.png)
The purpose of this Privacy Notice is to inform You of the manner in which Your personal data (hereinafter referred to as ‘Your Data’) is processed, as well as the reasons for and conditions of the processing specifically in relation to your relationship with the L-DIH consortium in the context of its missions and activities, and via the online platform provided by Luxinnovation (www:dih.lu)
This notice is addressed to all natural persons - employees and/or legal representatives of companies, public research centres, specialised incubators, Luxembourg state and/or parastatal administrations, all applicants and/or partners of a ‘Luxembourg -Digital Innovation Hub’ project, hereinafter referred to as L-DIH - and hereinafter referred to as “You” or the ‘User’.
Contents
- Who is the data controller?
- When is your data collected?
- What Personal Data is collected?
- For what purposes is Your Data processed and what is the lawful basis for such processing?
- General purposes
- The specific case of events organisation and related communications
- Who has access to your Personal Data?
- Members of the L-DIH Consortium
- Partners of the L-DIH Consortium
- Service providers
- How long is your Data kept?
- How is Your personal Data protected?
- What are your rights and how can you exercise them?
1. Who is the data controller?
The L-DIH Consortium is made up of several Luxembourg state and para-state entities. Your personal data collected and generated by the Luxembourg-Digital Innovation Hub European Programme are processed by the following joint data controllers, in accordance with Article 26 of the RGPD:
- Chamber of Commerce (strategic partner): 7, rue Alcide de Gasperi L-1615 Luxembourg, registered J41 with the RCSL;
- Competence center - Université de Luxembourg: 2, place de l'Université L-4365 Esch-sur-Alzette, registered C145 with the RCSL;
- FEDIL (strategic partner): 7, rue Alcide de Gasperi L-1615 Luxembourg, RCSL registration number F6043;
- Fonds national de la Recherche (strategic partner and financial support): 2, place de l'Université L-4365 Esch-sur-Alzette, registered J40 with the RCSL;
- Luxembourg House of Cybersecurity: 122, rue Adolf Fischer L-1521 Luxembourg, registered C90 with the RCSL;
- Luxinnovation GIE (Coordinator): 5, avenue des Hauts Fourneaux L-4362 Esch-sur-Alzette, registered C16 with the RCSL;
- Luxembourg Institute of Science and Technology (LIST): 5, avenue des Hauts Fourneaux L-4362 Esch-sur-Alzette, registered J53 with the RCSL;
- Ministère Economie (strategic partner and financial support): 19-21 Boulevard Royal L-2449 Luxembourg ;
- Université du Luxembourg: 2, place de l'Université L-4365 Esch-sur-Alzette, registered J20 with the RCSL.
- Esch-sur-Alzette, registered J53 with the RCSL;
- Ministère Economie (strategic partner and financial support): 19-21 Boulevard Royal L-2449 Luxembourg ;
- Université du Luxembourg: 2, place de l'Université L-4365 Esch-sur-Alzette, registered J20 with the RCSL.
Luxinnovation GIE, as project coordinator, provides the Consortium with its internet platform www.dih.lu. Luxinnovation is the publisher of the platform and is responsible for its design, graphic creation, development and technical evolution, among other things. You will find all the relevant information in the platform's legal notice. The Consortium also designates Luxinnovation as the data controller for Your personal data processed via the pages dedicated to the L-DIH on its internet platform www.dih.lu and the contact and/or information request forms. As a reminder, the data controller is the person who determines the purposes and means of processing Your Personal Data.
You may submit your questions and requests to the following email address: gdpr@luxinnovation.lu
2. When is Your personal data collected?
Certain services offered on the www.dih.lu internet platform are accessible to Visitors on condition that they identify themselves by providing their e-mail address. This information is collected via the expression of interest form.
Your data may also be collected when you accept our Cookie Management Policy, which is recommended on pain of unavailability of certain services (contact and/or information request forms, for example).
