Privacy policy

We take your privacy very seriously and treat your personal data with respect, while we process any information collected in relation to our activity sector.

Our privacy policy applies to every visitor who visits our website traveltrade.visitluxembourg.com

 

Data processing controller

 

The data processing controller, is the designated entity that is responsible for the way your personal data is processed, transferred and retained.

 

The editor of the website is also the data processing controller :

 

Luxembourg for Tourism GIE
6, rue Antoine de Saint-Exupéry
L - 1010 Luxembourg

Register of Commerce and Companies: C124
Intra community VAT: LU28215929

 

The data processing controller can be contacted by phone (+352) 42 82 82 1 or by email: .

 

What personal data do we collect?

 

Technical data

 

While you navigate through our website, we collect different kinds of technical data :

 

• web browser and screen resolution
• operating system and device type (computer, mobile, tablet)
• session statistics
• navigation feed and clicks
• IP address

 

This data is stored anonymously and can not be used to identify you.

 

Newsletter

 

When you subscribe to our newsletter, we save your email address and your IP address.

 

You can unsubscribe from our newsletter by sending us an email at 

 

User account

 

During the creation of a user account, we are collecting the following personal data :

 

• name and first name
• gender
• company
• address
• email address
• phone number
• IP address

 

These data are necessary to identify you in our system and to secure the access to your user account.

 

Online orders

 

When ordering in our online shop, we collect personal data :

 

• last name and first name
• kind
• society
• address
• country
• E-mail adress
• phone number
• personalized message
• payment method
• shipping address

 

These data are stored by the Data Controller for a period of 10 years.

 

Some of the data is transmitted to other providers to guarantee the execution of the order (eg: online payment system provider, carrier, ...).

 

The storage time of your data may vary by provider and the data is subject to the privacy policies of different providers. The service providers are all located in the territory of the Grand Duchy of Luxembourg.

 

Reservation requests

 

When requesting a reservation, we collect personal data:

• last name and first name
• kind
• society
• address
• country
• E-mail adress
• phone number
• personalized message

 

The personal data entered during the reservation requests are stored by the data controller but are not processed by the data controller. This data is transmitted to the partner entity in question (eg hotel, museum, tour guide, ...) that processes the request.

 

The storage time of your data may vary by partner entity and the data is subject to the privacy policies of the different entities. The partner entities are all located in the territory of the Grand Duchy of Luxembourg.

 

How do we collect your personal data?

 

Only data that you voluntarily provided is being collected, such as data submitted while signing up to a newsletter, filling out a contact form or contacting us via email.  

 

Data outlining how you navigate through our website will also be collected.

 

Usage of your personal data

 

A cookie (a small text file) is placed on your device (computer, mobile phone, tablet) when you visit any website. This cookie identifies the device each time you visit the web site during the defined lifetime of the cookie. 

 

Various kinds of cookies are used on our website :

 

Necessary cookies

 

It is a type of cookie which is essential to navigate a website. If you block this type of cookies in your web browser, you may not be able to use certain features of a website. These types of cookies are only sent by our website and not by third-party tools.

 

Preference cookies

 

Preference cookies allow us to improve and optimize the performance of our website by suggesting customized features (eg: language settings). If  you block preference cookies in your browser, you will not be able to benefit from any customised features. Preference cookies are sent by the website and by third party tools.

 

Please consult our subcontractors at the end of this page to know what type of cookies are sent by third party providers.

 

Analytic cookies

 

Analytic cookies allow us to create performance statistics and analyse user behaviour on our website. The collected data is crucial for our business, as well as long term website optimisation measures. 

We assume that we have a legitimate interest to send this type of cookies and that your prior consent is not required.

 

Objection to the usage of cookies

 

Some of our subcontractors offer “opt-out” options, which will block data collection and tracking :

• AddThis
• Doubleclick
• Eurodsp Digital Media Desk GmbH (Ad Spirit)
• Google Analytics
• Hotjar
   

Most web browser settings will allow you to set alerts if a website is trying to install cookies on your device or limit the type of cookies you allow. Check your web browser settings to find out which cookies you are allowing.

 

Legal grounds

 

Personal data is collected based on the following legal grounds :

 

• Preparation and execution of service contracts
• To adapt and improve the offer
• To comply to legal obligations
• For our legitimate interest
• To defend our interests during legal procedures 
• For commercial purposes, if we have received your consent

 

How long is your data stored for?

 

Your data is only kept as long as we estimate for it be necessary to achieve the initial goal. 

 

All personal data is stored for a defined period of time depending on the type of data. The retention period may differ depending on the purpose of the data collected such as :

 

• legal and contractual retention periods
• the limitation period during which the concerned persons may assert their legal rights against our economic interest group
• good practice
• economic interest group's commercial goals

 

The maximum retention period of your personal data does not exceed 10 years.

 

Protection of your personal data

 

We use different technical and organizational methods to protect your personal data from unauthorized access.

 

To which countries is your personal data transferred to?

 

Personal data may be shared internally for company purposes and with different third party providers in accordance with their contractual arrangements.

 

Selected data may be transferred to third party providers as part of an outsourcing contract.

All third party providers have confirmed to treat and process any data in accordance with GDPR (General Data Protection Regulation) as of 25th May 2018.

 

 

Your rights

 

According to the (EU) 2016/679 regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you benefit from a certain number of rights. Upon request, we will grant you access to any collected data. You have the right to request any modification of your data or you can request for it to be deleted permanently. You also have the right to withdraw your consent at any moment in time, and oppose any further processing of your data for a legitimate reason.

 

Please note that some of the rights outlined above may be restricted if we have a superior interest or a legal obligation to pursue data processing.

 

If you want to act upon your rights, please contact the data processing controller outlined  at the top of this document.

 

You also have the right to submit a formal complaint to the Commission nationale pour la protection des données having its registered office at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette