Information notice - Made in Luxembourg

The purpose of this document is to inform you of the way in which the Chamber of Commerce of the Grand Duchy of Luxembourg and the Chamber of Skilled Trades and Crafts of the Grand Duchy of Luxembourg process your personal data (hereinafter, “The/Your Data“) in accordance with the legislation applicable to personal data and in particular the General Data Protection Regulation (hereinafter, the “GDPR“) in the context of the processing of (i) requests for the granting, renewal or updating of data under the “Made in Luxembourg” label (hereinafter the “Label“), (ii) the management of the list of labelled companies and its publication on the website https//www.made-in-luxembourg” (hereinafter “the Website“), (iii) the joint management of the Site and (iv) ensure full communication with all parties involved.

1. Who are the data controllers of Your Data?

The Chamber of Commerce of the Grand Duchy of Luxembourg, a professional chamber organised by the amended law of 26 October 2010 on the reorganisation of the Chamber of Commerce, established at 7, rue Alcide de Gasperi, L-1615 Luxembourg, Grand Duchy of Luxembourg (hereinafter, the “Chamber of Commerce“) and the Chamber of Skilled Trades and Crafts of the Grand Duchy of Luxembourg, a professional chamber organised by the amended law of 2 September 2011 on the reorganisation of the Chamber of Skilled Trades and Crafts, established at 2, Circuit de la Foire Internationale, L-1347 Luxembourg, Grand Duchy of Luxembourg (hereinafter, the “Chamber of Skilled Trades and Crafts“, together with the Chamber of Commerce, the “Joint Data Controllers“), are the data controllers of Your Data.

If you have any questions about this privacy notice or if you wish to exercise your rights as described in section 4 below, you are invited to send:

For citizens of the Chamber of Commerce, by email to dpo@cc.lu
For citizens of the Chamber of Skilled Trades and Crafts, by email to dataprotect@cdm.lu

The joint data controller does not apply to the personal data of data subjects that are collected by one or the other Professional Chamber in the context of their own activities (or “own data”): these data remain under the sole responsibility of the professional chamber concerned even if processing is to be carried out in the context of the services offered jointly by the Joint Data Controllers.

2. How is Your Data processed?

The Joint Data Controllers are concerned to respect the principle of minimization of Your Data and ensure that only adequate and relevant data are processed with regard to what is necessary for the pursuit of the following purposes:

Management of the granting, renewal or updating of personal data processed within the framework of the Label

Purpose	The Joint Data Controllers manage the granting, renewal and/or updating of Your Data processed within the framework of the Label
Data processed	identification data Contact data Professional data (including social media profiles and website addresses) Company logos responses to the questionnaire completed by the persons concerned This data is collected directly from you when you submit the grant form or when you request to renew or update Your Data
Legal basis	The processing is necessary for the performance of a contract between you and the Chamber of Commerce or the Chamber of Skilled Trades and Crafts
Data recipient	Employees involved in the Label management process Service providers subcontracted by Joint Data Controllers in charge of hosting and storing Your Data
Retention period	Your Data is kept for a period of 10 years from the date on which the Label is no longer awarded, after which it will be destroyed

Management of the list of labelled companies

Purpose (*)	The Joint Managers manage the list of labelled companies. This includes updating the list of labelled companies present on the Site and promoting them
Data processed	identification data Contact data Professional data (including social media profiles and website addresses) Company logos This data is collected directly from you when you submit the grant form or when you request to renew or update Your Data
Legal basis	The processing is necessary for the performance of a contract between you and the Chamber of Commerce or the Chamber of Skilled Trades and Crafts
Data recipient	Employees involved in the Label management process Service providers subcontracted by Joint Data Controllers in charge of hosting and storing Your Data Entities with a public service or interest mission (institutions, administrations, associations in particular)
Retention period	Your Data is kept for a period of 10 years from the date on which the Label is no longer awarded.

(*) In addition, the Joint Leaders inform you that:

– the list of companies labelled as nationals of the Chamber of Commerce will be subject to further processing for the purpose of archiving in the public interest on the basis of the amended law of 17 August 2018;

– the list of companies labelled as nationals of the Chamber of Skilled Trades and Crafts will not be subject to such treatment.

