Privacy policy
We take your privacy very seriously and treat your personal data with respect, while we process any information collected in relation to our activity sector.
Our privacy policy applies to every visitor who visits our website traveltrade.visitluxembourg.com
Data processing controller
The data processing controller, is the designated entity that is responsible for the way your personal data is processed, transferred and retained.
The editor of the website is also the data processing controller :
Luxembourg for Tourism GIE
6, rue Antoine de Saint-Exupéry
L - 1010 Luxembourg
Register of Commerce and Companies: C124
Intra community VAT: LU28215929
The data processing controller can be contacted by phone (+352) 42 82 82 1 or by email: .
What personal data do we collect?
Technical data
While you navigate through our website, we collect different kinds of technical data :
- web browser and screen resolution
- operating system and device type (computer, mobile, tablet)
- session statistics
- navigation feed and clicks
- IP address
This data is stored anonymously and can not be used to identify you.
Newsletter
When you subscribe to our newsletter, we save your email address and your IP address.
You can unsubscribe from our newsletter by sending us an email at
User account
During the creation of a user account, we are collecting the following personal data :
- name and first name
- gender
- company
- address
- email address
- phone number
- IP address
These data are necessary to identify you in our system and to secure the access to your user account.
Online orders
When ordering in our online shop, we collect personal data :
- last name and first name
- kind
- society
- address
- country
- E-mail adress
- phone number
- personalized message
- payment method
- shipping address
These data are stored by the Data Controller for a period of 10 years.
Some of the data is transmitted to other providers to guarantee the execution of the order (eg: online payment system provider, carrier, ...).
The storage time of your data may vary by provider and the data is subject to the privacy policies of different providers. The service providers are all located in the territory of the Grand Duchy of Luxembourg.
Reservation requests
When requesting a reservation, we collect personal data:
- last name and first name
- kind
- society
- address
- country
- E-mail adress
- phone number
- personalized message
The personal data entered during the reservation requests are stored by the data controller but are not processed by the data controller. This data is transmitted to the partner entity in question (eg hotel, museum, tour guide, ...) that processes the request.
The storage time of your data may vary by partner entity and the data is subject to the privacy policies of the different entities. The partner entities are all located in the territory of the Grand Duchy of Luxembourg.
How do we collect your personal data?
Only data that you voluntarily provided is being collected, such as data submitted while signing up to a newsletter, filling out a contact form or contacting us via email.
Data outlining how you navigate through our website will also be collected.
Usage of your personal data
A cookie (a small text file) is placed on your device (computer, mobile phone, tablet) when you visit any website. This cookie identifies the device each time you visit the web site during the defined lifetime of the cookie.
Various kinds of cookies are used on our website :
Necessary cookies
It is a type of cookie which is essential to navigate a website. If you block this type of cookies in your web browser, you may not be able to use certain features of a website. These types of cookies are only sent by our website and not by third-party tools.
Preference cookies
Preference cookies allow us to improve and optimize the performance of our website by suggesting customized features (eg: language settings). If you block preference cookies in your browser, you will not be able to benefit from any customised features. Preference cookies are sent by the website and by third party tools.
Please consult our subcontractors at the end of this page to know what type of cookies are sent by third party providers.
Analytic cookies
Analytic cookies allow us to create performance statistics and analyse user behaviour on our website. The collected data is crucial for our business, as well as long term website optimisation measures.
We assume that we have a legitimate interest to send this type of cookies and that your prior consent is not required.
Objection to the usage of cookies
Some of our subcontractors offer “opt-out” options, which will block data collection and tracking :
Most web browser settings will allow you to set alerts if a website is trying to install cookies on your device or limit the type of cookies you allow. Check your web browser settings to find out which cookies you are allowing.
Legal grounds
Personal data is collected based on the following legal grounds :
- Preparation and execution of service contracts
- To adapt and improve the offer
- To comply to legal obligations
- For our legitimate interest
- To defend our interests during legal procedures
- For commercial purposes, if we have received your consent
How long is your data stored for?
