requests from enterprises located outside the European Economic Area, etc.), Luxinnovation may transfer your data to an international organisation or country located inside and outside the European Union and the European Economic Area:
in the absence of an adequacy decision by the European Commission, if Luxinnovation ensures that such transfers are balanced by appropriate safeguards (such as the European Commission's standard contractual clauses) in order to guarantee an adequate level of protection for the data transferred in all circumstances – to obtain a copy of the appropriate safeguards put in place in a specific situation, data subjects may contact Luxinnovation's GDPR officer via the email address GDPR@luxinnovation.lu;
in the absence of an adequacy decision or appropriate guarantees, on the basis of your explicit consent.
Service providers
In order to provide its services, Luxinnovation uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
our suppliers are selected according to strict criteria: they offer sufficient guarantees to implement appropriate technical and organisational measures.
contracts concluded with each service provider include either a confidentiality clause or a data protection agreement.
How long is your data kept?
Luxinnovation retains personal data only for the retention period strictly necessary for the purposes for which we collect it – including the statutory limitation period applicable to our relationship – and to comply with our own legal and regulatory obligations.
All data contained in your contact or information request form and, a fortiori, your personal data, is collected and stored in Luxinnovation's database from the date of being sent. It will be deleted within 36 months of the date of last contact, unless you exercise your right to erasure before this period expires.
In the specific context of support projects, Luxinnovation's contractual and legal obligations require data to be kept for up to 10 years from the closure of the file or the decision of non-eligibility. This data is also kept to ensure that our teams comply with internal and legal procedures.
When Luxinnovation learns (via social networks, a definitive absence of response, verbal communication, non-delivery of emails sent by our services, etc.) that an employee or representative of an enterprise with which our teams are in contact for one of the purposes listed above has left that company, the contact file of the person concerned is deactivated from all our systems.
The purpose of this specific notice is to explain the processing of your personal data in the context of Luxinnovation's support programmes carried out in collaboration with consulting firms. It is addressed to all persons, employees or legal representatives of the latter, hereinafter referred to as "You" or "the Consultant".
Contents:
Who is the data controller?
What personal data is collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereafter "Luxinnovation") is registered under number C16 with the Luxembourg Trade Register. Its registered office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
Depending on the support project, Luxinnovation is either the data controller (which alone determines the purposes and means of processing your data), or the joint data controller (which determines the purposes and means of processing your data in collaboration with its shareholders and partners). In the context of national funding programmes, Luxinnovation acts as a subcontractor collecting data on behalf of the data controller (the Ministry of Economic Affairs).
What personal data is collected?
“Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”).
The personal data collected when Luxinnovation uses the services of expert consulting firms is listed below (this list is not exhaustive and may be modified at any time at Luxinnovation's discretion):
Identification data: surname(s), forename(s), gender; title, positions within the company, legal name of the enterprise concerned;
Contact data:
Landline/mobile phone (business or personal, depending on what is provided by the data subject);
Postal address (business or personal, depending on what is provided by the data subject);
Email address (professional or personal, depending on what is provided by the data subject);
Electronic authentication data: Cookies and trackers, login (email address account creation) and password;
Academic data: Curriculum vitae and cover letter (including previous positions held and names of previous employers, educational background);
Professional career: professional qualifications, skills and aptitudes.
Luxinnovation undertakes to collect only personal data that is necessary and relevant for the management of its support files. In order to help our teams in this matter and facilitate their work in terms of the GDPR, Luxinnovation asks its contacts to provide only that information strictly useful for the management of their file.
In order to ensure the quality and authenticity of the data collected, and, a fortiori, of personal data, Luxinnovation would be grateful if you could provide us with reliable information.