The Consortium collects Your Personal Data in several cases:
- Direct collection: you fill in a contact or information request form or a registration form for an event or training course organised by the Consortium; You are in contact with the Consortium in connection with its missions and activities.
- Automated collection: provided that you have accepted cookies from the www.dih.lu website, the latter may collect Your Data relating to your browsing when you consult our online content (please refer to our Cookie Management Policy).
3. What personal data is collected?
The Consortium collects information that users voluntarily provide via the website www.dih.lu, in particular when they complete contact forms or event registration forms. It may also collect personal data in the course of its professional interactions and activities with the relevant organisations and individuals.These forms involve the following identification and contact data:
- Identification data: Surname(s), first name(s), title, functions within the company/organisation represented;
- Contact details:
- Fixed/mobile telephone (business or personal, depending on what is provided by the person concerned);
- Postal address (business or personal, depending on what is provided by the person concerned);
- E-mail (business or personal, depending on what is provided by the person concerned).
Specifically for events, training sessions, and webinars organized by the Consortium, our website has integrated the "Inwink" online event registration platform. The objective is to facilitate your online registration and ensure maximum convenience. The data collected via this platform is processed in accordance with the purposes described in the “Event Organisation and related communicaitons” section (see below d.II).
Additional information about the User may be collected automatically via cookies, depending on the User's preferences. Please consult the Cookie Management Policy for further details.
4. For what purposes are Your data processed and what is the legal basis for this processing?
In accordance with the GDPR, all processing must be based on one of the six lawful grounds listed in the GDPR:
- the consent of the data subject
- the need to perform a contract concluded with the data subject or pre-contractual measures at the request of the data subject,
- a legal obligation,
- the protection of the vital interests of a natural person,
- the fact that processing is necessary to fulfil the tasks of the Consortium or,
- the legitimate interest of the data controller.
Your Personal Data is processed fairly, lawfully, and transparently: it is only collected for specific, explicit, and legitimate purposes.
The Data Controller collects Users' personal data only if it is essential to achieve the following purposes, on the legal bases specified below.
1. General purposes:
| Purposes | Legal bases |
|---|---|
| Inform users of changes made to the pages dedicated to L-DIH on the Luxinnovation internet platform, news and events specific to L-DIH | Execution of public interest mission |
| Manage the reManage and monitor the relationship with Users: managing professional contacts, liaising with companies, monitoring projectslationship with Users | Execution of public interest mission |
| Manage and monitor of relations with Consortium members: to coordinate joint activities, ensure consistency in actions and facilitate the internal communication necessary for the fulfilment of its missions | Execution of public interest mission |
| Allow the User to access the respective websites of the members of the Consortium, the tools and services provided by the Luxinnovation internet platform | Execution of public interest mission |
| Communicate with Users and/or inform them of the progress of the current project(s) | Execution of pre-contractual measures |
| Event management | Execution of pre-contractual measures Fulfillment of the request to be able to participate in the event of their choice Your consent at the time of your registration |
| Sending notifications to the email address of your choice, relating to the event in question and subsequent events | Your consent at the time of your registration |
| Sharing Your Data with Consortium Members | Your consent at the time of your registration |
| For statistical purposes | Legitimate interests of the Consortium in acquiring historical knowledge about its activities Legitimate interests of the Consortium in informing its partners of its activities, achievements and others Legitimate interests of the Consortium in measuring the level of digital maturity of Users |
| For audit purposes commissioned by the initiators of the L-DIH program and members of the Consortium | Legitimate interests of the Consortium in the development of its activities Legitimate interests of the Consortium in informing its partners of its activities, achievements and others |
| For prospective purposes to attract new clients and potential providers | Legitimate interests of the Consortium in the development of its activities |
| Defend and safeguard the rights of the Consortium in the event of litigation and claims | Legitimate interests of the Consortium to protect itself in the event of litigation |
| Ensure and strengthen the security and stability of the Luxinnovation internet platform | Legitimate interests of the Consortium in protecting its activities from unintentional or intentional incidents |
The data collected from each Data Subject is adequate, relevant and not excessive in relation to the relevant purposes listed above. This data will not be used for purposes other than those for which it was collected.
