Protection of personal data: House of Entrepreneurship

Data Protection Policy (29 September 2022)

This document is intended to inform you about how the Luxembourg Chamber of Commerce processes[1] your personal data (hereafter “Your Data”) in accordance with the rules set by European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 relating to the protection of natural persons and the processing of personal data (hereafter “GDPR”).

Controller’s identity

The Luxembourg Chamber of Commerce, a public institution, incorporated and with its registered office located at 7, rue Alcide de Gasperi, L-1615 LUXEMBOURG, is responsible for the processing of Your Data.

Types of data subjects and personal data processed

The Luxembourg Chamber of Commerce primarily processes the identification and contact-related information of natural persons with links to companies affiliated with the Chamber of Commerce (executives, contact persons, etc.)
of natural persons with links to unaffiliated companies (executives, contact persons, etc.) or public entities
of natural persons with links to its service providers
of other natural persons that have requested access to the services offered by the Chamber of Commerce (conferences, assistance starting up a business, subscription to the newsletter or to the notices of calls for tender, etc.)

In addition, it has cause to process information related to professional qualifications as part of its entrepreneurship assistance activities (the CVs of entrepreneurs, future entrepreneurs and expert trainers).

The Luxembourg Chamber of Commerce also processes the images and, exceptionally, sensitive data (allergies or dietary requirements) of people who attend the events and economic missions it organises.

In all cases, the Luxembourg Chamber of Commerce is committed to observing the data minimisation principle and ensures that only appropriate and relevant data are processed as required for the purposes defined.

Sources of personal data processed

The Luxembourg Chamber of Commerce either collects Your Data directly from you or indirectly from third parties.

Processing basis and purposes

The processing of Your Data is based on:

The fact that their processing is required for the Luxembourg Chamber of Commerce to fulfil its public interest missions[2] (promotion of a legislative and regulatory framework favourable to economic development, promotion of international economic and trade relations, development and promotion of vocational training, establishment of statistics as well as, conduct of studies and analyses on trade, industry and finance, etc.)
Or the fact that their processing is required for the Luxembourg Chamber of Commerce’s legitimate interests (communication regarding events it is organising, etc.)
Or the fact that their processing is required to comply with any of the Luxembourg Chamber of Commerce’s legal obligations (various correspondence and communication aimed at natural persons at affiliated or unaffiliated companies (executives, contact persons, etc.), public authorities, federations, etc.)
Or the fact that their processing is required for the application of any agreements concluded with the Chamber of Commerce that you are a party to
Or your consent (subscription to a Chamber of Commerce newsletter, etc.).

The Chamber of Commerce may also use Your Data in order to occasionally send you invitations to participate to surveys in order to perform its legal mission consisting in establishment of statistics and performance of analyses in commercial, industrial and financial matters.

Transfer of Your Data

Your Data are processed internally by duly authorised people, in accordance with their respective responsibilities.

For the aforementioned purposes, the Luxembourg Chamber of Commerce may transfer Your Data to:

its institutional partners (employer federations, ministries, public sector bodies, embassies, trade organisations) or non-institutional partners (businesses, training organisations, service providers) particularly for the joint organisation of events (economic missions, conferences, etc.);
its service providers for the sending of newsletters and other publications;
its subcontractors that process data on its behalf.

For the purposes of its international activities, the Luxembourg Chamber of Commerce may transfer Your Data to an international organisation or a country located outside the European Economic Area[3]:

subject to an adequacy decision made by the European Commission;
not subject to an adequacy decision made by the European Commission, to which such transfers are governed by way of appropriate guarantees (such as the European Commission’s standard contractual clauses) in order to guarantee an adequate level of protection for the transferred data in all circumstances;
in the absence of an adequacy decision or appropriate guarantees, on the basis of your explicit consent.

Your rights

You have a right to access Your Data, a right to rectify Your Data in the event of any errors and, subject to providing proof of legitimate and compelling grounds in accordance with the GDPR, a right to restriction of processing and a right to object to the collection of Your Data. However, in both of these scenarios, the exercising of these rights does not negate the previous validity of the processing.

You also have a right to erase your personal data.

Note that the Luxembourg Chamber of Commerce is legally authorised to store and continue to process certain personal data even when you have exercised your rights to object or erasure, based on compelling legitimate grounds such as compliance with the legislation applicable and particularly the Law of 26 October 2010, as amended, concerning the Chamber of Commerce’s reorganisation.

To exercise your rights, please contact the Luxembourg Chamber of Commerce’s Data Protection Officer (dpo(at)cc.lu). In the event that the Chamber of Commerce has reasonable doubt regarding your identity when exercising your rights, it may ask you to provide additional necessary information to confirm your identity.

You also have the right to file a complaint at any time with the National Commission for Data Protection (CNPD), 15, boulevard du Jazz, L-4370 BELVAUX, or the relevant supervisory authority for your country of residence or the place of the alleged infringement if you believe that your rights specified above have not been respected.

Security of Your Data

The personal data collected by the Luxembourg Chamber of Commerce are processed by it, in its capacity as the controller, in accordance with data protection legislation.

The Luxembourg Chamber of Commerce undertakes to put in place the technical and organisational security measures required to protect Your Data.

Storage period for Your Data

The Luxembourg Chamber of Commerce stores Your Data for as long as necessary to comply with its legal and regulatory requirements or to achieve the purposes for which they have been collected.

Cookies

The cookie management policy is shown in the appendix.

[1] Data “processing” consists, in particular, of the collection, recording, organisation, structuring, storage, adaptation, alteration or use of Your Data.

[2] According to article 2 of the Law of 26 October 2010, as amended, on the reorganisation of the Chamber of Commerce

[3] The European Economic Area consists of the European Union, Lichtenstein, Norway and Iceland.