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Some of the purposes for which Luxinnovation processes your data are based on Luxinnovation's missions of general interest, as detailed below (updated articles of association of 14 May 2012, article 2):
Aims | On the basis of Luxinnovation's public interest missions, as described in its updated articles of association, article 2: |
|---|---|
Selection of consultants on the basis of a call for tenders (precise specifications), management of the client/consultant relationship within the framework of projects managed by Luxinnovation (follow-up, control of compliance with guidelines and deadlines, submission to the Ministry of Economic Affairs) | In this context, the job of the consulting firms is to assist Luxinnovation in the implementation of certain projects and/or programmes, arising from the following missions: §4 "To assist enterprises, research organisations and R&D&I project sponsors in identifying their innovation needs, and in defining, organising, implementing and managing their R&D&I projects and programmes." § 5 "To promote and facilitate technology transfer, national, community and international aid schemes for enterprises, research organisations and R&D and innovation project sponsors, as well as approve innovation consulting and support service providers." |
Luxinnovation also processes your data for other purposes not provided for in Luxinnovation's articles of association:
Aims | Legal basis |
|---|---|
Selection of service providers on the basis of invitations to tender or requests for quotations, depending on the amounts involved | Legal obligation (selection of service providers on the basis of invitations to tender or requests for quotations, depending on the amounts involved, amended Law of 8 April 2018 on public procurement) |
Follow-up of payments | Luxinnovation's legitimate interest in monitoring the due and proper performance of contracts |
Compliance with Luxinnovation's legal and tax obligations | Legal obligation (retention of invoices for 10 years from date of issue)
|
Project follow-up | Legitimate interest of Luxinnovation to be informed about the continuation of projects |
Information for Luxinnovation shareholders (particularly those in charge of subsidy payments) | Luxinnovation's legitimate interest in keeping abreast of project progress, measuring the impact of its intervention and the success of its programmes |
Defending and safeguarding Luxinnovation's rights in court | Luxinnovation's legitimate interests in protecting itself in the event of litigation |
Who has access to your personal data?
Luxinnovation employees
Your personal data is only processed by duly authorised Luxinnovation employees, within the limits of their respective duties. These employees are regularly made aware of GDPR issues. A GDPR Officer is appointed to provide them with all his expertise in the event of any questions.
Luxinnovation partners and shareholders
Your data may also be processed by Luxinnovation's data recipients ("recipients”). In the context of the above-mentioned purposes, depending on the scenario in question, the latter refers to any third party supporting Luxinnovation's activities. Under these conditions, Luxinnovation may transfer your data to its institutional partners (ministries, Luxembourg administrations and/or federations, professional chambers, universities, public research organisations, embassies, professional organisations) or non-institutional partners (Luxembourg private research organisations, service providers for the joint organisation of events, for example).
For the purposes of its international activities (preparing international trade and investment missions, responding to requests from enterprises located outside the European Economic Area, etc.), Luxinnovation may transfer your data to an international organisation or country located inside and outside the European Union and the European Economic Area:
in the absence of an adequacy decision by the European Commission, if Luxinnovation ensures that such transfers are balanced by appropriate safeguards (such as the European Commission's standard contractual clauses) in order to guarantee an adequate level of protection for the data transferred in all circumstances – to obtain a copy of the appropriate safeguards put in place in a specific situation, data subjects may contact Luxinnovation's GDPR Officer via the email address GDPR@luxinnovation.lu;
in the absence of an adequacy decision or appropriate guarantees, on the basis of your explicit consent.
Service providers
In order to provide its services, Luxinnovation uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
our suppliers are selected according to strict criteria: they offer sufficient guarantees to implement appropriate technical and organisational measures.
contracts concluded with each service provider include either a confidentiality clause or a data protection agreement.
How long is your data kept?
Luxinnovation retains personal data only for the retention period strictly necessary for the purposes for which we collect it – including the statutory limitation period applicable to our relationship – and to comply with our own legal and regulatory obligations.
All data provided in the dossier submitted by the consulting firm selected following the call for tenders and all data collected during collaboration on Luxinnovation support projects is stored in the Luxinnovation database.
In the specific context of support projects, Luxinnovation's contractual and legal obligations require data to be kept for up to 10 years from the date of closure of the file or the decision of non-eligibility. This data is also kept to ensure that our teams comply with internal and legal procedures.
When Luxinnovation learns (via social networks, a definitive lack of response, verbal communication, non-delivery of emails sent by our services, etc.) that an employee or representative of a consulting company with which our teams are in contact for one of the purposes listed above has left that company, the contact file of the person concerned is deactivated from all our systems.
The purpose of this specific notice is to explain the processing of your personal data in the context of the relationship between Luxinnovation and its shareholders and institutional or non-institutional partners.
Contents:
Who is the data controller?
What personal data is collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereafter "Luxinnovation") is registered under number C16 with the Luxembourg Trade Register. Its head office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
Depending on the support project or the relationship concerned, Luxinnovation is either the joint data controller (which determines the purposes and means of processing your data in collaboration with its shareholders and partners), or a subcontractor which collects data on behalf of the data controller.
What personal data is collected?
"Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject").
The personal data collected when Luxinnovation collaborates with its shareholders and partners is listed below (this list is not exhaustive and may be modified at any time at Luxinnovation's discretion):
Identification data: surname(s), forename(s), gender; title, positions within the company, name of the public institution concerned;
Contact data:
Landline/mobile phone (business or personal, depending on what is provided by the data subject);
Postal address (business or personal, depending on what is provided by the data subject);
Email address (business or personal, depending on what is provided by the data subject);
Electronic authentication data: Cookies and trackers, login (email address account creation) and passwords;
Other data: preferred language of communication (FR, DE, LU, EN, etc.).
Luxinnovation undertakes to collect only personal data that is necessary and relevant for the management of its support files. In order to help our teams in this matter and facilitate their work in terms of the GDPR, Luxinnovation asks its contacts to provide only that information strictly useful for the management of their file.
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Some of the purposes for which Luxinnovation processes your data are based on Luxinnovation's missions of general interest, as detailed below (updated articles of association of 14 May 2012, article 2):
Aims | On the basis of Luxinnovation's public interest missions, as described in its updated articles of association, article 2: |
|---|---|
Customer acquisition in and outside Luxembourg (providing contact details of relevant players for business opportunities) | §4 "To assist enterprises, research organisations and R&D&I project sponsors in identifying their innovation needs, and in defining, organising, implementing and managing their R&D&I projects and programmes." §7 "To communicate, on its own initiative, any information or proposal relating to the implementation of R&D&I policies in the private and public sectors to the ministers responsible for the economy, small businesses or public-sector research." |
Networking for collaboration between business and research | § 5 "To promote and facilitate technology transfer, national, community and international aid schemes for enterprises, research organisations and R&D and innovation project sponsors, as well as approve innovation consulting and support service providers." |
Statistical analysis of exploration projects outside Luxembourg and participation of Luxembourg players in state visits or official missions | §7 "To communicate, on its own initiative, any information or proposal relating to the implementation of R&D&I policies in the private and public sectors to the ministers responsible for the economy, small businesses or public-sector research." §8 "To study and analyse, at the request of one of the ministers responsible for the economy, small businesses or public-sector research, any project or programme from an enterprise, research organisation or R&D&I project sponsor requesting the benefit of an aid scheme or measure, or any other matter relating to R&D&I, the creation of innovative enterprises and technology transfer." |
Transfer of information to Luxinnovation shareholders and partners (within and outside the EU) |
Luxinnovation also processes your data for other purposes not provided for in Luxinnovation's articles of association :
Aims | Legal basis |
|---|---|
Project follow-up | Legitimate interest of Luxinnovation to be informed about the continuation of projects |
Information for Luxinnovation shareholders (particularly those in charge of subsidy payments) | Luxinnovation's legitimate interest in keeping abreast of project progress, measuring the impact of its intervention and the success of its programmes |
Defending and safeguarding Luxinnovation's rights in court | Luxinnovation's legitimate interests in protecting itself in the event of litigation |
Who has access to your personal data?
Luxinnovation employees
Your personal data is only processed by duly authorised Luxinnovation employees, within the limits of their respective duties. These employees are regularly made aware of GDPR issues. A GDPR Officer is appointed to provide them with all his expertise in the event of questions.
Luxinnovation's third-party partners and shareholders
Your data may also be processed by Luxinnovation's data recipients ("recipients”). In the context of the above-mentioned purposes, depending on the scenario in question, the latter refers to any third party supporting Luxinnovation's activities. Under these conditions, Luxinnovation may transfer your data to its institutional partners (ministries, Luxembourg administrations and/or federations, professional chambers, universities, public research organisations, embassies, professional organisations) or non-institutional partners (Luxembourg private research organisations, service providers for the joint organisation of events, for example).
For the purposes of its international activities (preparing international trade and investment missions, responding to requests from enterprises located outside the European Economic Area, etc.), Luxinnovation may transfer your data to an international organisation or country located inside and outside the European Union and the European Economic Area:
in the absence of an adequacy decision by the European Commission, if Luxinnovation ensures that such transfers are balanced by appropriate safeguards (such as the European Commission's standard contractual clauses) in order to guarantee an adequate level of protection for the data transferred in all circumstances – to obtain a copy of the appropriate safeguards put in place in a specific situation, data subjects may contact Luxinnovation's GDPR Officer via the email address GDPR@luxinnovation.lu;
in the absence of an adequacy decision or appropriate guarantees, on the basis of your explicit consent.