II. The specific case of events organisation and related communications:
In connection with events organised or co-organised by the L-DIH Consortium, certain personal data may be collected and processed for the purposes of the administrative, logistical and operational management of your participation. This data is processed for the following purposes:
| Purposes | Legal bases |
|---|---|
manage event registrations and attendance provide practical information before and after the event ensure the event is safe and well-organised produce promotional content for the event (photos, videos, posts) | execution of a mission in the public interes Pre-contractual measures (registration management), Consortium’s legitimate interest in documenting and promoting its activities, where required, your explicit consent (in particular for certain uses of photos/videos). |
Photography and videography:
Photographs and/or video recordings may be taken during the event.
This content may be used for communication purposes by the Consortium and its members (website, social media, activity reports, promotional materials).
Anyone who does not wish to appear in these photos or videos is asked to inform the staff on site.
Data sharing:
Data collected during an event may be shared amongst the members of Consortium L-DIH, exclusively for the purposes described above.
5. Who has access to Your personal data?
- Members of the L-DIH Consortium:
Your Personal Data is processed only by duly authorized employees of the Consortium members, within the limits of their respective missions.
2. Partners and Shareholders of the L-DIH Consortium:
In certain circumstances, Your Personal Data may be shared with a third party. This is particularly the case with the Consortium’s recipients who, in the context of the aforementioned purposes, designate any entity supporting the activities of the L-DIH:
- European partners who initiate and oversee L-DIH, including the European Commission.
- Institutional partners (ministries, Luxembourg administrations, professional chambers, and public research organizations) and non-institutional partners (Luxembourg private research organizations, service providers),
- Subcontractors who process data for Consortium members (particularly in the IT field).
These recipients may, under their own responsibility, disclose the Personal Data to their agents and/or delegates (the "Sub-Recipients"), who will process the Personal Data for the sole purpose of assisting the recipients in providing their services to the Consortium.
Your Personal Data may be transferred outside Luxembourg, within the European Economic Area (EEA), or within countries subject to the GDPR and offering the highest level of protection and confidentiality with regard to Your personal data. In rare cases, Your Data may be transferred outside the EEA. In these exceptional circumstances, the Consortium undertakes to ensure that adequate protection exists, materialized either by contractual agreements such as “Data protection agreement” or by national legislation offering guarantees equivalent to the GDPR and recognized by the European Commission.
3. Services providers:
In order to provide its services, the Consortium uses several external suppliers, some of whom may have access to your personal data. In this context, to ensure the protection of your personal data:
- Our suppliers are selected according to strict criteria: they offer sufficient guarantees to implement appropriate technical and organizational measures.
- The contracts concluded with each service provider include either a confidentiality clause or a data protection agreement.
6. How long is Your data kept?
The Consortium only retains your personal data for the period strictly necessary for the purposes for which it is collected (listed in point d. above), including the statutory limitation period applicable to its relationship with the User – and to comply with its own legal and regulatory obligations.
All your personal data contained in the contact and/or information request form is collected by Luxinnovation and shared via secure channels between the members of the Consortium, who store it in their respective databases. Their retention periods apply.
In the specific context of support projects, contractual and legal obligations require data to be retained for up to 10 years from the closure of the file or the decision of ineligibility. This data is also retained to demonstrate compliance with internal and legal procedures by the members of the Consortium.
In the specific context of Inwink, your personal data collected at the time of registration for an event is deleted within 24 months from the date of the event for which you registered.
7. How is Your personal data protected?
In accordance with GDPR requirements, Consortium members are committed to developing and implementing the necessary technical and organizational security measures on a daily basis to ensure the highest standards of respect for and protection of Your personal data. Their staff are trained for this purpose and are equipped with high-performance IT systems that ensure a high level of data security.
