Privacy Policy

The website www.startupluxembourg.lu (the “Website”) is provided by Luxinnovation GIE, a Groupement d’Intérêt Economique, incorporated under the laws of the Grand-Duchy of Luxembourg and registered with the Luxembourg Trade Register under number C16, whose registered office is at 5, avenue des Hauts-Fourneaux, L-4362 Esch-sur-Alzette ("Luxinnovation" or "we").

Please read these terms of use carefully before accessing or using our Website.

This document is intended to inform you about how Luxinnovation processes your personal data (hereafter “Your Data”) in accordance with the rules set by European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 relating to the protection of natural persons and the processing of personal data (hereafter “GDPR”).

In all cases, Luxinnovation is committed to observing the data minimisation principle and ensures that only appropriate and relevant data are processed as required for the purposes defined.

1. Who is the Controller? Luxinnovation GIE (hereafter “Luxinnovation” or the “Controller”), incorporated and with its registered office located at 5, Avenue des Hauts-Fourneaux L-4362 ESCH-sur-ALZETTE, is the Controller, which means it determines the purposes and means of the processing of Your Data.

2. What are the personal data that are collected? Depending on your situation, the personal data Luxinnovation collects about you may include the following:

Name(s), first name(s);
Title, functions within Luxinnovation's client company;
Contact details : o Fixed/mobile phone (business or personal, depending on what is provided by the data subject); o Postal address (business or personal, depending on what is provided by the data subject) o E-mail (business or personal, depending on what is provided by the data subject);
Curriculum vitae.

3. For what purposes does Luxinnovation processes Your Data, and what is the lawful basis of those processing operations? The GDPR requires that any processing be based on one of the six lawful basis it lists:

the consent of the data subject,
the need for the performance of a contract concluded with the data subject or pre-contractual measures at the latter’s request,
a legal obligation,
the protection of the vital interests of a natural person,
the fact that the processing is required for Luxinnovation to fulfil its public interest missions or,
the legitimate interest of the controller.

Depending on your situation and the reasons for which you are in contact with Luxinnovation, you will find below the purposes of the processing of Your Data and the applicable lawful bases. Be aware that several headings may apply to you.

3.1. If you are an employee or representative of a company that Luxinnovation supports in the context of its missions (as defined in its bylaws), Your Data are processed for the following purposes:

3.2. If you are an employee or representative of a consultancy company approved by Luxinnovation in the framework of its support programmes, Your Data are processed for the following purposes:

3.3. If you are the employee or representative of Luxinnovation shareholders or partners, Your Data are processed for the following purposes:

3.4. If you participate in events that Luxinnovation organises, alone or in partnership with other organisations, Your Data are processed for the following purposes:

3.5. If you are visiting our website, Your Data are processed for the following purposes:

to create and manage the users’ account (i.e. to perform any pre-contractual measures as well as the contract entered into by the users);
to enable the Data Subjects to use the functionalities of the platforms and websites (i.e. to perform any pre-contractual measures as well as the contract entered into by the users);
to manage the relationship between Luxinnovation and the user (i.e. to perform any pre-contractual measures as well as the contract entered into by the users);
to enable the User to access other platforms, tools and services provided by Luxinnovation (i.e. to perform any pre-contractual measures as well as the contract entered into by the users);
for prospective purposes (i.e. for the legitimate interests of Luxinnovation in developing its activities).

3.6. In all cases and depending on how you are / come into contact with Luxinnovation, Luxinnovation may process Your Data for the following purposes, on the basis of its legitimate interest in protecting its rights and physical and logical assets:

identify you and give you access to our buildings/parking if you visit our premises;
organize meetings and video conferences if you take part to such meetings;
keep the IT infrastructure safe by filtering the Internet traffic (if you connect to our network);
to verify compliance with ethics and embargo policies and possible legal or regulatory requirements in order to avoid and manage ethics incidents;
for litigation or defence of claims.

The Data Subjects may, at their discretion, refuse to communicate the Personal Data to Luxinnovation. In this event however, some Luxinnovation services may not be available (for example, the Data Subjects will not be able to create a user account on Luxinnovation websites).

4. Why does Luxinnovation share Your Data?

Your Data may also be processed by the Luxinnovation’s data recipients (the “Recipients”) which, in the context of the above mentioned purposes, refer to any third party supporting the activities of Luxinnovation.

For the aforementioned purposes, Luxinnovation may transfer Your Data to:

its institutional partners (Luxembourgish ministries, administrations or/and federations, Professional Chambers, University, Public research organisations, Embassies, Trade organisations) or non-institutional partners (Luxembourgish Private research organisations, service providers for the joint organisation of events for example),
its service providers for the sending of newsletters and other publications;
its subcontractors that process data on its behalf.

For the purposes of its international activities (preparation of international trade and invest missions, response to requests from companies located outside the European Economic Area, etc.), Luxinnovation may transfer Your Data to an international organisation or a country located inside and outside the European Economic Area:

subject to an adequacy decision made by the European Commission;
not subject to an adequacy decision made by the European Commission, to which such transfers are governed by way of appropriate guarantees (such as the European Commission’s standard contractual clauses) in order to guarantee an adequate level of protection for the transferred data in all circumstances;
in the absence of an adequacy decision or appropriate guarantees, on the basis of your explicit consent.

The Recipients may, under their own responsibility, disclose the Personal Data to their agents and/or delegates (the “Sub-Recipients”), which shall process the Personal Data for the sole purposes of assisting the Recipients in providing their services to Luxinnovation and/or assisting the Recipients in fulfilling their own legal obligations.

5. How long will Your Data be kept?

The duration of the storage of your data will be determined by:

the purposes detailed above;
any legal or regulatory obligations to keep data;
the applicable legal limitation period.

The main applicable deadlines are as follows:

the data of unsuccessful candidates applying for a position at Luxinnovation is eliminated after two years. The personal data of the selected candidate is transferred to his/her "Luxinnovation Employee" file and enriched according to the requirements of the Employer-Employee relationship;
when Luxinnovation learns (social networks, a definitive out of office, oral information, non-delivery of Luxinnovation emails…) that an employee or representative of a company with which it is in contact for one of the above purposes has left that company, the person’s contact record is deactivated;
when a person opts out of a processing operation based on his or her consent, that person's name is removed from the marketing lists with which he or she is associated.

6. What are your rights and how can you exercise them?

As a data subject, you have various rights. Below is a brief description of these rights and how you can exercise them.

Right to information : You can send us any questions regarding the recording and processing of Your Data.
Right of access : You may, at any time, and by written request to us, obtain confirmation that Personal Data concerning you is processed or not and, where applicable, obtain access to such data and a free copy thereof.
Right to rectification : You may, at any time, and via a written request addressed to us, obtain the rectification of any inaccurate personal data concerning you. You can also request that incomplete data be completed in the same way.
Right to erasure : You may, at any time, and by written request to us, obtain the deletion of Your Data, provided that one of the following reasons applies:

o the data is no longer necessary for the purposes for which it was collected and processed;

o you have withdrawn your consent on which the processing was based and there is no other legal basis for it;

o you object to the processing and there is no compelling legitimate reason for it;

o the data has been unlawfully processed;

o the data must be deleted in order to comply with a legal obligation.

Right to limitation of processing: You may request, by sending a written request to us, that the processing be limited for one of the following reasons:

o you dispute the accuracy of the Personal Data (processing will be limited for the period necessary to verify the accuracy of the data);

o in the event of unlawful processing, you object to the deletion of Your Data and request that its use be limited;

o we no longer need Your Data for processing purposes, but it is still necessary for you to establish, exercise or defend legal claims;

o you have objected to the processing (the processing will be limited for the period necessary to verify the existence of legitimate grounds pursued by Luxinnovation that would prevail over yours).

Where processing restrictions are granted, personal data may, with the exception of storage, be processed only with the consent of the data subject, or for the establishment, exercise or defence of legal rights, or for the protection of the rights of another natural or legal person, or for important reasons relating to the public interest.

Right of opposition : You have the right to object, at any time and by sending a written request to us, for reasons relating to your particular situation, to the processing of Your Data based on the performance of a public mandate or necessary for the legitimate interests pursued by us. We will no longer process such personal data unless it is demonstrated that there are legitimate and compelling reasons for processing that prevail over your interests and rights and freedoms, or for the establishment, exercise or defence of legal rights. When your personal data is processed for the purpose of prospection, you have the right to object at any time to this processing.

Right to portability : You have the right, by sending a written request to us, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit such data to another controller without Luxinnovation hindering it, when: o the processing is based on your consent or a contract; and o the processing is carried out using automated processes.
Right to withdraw consent : Where the processing is based on your consent, you have the right to withdraw it at any time by sending a written request to us. The withdrawal of your consent will not affect the lawfulness of the processing operation based on the consent given before it was withdrawn.
Right to lodge a complaint: We make every effort to ensure that our legal obligations regarding data protection are respected and to respond as quickly as possible to any complaint addressed to us in this regard.

For any questions regarding the processing of your personal data carried out by Luxinnovation, and for any queries regarding the exercise of your rights, please contact the Luxinnovation DPO : dpo@luxinnovation.lu.

In the event that you are not satisfied with the response received, you have the option of filing a complaint with the Luxembourg supervisory authority:

Commission Nationale pour la Protection des Données (the “CNPD”)

15, Boulevard du Jazz

L-4370 Belvaux

Grand-Duchy of Luxembourg

You also have the option of contacting the supervisory authority in your country. You will find the contact details of all the supervisory authorities here: https://edpb.europa.eu/about-edpb/board/members_en.

Last modification: April 2023

Startup Luxembourg
A public initiative supported by the Ministry of the Economy to connect, support and promote the startup ecosystem.

__________________________________________________________________________

5, avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette Luxembourg

startupluxembourg.com

Privacy Policy

Contact

Privacy policy