Service providers
In order to provide its services, Luxinnovation uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
our suppliers are selected according to strict criteria: they offer sufficient guarantees to implement appropriate technical and organisational measures.
contracts concluded with each service provider include either a confidentiality clause or a data protection agreement.
How long is your data kept?
Luxinnovation retains your personal data only for as long as is strictly necessary for the purposes for which we collect it – including the statutory limitation period applicable to our relationship – and to comply with our own legal and regulatory obligations.
All data provided as part of your relationship with Luxinnovation, and a fortiori, Your Personal Data, is collected and stored in its database. It will be deleted within 36 months of the date of last contact, unless you exercise your right to erasure before this period expires.
In the specific context of projects carried out jointly with its shareholders and/or partners, Luxinnovation applies a retention period of up to 10 years from the closure of the file or the decision of non-eligibility, for the purposes of its contractual and legal obligations. This data is also kept to ensure that our teams comply with internal and legal procedures.
When Luxinnovation learns (via social networks, a definitive lack of response, verbal communication, non-delivery of emails sent by our services, etc.) that one of our shareholders and/or partners has left their position, their contact information is deactivated from all our systems.
The purpose of this specific notice is to explain the processing of personal data of "participants" who register online for an event organised or co-organised by Luxinnovation and/or of "members" when they join an online community.
Contents:
Who is the data controller?
What personal data is collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereafter "Luxinnovation") is registered under number C16 with the Luxembourg Trade Register. Its head office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
Depending on the event, Luxinnovation is either the data controller (which determines the purposes and means of the processing of your data) or the joint data controller (which determines the purposes and means of the processing of your data in collaboration with its shareholders and partners) when the event is co-organised. The form provided for you to register or pre-register provides information on the name(s) and position(s) of the data controller or joint data controllers.
What personal data is collected?
“Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”).
Luxinnovation has integrated the "Inwink" online event registration platform into its own platform to make it easier for you to apply to take part events and/or join online communities, and to ensure the greatest possible convenience for you. The registration forms used are created by Luxinnovation and are its property. They include mandatory fields:
Identification data: surname(s), forename(s); positions in the company or public institution, legal name and country of the company or public institution;
Contact data: email address (private or professional, at the discretion of the data subject).
This data is collected by Luxinnovation, which stores it in its database.
In the specific case of online communities, this data will be visible only to group members, with the exception of email addresses, which remain strictly private. The data subject can also fill in other optional fields if he/she wishes: the company website and an avatar (a photo or other image chosen by the data subject).
During the event itself, photographs, videos and/or sound recordings may be made. This information appears on the registration form you fill out to take part in Luxinnovation events. Professionals duly commissioned by Luxinnovation are instructed to adopt overall and group views, with the exception of speakers, guests and Luxinnovation staff.
You have the right to refuse this processing of your personal data: Luxinnovation invites you to get in touch with our staff when you receive your personal badge. If the event is held online, you will be asked to deactivate your camera and/or microphone.
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
When you take part in one or more events organised by Luxinnovation, alone or in partnership with other Luxembourg organisations, or are a member of one or more online communities, your data is processed for the following purposes, based on Luxinnovation's missions of general interest, as detailed below (updated articles of association of 14 May 2012, article 2):
Aims | On the basis of Luxinnovation's public interest missions, as described in its updated articles of association, article 2: |
|---|---|
Invitation to events organised or co-organised by Luxinnovation | § 3 "To raise awareness and inform the general public about innovation, creativity, design and R&D." § 5 "To promote and facilitate technology transfer, national, community and international aid schemes for enterprises, research organisations and R&D and innovation project sponsors, as well as approve innovation consulting and support service providers." |
Luxinnovation also processes your data for other purposes not provided for in Luxinnovation's articles of association:
Aims | Legal basis |
|---|---|
Event management | Legitimate interest of Luxinnovation: to identify you in order to manage your registration and/or your request for membership of online communities, issue a participation badge or a certificate of participation (at the request of an employer), ensure the security of buildings, anticipate technical requirements for remote events, manage any complaints and disputes. |
Sending notifications to the email address of your choice, relating to the event concerned and subsequent events | Fulfilment of request to attend the event of choice |
Sharing your data with event co-organisers | Fulfilment of request to attend the event of choice |
Notification of discussion groups in online communities | Your consent to inform you when a contact request or a new message is sent to you via the online communities. |
Keeping your event participation history | Legitimate interest of Luxinnovation in the relationship with its contacts and in the statistical analysis of events organised or co-organised |
Who has access to your personal data?