Site Management

Purpose	The Joint Controllers manage the Site. This includes updates and security of the Site.
Data processed	identification data Contact data Professional data (including social media profiles and website addresses) Company logos Images This data is collected directly from you when you submit the grant form or when you request to renew or update Your Data
Legal basis	The processing is necessary for the purposes of the legitimate interests pursued by the Joint Data Controllers relating to their interest in making the Website available in order to make the procedures and communication around the Label more accessible and to adapt the Website to the needs of visitors, and to update it in order to ensure its security and proper functioning
Data recipient	Employees involved in the Label management process Service providers subcontracted by Joint Data Controllers in charge of hosting and storing Your Data
Retention period	Your Data published on the Site is kept until the date on which the Label is no longer awarded, then it will be destroyed. Your Data in the back office is kept for a maximum period of one year from the date on which the Label is no longer awarded and then it will be destroyed

Management of the Label and Advertising Awards

Purpose	Management of the Label presentation (in case of a joint ceremony)
Data processed	identification data Contact data Professional data (including social media profiles and website addresses) Company logos Images This data is collected directly from you when you submit the grant form or when you request to renew or update Your Data
Legal basis	The processing is necessary for the purposes of the legitimate interests pursued by the Joint Data Controllers relating to their interest in promoting the award of the Label and advertising it for it and for the companies that receive it
Data recipient	Employees involved in the Label management process Service providers subcontracted by Joint Data Controllers in charge of hosting and storing Your Data
Retention period	Your Data is kept for a period of 10 years from the date of the Label award ceremony after which it will be destroyed
Label award event organised by the Professional Chambers	By registering for the Label award event physically organised by the Professional Chambers, you are informed that you may appear in photographs taken during this event. If you intend to object to this processing of your image, it is recommended that you contact the department in charge of the organisation before this event, in order to find, as far as possible, a way for your image not to be reproduced in the photographs. The purpose of the photos of this event and, where applicable, their distribution is to communicate about the awarding of the Labels consisting of publication in the various communication media of the Professional Chambers such as the www.made-in-luxembourg.lu website, the institutional sites of the two Chambers, their newsletters, their pages on social networks (LinkedIn, Facebook, Bluesky, Instagram), and/or the Merkur magazine of the Chamber of Commerce or etc.

Additional support via the Chamber of Commerce according to the needs identified

Purpose	To offer to the persons concerned applying for the Label, on a complementary basis, services offered by the Chamber of Commerce according to the answers to the additional questions in the questionnaire completed by the latter
Data processed	identification data Contact data Professional data (including social media profiles and website addresses) Company logos Images Answers to the additional questions in the questionnaire completed by the persons concerned This data is collected indirectly through the Label award form
Legal basis	The processing is necessary for the performance of a task carried out in the public interest entrusted to the Chamber of Commerce in its capacity as a professional chamber
Data recipient	Employees involved in the Label management process Subcontractors of the Chamber of Commerce in charge of hosting and storing Your Data
Retention period	Your Data is kept for the period necessary for the purposes of additional support and for more information the Chamber of Commerce refers you to the data protection policy of the Chamber of Commerce for citizens of the Chamber of Commerce

3. How is Your Data protected?

The Joint Data Controllers implement the technical and organizational security measures necessary to protect Your Data.

4. What are your rights in relation to Your Data?

You can:

access Your Data and obtain a copy of it in accordance with Article 15 of the GDPR,
obtain the rectification of inaccurate or incomplete data in accordance with Article 16 of the GDPR,
object to the processing of Your Data under the conditions provided for in Article 21 of the GDPR,
obtain the deletion of these data under the conditions provided for in Article 17 of the GDPR.

In certain cases, you have a right to portability in accordance with Article 20 of the GDPR and a right to restriction of processing under the conditions provided for in Article 18 of the GDPR.

When the processing of Your Data is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing carried out before such withdrawal.

Please note that the law authorises the Joint Data Controllers to retain and continue to process certain personal data, even when you have exercised your rights of opposition or erasure, for legitimate and compelling reasons such as compliance with applicable law and in particular the amended law of 26 October 2010 on the reorganisation of the Chamber of Commerce and the amended law of 2 September 2011 on the reorganisation of the Chamber of Skilled Trades and Crafts.

To exercise your rights, you can contact the Data Protection Officer of the Chamber of Commerce (dpo@cc.lu) if you are a national of the Chamber of Commerce or the Data Protection Officer of the Chamber of Skilled Trades and Crafts (dataprotect@cdm.lu). In the event that the Chamber of Commerce or the Chamber of Skilled Trades and Crafts has reasonable doubts as to your identity when exercising your rights, the Professional Chamber concerned may request that it be provided with additional information necessary to confirm your identity.

In addition, you have the right to lodge a complaint at any time with the National Commission for Data Protection (CNPD), at 15, boulevard du Jazz, L-4370 Belvaux, Grand Duchy of Luxembourg (link to the CNPD website) or with the competent supervisory authority of your state of residence or the place of the alleged infringement, if you feel that your rights set out above have not been respected.

5. How is this Privacy Policy updated?

The way in which the Joint Controllers process Your Data may change in the future.

Therefore, the Joint Data Controllers reserve the right to update this document from time to time, in order to reflect any change in the way processing is carried out or in the event of a modification of the applicable legal provisions.

In the event of any changes, the most recent version of this online information notice will apply and you will be informed in advance of any material changes that affect you directly.

In the event of any discrepancies between the French text and the other languages, the French version shall prevail.