Data protection

Protection of personal data

General remarks

The personal data communicated by the user is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

The State of the Grand Duchy of Luxembourg does not collect personal data, apart from IP addresses in web server logs for security reasons. User consent is not required before visiting this website.

The data controller is the Organisation responsible for this website.

Users can lodge complaints regarding the protection of their personal data through the communication channels provided and with the data controller which, in this case, is the Organisation responsible for this website. Users can also lodge their complaints with the Ministry of Health's and social Security Data Protection Officer at the following email address: dateprotection@mss.etat.lu. Users can also contact the National Commission for Data Protection (Commission nationale pour la protection des données), whose registered office is situated at 15, boulevard du Jazz L-4370 Belvaux.

Website contact form

The information about you that is collected through the contact form on the website is processed by the Organisation in question in order to fulfil your request.
This information is retained for as long as is necessary to achieve the purpose of the processing.

The recipient of your data is the Organisation responsible for processing your request. Please contact the Organisation that your request concerns for details on the recipients of the data in this form.

In accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you have a right of access, a right to rectification and, where appropriate, a right of erasure with regard to your data. You also have the right to withdraw your consent at any time.

Furthermore, and except where it is mandatory, you can, on legitimate grounds, object to the processing of your data.
If you wish to exercise these rights and/or receive a copy of your data, please contact the Organisation in question, using the contact details specified in the form. You may also lodge a complaint with the National Commission for Data Protection, whose registered office is situated at 15, boulevard du Jazz L-4370 Belvaux.

By completing this form, you agree to your personal data being processed for the purpose of fulfilling your request.

Data processing in connection with management of the newsletter

The email address provided by the user when they sign up for the website newsletter will be shared with a sub-processor for the sole purpose of disseminating the newsletter. That sub-processor – 'Mailjet', based in Paris, France – is bound by the same legal obligations with regard to the protection of personal data. To prevent abuse of the system, the user must confirm their subscription by clicking on a link sent to the email address they provided.

The user may unsubscribe at any time using a link provided in each email, or by contacting the Organisation responsible for the website. The user's data will not be kept for longer than their subscription lasts.

The data controller is the Organisation responsible for this website.

Processing in connection with audience measurement

Certain data relating to the user's hardware and software – which is not of a nature that will reveal the user's identity – is collected when they visit the public website. The sole purpose of collecting such data is to produce statistics on website traffic (type of browser, resolution, approximate location, and so on) in order to provide users with the best possible user experience.

Under no circumstances is the user's full IP address kept. As only part of the IP address is kept for the purpose of obtaining global statistics, under no circumstances is it possible to identify a user.

This data is retained and hosted in Europe, in a solution provided by a sub-processor – Adobe Systems Inc. – which, as such, is bound by the same legal obligations regarding the protection of personal data, should that data be harvested in the future.

The data will be retained for as long as is necessary to observe how audiences develop over time, in terms of the browsers they use, their resolution settings, or other available statistical data.

The data controller is the Organisation responsible for this website.

Processing in connection with online surveys

Users' data is harvested, with their consent, for the sole purpose of conducting surveys on behalf of the State's administrative bodies. In addition, technical audience measurement data is collected at the same time.

The data is retained for the duration of the survey, plus a few weeks for the results to be statistically analysed.

These surveys are conducted directly on the website of a sub-processor, i.e. the surveygizmo.eu website, which is operated by the United States-based company, Widgix Limited. The data is hosted in Europe. That sub-processor is subject to the same legal obligations regarding the protection of personal data, as the surveys are intended for or involve users from the European Union.

The procedures that are implemented to conduct these surveys are such that none of the collected data can be used to personally identify the users. Even by combining technical identifier data (IP address or information about the user's browser or device) and/or data from multiple surveys, the sub-processor operating the platform would still be unable to personally identify the users.

The data controller and the recipient of the data is the Organisation responsible for this website that ordered the survey.