In the case of online communities, Luxinnovation does not share any personal data. Data is only accessible to group members.
Luxinnovation employees
Your personal data is only processed by duly authorised Luxinnovation employees, within the limits of their respective duties. These employees are regularly made aware of GDPR issues. A GDPR Officer is appointed to provide them with all his expertise in the event of questions.
Event co-organisers
In the case of events co-organised with its Luxembourg institutional partners (national federations, ministries, administrations, embassies, professional chambers), Luxinnovation may transfer your data to them for information and/or statistical purposes.
This sharing of personal data takes place via a write-protected file (which cannot be copied, modified or extracted) in a container, the access rights to which are restricted to authorised persons only.
The co-organisers (recipients of the data transmitted by Luxinnovation) may, on their own responsibility, disclose the personal data to their agents and/or authorised representatives (the "sub-recipients"), who will process the personal data for the sole purpose of assisting the recipients in providing their services to Luxinnovation and/or assisting the recipients in fulfilling their own legal obligations.
Service providers
In order to provide its services, Luxinnovation uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
How long is your data kept?
Your personal data collected when you register online with Inwink will be deleted within 24 months of the date of the event for which you registered.
Concerning the protected document, shared by Luxinnovation with its potential co-organisers: personal data is deleted within 10 days of being made available.
The Luxinnovation database: the personal data collected during your event registration is stored in Luxinnovation's database. It is deleted within 36 months of the date of last contact, unless you exercise your right to erasure (see below: What are your rights and how can you exercise them?
Within online communities: members' profiles are kept for a period of 24 months from the validity of their membership. A notification is sent to them by our systems to invite them to reconfirm their membership and explicit consent. If the member does not wish to extend his/her membership: his/her profile is deleted but exchanges with other forum participants are preserved; the author of these exchanges and his/her profile are then anonymized (his/her contact details and photo/avatar no longer appear).
Luxinnovation may, at its sole discretion, unilaterally decide to disband online communities. All data collected (member profiles) and all forum exchanges will then be permanently deleted.
The consent you give Luxinnovation to process your personal data is retained for a period of 12 months from the date on which you authorise the processing concerned. After 12 months, you will be asked by our systems to renew your consent.
If you wish to exercise your rights: requesting parties’ personal data will be deleted within five years of the date the request was sent, regardless of the purpose of the request or Luxinnovation's response.
The purpose of this specific notice is to explain the processing of your personal data when you subscribe to one or more of the newsletters published by Luxinnovation.
Contents:
Who is the data controller?
What personal data is collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
Luxinnovation employees
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereinafter referred to as "Luxinnovation" or the "Data Controller") is registered with the Luxembourg Trade Register under number C16. Its head office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
Luxinnovation is the data controller, which means that it determines the purposes and means of processing your data.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
What personal data is collected?
“Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”).
When you subscribe to one or more newsletters managed by Luxinnovation (via the www.luxinnovation.lu website), Luxinnovation exclusively collects:
Identification data: Identification data surname(s), forename(s), gender;
Contact data: email address.
Luxinnovation undertakes to collect only personal data that is necessary and relevant for the management of its support files.
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Some of the purposes for which Luxinnovation processes your data are based on Luxinnovation's missions of general interest, as detailed below (updated articles of association of 14 May 2012, article 2):
Aims | On the basis of Luxinnovation's public interest missions, as described in its updated articles of association, article 2: |
|---|---|
Customer acquisition in and outside Luxembourg | §4 "To assist enterprises, research organisations and R&D&I project sponsors in identifying their innovation needs, and in defining, organising, implementing and managing their R&D&I projects and programmes."