Your data is only kept as long as we estimate for it be necessary to achieve the initial goal.
All personal data is stored for a defined period of time depending on the type of data. The retention period may differ depending on the purpose of the data collected such as :
- legal and contractual retention periods
- the limitation period during which the concerned persons may assert their legal rights against our economic interest group
- good practice
- economic interest group's commercial goals
The maximum retention period of your personal data does not exceed 10 years.
Protection of your personal data
We use different technical and organizational methods to protect your personal data from unauthorized access.
To which countries is your personal data transferred to?
Personal data may be shared internally for company purposes and with different third party providers in accordance with their contractual arrangements.
Selected data may be transferred to third party providers as part of an outsourcing contract.
All third party providers have confirmed to treat and process any data in accordance with GDPR (General Data Protection Regulation) as of 25th May 2018.
Name and address of the provider | Data storage country | Type of service | Concerned data |
---|---|---|---|
Adara Media Unlimited Company |
USA | Analyses statistiques et publicité comportementale | COOKIE: Page views, clicks, technical data of the browser and the terminal used to connect to the site. |
AddThis |
Member countries of the European Union & USA | Social bookmarking | COOKIE: Technical data of the web browser, IP address |
Campaign Monitor Pty Ltd |
Australia | Newsletter | COOKIE: Email addresses, sent emails and clicks tracking. |
Cloudflare Inc |
Storage is done dynamically based on the geographic location of the site visitor. Theoretically in every country in the world. | Cloud firewall, protection against malicious attacks, caching engine | COOKIE: All data transferred between your browser and the website. |
Datacenter Luxembourg S.A. |
Luxemburg | Hébergement du site internet | All data entered by completing the forms available on the site. |
Eurodsp Digital Media Desk GmbH |
Germany | Ad Spirit server - behavioral advertising | COOKIE: Pages vues, clics, données techniques du navigateur et du terminal utilisé pour se connecter au site. |
Facebook Ireland Ltd. |
Member countries of the European Union & USA | Social media | COOKIE: Pageviews,technical data of the web browser and of the device used to connect to the website. |
Google LLC |
Member countries of the European Union & USA | Web analytics (Google Analytics), Google fonts, behavioral advertising (Google display, Doubleclick) | COOKIE: Pageviews, clicks,technical data of the web browser and of the device used to connect to the website. |
Hotjar Ltd |
Member countries of the European Union | Online behavior analytics | COOKIE: Pageviews, clicks, page scrolling, technical data of the web browser and of the device used to connect to the website. |
LinkedIn Ireland Unlimited Company |
Member countries of the European Union | Social media | COOKIE: Pageviews,technical data of the web browser and of the device used to connect to the website. |
PayPal (Europe) S.à r.l. et Cie, S.C.A. |
Member countries of the European Union | Online payment | All data revealed during payment process. |
Pinterest Europe Limited |
Member countries of the European Union | Social media | COOKIE: All informations allowing you to connect to the website (name, profile, phone, pins, comments…). |
SIX Payment Services (Europe) S.A. |
Luxemburg | Paiement en ligne | All data revealed during payment process. |
Twitter International Company |
All countries | Social media | COOKIE: Pageviews,technical data of the web browser and of the device used to connect to the website. |
Your rights
According to the (EU) 2016/679 regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you benefit from a certain number of rights. Upon request, we will grant you access to any collected data. You have the right to request any modification of your data or you can request for it to be deleted permanently. You also have the right to withdraw your consent at any moment in time, and oppose any further processing of your data for a legitimate reason.
Please note that some of the rights outlined above may be restricted if we have a superior interest or a legal obligation to pursue data processing.
If you want to act upon your rights, please contact the data processing controller outlined at the top of this document.
You also have the right to submit a formal complaint to the Commission nationale pour la protection des données having its registered office at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette