Information regarding the EU Regulation 2016/679 on the protection of individuals pertaining to the processing of personal data (hereinafter referred to as the GDPR)
You are subscribed to our newsletter and/or invitations to our events
Who is the data controller for your personal data?
The Chamber of employees (Chambre des salaries – CSL), as the editor of the blog, is the controller of your personal data within the meaning of the GDPR.
What kind of personal data are we talking about?
The following personal data may be involved:
– Surname
– First name
– Email address
– Company/Institution
Why do we need this data?
We need your personal data in order to be able to send you newsletters and/or invitations to our events that you have subscribed to.
We may also use your e-mail address to provide you with our new newsletters and invite you to subscribe.
Processing of your data is based on your consent and on Article 6.1.(a) regarding the consent of the data subject in Regulation (EU) 2016/679.
You have the right to withdraw your consent at any time by unsubscribing by clicking on the “Unsubscribe” link at the bottom of any email you receive from us, or by sending your request to dataprotection@csl.lu.
Will your data be passed on to a third party?
CSL uses MailChimp as its automated marketing platform.
The information you have provided to us is therefore transferred to MailChimp, which processes it in accordance with its privacy policy, which you can view HERE.
Where did we collect your personal data?
This is exclusively the data and information that you have provided to us.
How long are we likely to keep your personal data?
We keep your personal data until you unsubscribe.
What rights do you have regarding the protection of your personal data?
Please familiarise yourself with all your rights regarding the protection of your personal data by consulting the “Your rights” section regarding the protection of your personal data.
If you are a contributor/author of the blog
Who is the data controller of your personal data?
CSL, as the editor of the blog, is the controller of your personal data within the meaning of the GDPR.
What kind of personal data are we talking about?
The following personal data may be involved:
– Surname
– First name
– Email address
– Company/Institution
– Any other personal data you have entered in your biography
– Your article/contribution
Why do we need this data?
You have agreed to contribute to our blog. As the author of contributions/articles published on it, you have granted us the right to use the personal information you have given us.
The processing of your data is based on:
- Your consent and on Article 6.1.(a) regarding the consent of the data subject of EU Regulation 2016/679
or
- Where processing data is necessary for the performance of a contract between us and you, and therefore on Article 6.1.(b) regarding performance of a contract in EU Regulation 2016/679.
If the processing is based on point 1) above, you may withdraw your consent at any time by sending your request to dataprotection@csl.lu.
Will your data be passed on to a third party?
The personal information you have given us is made public on our blog as well as on our social media and therefore accessible to the general public.
How did we collect your personal data?
This is exclusively the data and information that you have provided to us.
How long is CSL likely to keep your personal data?
We retain your personal data until you withdraw your consent if the processing of your data is based on Article 6.1.(a) of EU Regulation 2016/679.
If the processing of your data is based on the contract we have with you, we will keep your data for as long as our blog is active.
What rights do you have regarding the protection of your personal data?
Please familiarise yourself with all your rights regarding the protection of your personal data by consulting the “Your rights” section regarding the protection of your personal data.
Your rights regarding the protection of personal data
Right of access
Upon written request, CSL will provide you with a statement of the personal data it uses, specifying the reason your data is required, how long it will be kept, and the source of the data and any transfer to a third party, where applicable.
Your request should be made via dataprotection@csl.lu. Please enclose a copy of a personal identity document which will be destroyed by CSL as soon as your request has been processed.
Right to rectification
You have the right to request that inaccurate data pertaining to you be corrected.
Your request should be made via dataprotection@csl.lu. Please enclose a copy of a personal identity document which will be destroyed by CSL as soon as your request has been processed.
Right to erasure
You have the right to request the deletion of your data if:
– You feel that they are no longer necessary for the purpose(s) for which they were collected/processed
– Processing your data is based solely on your consent and you withdraw your consent
– You exercise your right to object for a reason related to your particular situation and CSL has no compelling legitimate reason to do so
– You believe that your personal data is being processed unlawfully by CSL
– Your data must be deleted to comply with a legal obligation to which CSL is subject
Your request should be sent to CSL via the email address dataprotection@csl.lu with a copy of your identity document which will be destroyed by CSL as soon as your request has been processed.
CSL may object to your request if:
– Processing your personal data is legally necessary
– Where your data are processed for scientific or historical research or statistical purposes, provided that erasure of the data would make it impossible or seriously compromise achieving the purposes for which the data are processed
– When CSL needs them for the exercise or defence of its legal rights
Right to restrict processing
You have the right to request the restriction of processing if:
– You dispute the accuracy of your data and the time needed to verify your data
– In the case of unlawful processing you yourself object to the deletion of your data, but request the restriction of their use
– CSL no longer needs your data but you need it for establishing, exercising or defending your legal rights
– You have objected to their processing on grounds relating to your particular situation, for the time necessary to verify whether the legitimate reasons pursued by CSL prevail over yours
Your request should be sent to CSL via the email address dataprotection@csl.lu with a copy of your identity document which will be destroyed by CSL as soon as your request has been processed.
Right to object to the processing
You have the right to object to the processing of your data:
– For reasons relating to your particular situation, unless CSL can demonstrate compelling legitimate grounds for processing your data which override your interests, or if CSL needs the data to establish, exercise or defend its legal rights
– When such processing is carried out for the purpose of direct marketing by CSL
Your request should be sent to CSL via the email address dataprotection@csl.lu with a copy of your identity document which will be destroyed by CSL as soon as your request has been processed.
Right to withdraw your consent
Where the processing of your data is based on your consent, you have the right to withdraw it at any time. CSL will then cease to use your data and it will be destroyed.
Your request should be sent to CSL via the email address dataprotection@csl.lu with a copy of your identity document which will be destroyed by CSL as soon as your request has been processed.
Right to lodge a complaint
You have the right to lodge a complaint with the National Commission for Data Protection (CNPD). See cnpd.public.lu.
Right to portability of your data
Where the processing of your personal data is based on your consent or is necessary for the performance of a contract you have entered into with CSL and the processing of your data is carried out by CSL using automated processes, you have the right to receive your personal data held by CSL in a structured, commonly used and machine-readable format, so that you can transmit it to another controller. You may also request CSL to transfer your data directly to another controller, provided that this is technically possible.
Your request should be sent to CSL via the email address dataprotection@csl.lu with a copy of your identity document which will be destroyed by CSL as soon as your request has been processed.