|
Sending newsletters and other information from Luxinnovation | § 3 "To raise awareness and inform the general public about innovation, creativity, design and R&D." § 5 "To promote and facilitate technology transfer, national, community and international aid schemes for enterprises, research organisations and R&D and innovation project sponsors, as well as approve innovation consulting and support service providers." |
Invitation to events organised or co-organised by Luxinnovation | |
Transfer of information to Luxinnovation shareholders and partners (within and outside the EU) | §7 "To communicate, on its own initiative, any information or proposal relating to the implementation of R&D&I policies in the private and public sectors to the ministers responsible for the economy, small businesses or public-sector research." §8 "To study and analyse, at the request of one of the ministers responsible for the economy, small businesses or public-sector research, any project or programme from an enterprise, research organisation or R&D&I project sponsor requesting the benefit of an aid scheme or measure, or any other matter relating to R&D&I, the creation of innovative enterprises and technology transfer." |
Luxinnovation also processes your data for other purposes not provided for in Luxinnovation's articles of association:
Aims | Luxinnovation's legal obligations |
|---|---|
Subscriber identification | Legitimate interest of Luxinnovation to manage your subscription(s) and draft a personalised email (for the attention of Mr or Mrs X) |
Sending newsletters to the email address of your choice | Your consent for us to send you the newsletter of your choice to the email address you provided in your subscription request form. |
Statistical studies | Luxinnovation's legitimate interest in having data concerning its activities |
Retention of your subscription history in our database | Legitimate interest of Luxinnovation in the relationship with its contacts |
Who has access to your personal data?
Luxinnovation employees
Your personal data is only processed by duly authorised Luxinnovation employees, within the limits of their respective duties. These employees are regularly made aware of GDPR issues. A GDPR Officer is appointed to provide them with all his expertise in the event of questions.
Service providers
In order to provide its services, Luxinnovation uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
How long is your data kept?
You can choose to unsubscribe from our newsletters at any time by clicking on the "Unsubscribe" button in the newsletter.
Your personal data will immediately be deleted from the newsletter mailing list(s) (or from all newsletters), according to your choice.
You can re-subscribe to the newsletter(s) of your choice at any time, at your convenience.
The consent you give Luxinnovation to process your personal data is retained for a period of 12 months from the date on which you authorise the processing concerned. After 12 months, you will be asked by our systems to renew your consent.
The purpose of this specific notice is to explain the processing of your personal data when you visit Luxinnovation's premises, whether at Belval (Maison de l'Innovation) or at Fedil (Chamber of Commerce in Kirchberg).
Contents:
Who is the data controller?
What categories of personal data are collected?
For what purposes does Luxinnovation process your data and what is the legal basis for such processing?
Who has access to your personal data?
Luxinnovation employees
How long is your data kept?
How is your data protected?
What are your rights and how can you exercise them?
Who is the data controller?
Luxinnovation GIE (hereinafter referred to as "Luxinnovation" or the "Data Controller") is registered with the Luxembourg Trade Register under number C16. Its head office is located at N°5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE.
Luxinnovation is the data controller, which means that it determines the purposes and means of processing your data.
You can submit your questions and requests by sending an email to: gdpr@luxinnovation.lu
What categories of data are collected?
“Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”).
The personal data collected when you visit our premises is listed below (this list is not exhaustive and may be modified at any time, at Luxinnovation's discretion)
Identification data: surname(s), forename(s); title, positions and the name of the company to which you belong.
Image data: a photo may be taken by the Luxinnovation communications department, subject to the consent of the data subject. This image can be published on Luxinnovation's social networks.
Video surveillance: the premises occupied by Luxinnovation are equipped with surveillance systems including video surveillance. Only images are captured, excluding sound. This video surveillance is limited to public areas: entrance and reception corridors. Images are deleted within a maximum of 30 days (in accordance with CNPD guidelines4).
Aims | Luxinnovation's legal obligations |
|---|---|
Organising your visit | Luxinnovation's legitimate interest in monitoring the identity of external persons in order to guarantee the security of all persons physically present and of its premises |
Guest Wi-Fi network access | Luxinnovation's legitimate interest in safeguarding the security and integrity of its Guest Wi-Fi network. |
Emergency management | Vital interest of the person: ensuring compliance with health and safety standards in the event of an exceptional emergency, including evacuation of all those present, if necessary |
Who has access to your personal data?
Luxinnovation employees
In the context of your visit to our premises, your Luxinnovation contacts may share your personal data mainly – and without this list being exhaustive – with employees in the IT, administrative and Human Resources departments.
Service providers
In order to provide its services, Luxinnovation uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
How long is your data kept?
Luxinnovation retains personal data only for as long as is strictly necessary for the aforementioned purposes. The criteria used to define this "necessary period" are based on the limitation periods set out by law in general and under relevant Luxembourg law.