8. What are Your rights and how can you exercise them?
As a data subject, You have various rights. Below is a brief description of these rights and how You can exercise them, via the e-mail address gdpr@luxinnovation.lu. Luxinnovation will be responsible for informing the members of the L-DIH Consortium in order to provide You with the most relevant and comprehensive response possible.
Right to information: you can send us any questions regarding the recording and processing of Your data.
Right of access: You may, at any time, by way of a simple written request, obtain confirmation as to whether or not personal data concerning You is being processed and, if that is the case, obtain access to such data and a free copy of the same.
Right of rectification: You may, at any time, by way of a simple written request, insist on the rectification of any inaccurate personal data concerning You. You can also make a request for incomplete data to be rendered complete in the same way.
Right to erasure: You may, at any time, by way of a simple written request, have Your data deleted, provided that one of the following reasons applies:
the data is no longer necessary for the purposes for which it was collected and processed;
You have withdrawn your consent on which the processing was based and there is no other legal basis for this;
You object to the processing and there is no compelling legitimate reason for such processing;
the data has been processed unlawfully;
data must be deleted to comply with a legal obligation.
Right to restriction of processing: You may request, by writing, that processing be restricted for one of the following reasons:
You dispute the accuracy of the personal data (processing will be restricted to the time necessary to verify the accuracy of the data);
in the event of unlawful processing, You object to the erasure of your data and request that its use be restricted;
we no longer need your data for processing purposes, but it is still necessary to establish, exercise or defend legal rights;
You have objected to the processing (the processing will be restricted for the period of time necessary to verify the existence of legitimate grounds pursued by Luxinnovation that would prevail over yours).
Where processing restrictions are granted, personal data may – with the exception of storage – only be processed with the consent of the data subject for the establishment, exercise or defence of legal rights, or for the protection of the rights of another natural or legal person, or for important reasons relating to the public interest.
Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of Your data based on the execution of a public mandate or this being necessary for the legitimate interests pursued by us, simply by sending us a request in writing.
We will no longer process such personal data unless it can be shown that there are compelling legitimate grounds for processing which override your interests and rights and freedoms, or for the establishment, exercise or defence of legal claims.
When Your personal data is processed for marketing purposes, You have the right to object to this processing at any time.
Right to data portability: You have the right, by sending us a written request, to receive your personal data provided to us by you in a structured, commonly used and machine-readable format, and to transmit this data to another controller without Luxinnovation's hindrance, when:
processing is based on Your consent or on a contract; and
the processing is carried out using automated processes.
Right to withdraw your consent: Where processing is based on Your consent, You have the right to withdraw this at any time by sending us a written request. The withdrawal of your consent will not affect the lawfulness of the processing based on the consent given prior to such withdrawal.
Right to lodge a complaint: We make every effort to ensure that our legal obligations concerning data protection are respected and respond to any complaint addressed to us in this respect as quickly as possible.
We draw your attention to the fact that The Consortium reserves the right to verify Your identity before granting Your request to exercise the rights provided for under the GDPR. As a reminder, the exercise of Your rights does not outweigh the prior validity of the processing applied to Your personal data.
If processing Your request requires the mobilization of human and technical resources from the partners of the joint call projects over a given period, We reserve the right to invoice You for our services.
All requests to exercise Your rights will be kept for 5 years from the date Your request is sent.
For any questions regarding the processing of your personal data via the site www.dih.lu, and for any questions relating to the exercise of Your rights, please contact Luxinnovation's GDPR Officer: gdpr@luxinnovation.lu.
If You are not satisfied with the response you receive, you have the option of filing a complaint with the Luxembourg supervisory authority:
Commission Nationale pour la Protection des Données (National Data Protection Commission) ("CNPD").
15, Boulevard du Jazz
L-4370 Belvaux
Grand Duchy of Luxembourg
You also have the option of contacting the supervisory authority in your own country. You can find contact details for all the supervisory authorities by clicking on the following link: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Last modification: May 2026