In accordance with the requirements of the GDPR, Luxinnovation has technologies at its disposal that guarantee the security of its data, including your personal data. Furthermore, we have a team of experts who are committed on a daily basis to developing and implementing the technical and organisational security measures required to ensure the highest standards in this field. Security audits are carried out in order to regularly improve systems for detecting risks of piracy, unauthorised disclosure, total or partial accidental loss, and/or unlawful modification of your data.
As a data subject, you have various rights. Below is a brief description of these rights and how you can exercise them, via the e-mail address GDPR@luxinnovation.lu.
Right to information: you can send us any questions regarding the recording and processing of your data.
Right of access: you may, at any time, by way of a simple written request to Luxinnovation, obtain confirmation as to whether or not personal data concerning you is being processed and, if that is the case, obtain access to such data and a free copy of the same.
Right of rectification: you may, at any time, by way of a simple written request to Luxinnovation, insist on the rectification of any inaccurate personal data concerning you. You can also make a request for incomplete data to be rendered complete in the same way.
Right to erasure: you may, at any time, by way of a simple written request to Luxinnovation, have your data deleted, provided that one of the following reasons applies:
the data is no longer necessary for the purposes for which it was collected and processed;
you have withdrawn your consent on which the processing was based and there is no other legal basis for this;
you object to the processing and there is no compelling legitimate reason for such processing;
the data has been processed unlawfully;
data must be deleted to comply with a legal obligation.
Right to restriction of processing: you may request, by writing to Luxinnovation, that processing be restricted for one of the following reasons:
you dispute the accuracy of the personal data (processing will be restricted to the time necessary to verify the accuracy of the data);
in the event of unlawful processing, you object to the erasure of your data and request that its use be restricted;
we no longer need your data for processing purposes, but it is still necessary to establish, exercise or defend legal rights;
you have objected to the processing (the processing will be restricted for the period of time necessary to verify the existence of legitimate grounds pursued by Luxinnovation that would prevail over yours).
Where processing restrictions are granted, personal data may – with the exception of storage – only be processed with the consent of the data subject for the establishment, exercise or defence of legal rights, or for the protection of the rights of another natural or legal person, or for important reasons relating to the public interest.
Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of your data based on the execution of a public mandate or this being necessary for the legitimate interests pursued by us, simply by sending us a request in writing.
We will no longer process such personal data unless it can be shown that there are compelling legitimate grounds for processing which override your interests and rights and freedoms, or for the establishment, exercise or defence of legal claims.
When your personal data is processed for marketing purposes, you have the right to object to this processing at any time.
Right to data portability: You have the right, by sending us a written request, to receive your personal data provided to us by you in a structured, commonly used and machine-readable format, and to transmit this data to another controller without Luxinnovation's hindrance, when:
processing is based on your consent or on a contract; and
the processing is carried out using automated processes.
Right to withdraw your consent: Where processing is based on your consent, you have the right to withdraw this at any time by sending us a written request. The withdrawal of your consent will not affect the lawfulness of the processing based on the consent given prior to such withdrawal.
Right to lodge a complaint: We make every effort to ensure that our legal obligations concerning data protection are respected and respond to any complaint addressed to us in this respect as quickly as possible.
We draw your attention to the fact that Luxinnovation reserves the right to verify your identity before granting your request to exercise the rights provided for under the GDPR. As a reminder, the exercise of your rights does not outweigh the prior validity of the processing applied to your personal data.
Should processing your request require Luxinnovation to mobilise human and technical resources over a given period of time, we reserve the right to invoice you for our services in this regard.
All requests will be kept for five years from the date your request is sent.
For any questions regarding the processing of your personal data by Luxinnovation, and for any questions relating to the exercise of your rights, please contact Luxinnovation's GDPR Officer: GDPR@luxinnovation.lu.
If you are not satisfied with the response you receive, you have the option of filing a complaint with the Luxembourg supervisory authority.
Commission Nationale pour la Protection des Données (National Data Protection Commission) ("CNPD").
15, Boulevard du Jazz
L-4370 Belvaux
Grand Duchy of Luxembourg
You also have the option of contacting the supervisory authority in your own country. You can find contact details for all the supervisory authorities by clicking on the following link: https://edpb.europa.eu/about-edpb/about-edpb/members_fr.
Last modification: March 2024