Newsletters privacy notice
Last revised: June 2023
1. An overview of data protection
The Luxembourg Institute of Science and Technology (hereafter “LIST”, “We”) is committed to ensure the highest standards of data protection in compliance with the applicable legislation, notably with reference to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter “GDPR”).
The present document aims at illustrating what personal data we collect about you, the reason why LIST uses your data and, as the case may be, share your data and the applicable retention periods. Additionally, the notice also provides you with information regarding your rights, how to exercise them and whom you can contact in case of any query.
2. Scope of the notice
The present notice is directed to any person (hereafter “the Subscriber”, “You”) that subscribes to receive LIST’s newsletter(s) (hereafter “Newsletter”), which includes LIST Newsfeed, LIST Newsletter and mails for future events.
3. Identity of the data controller
The data controller is LIST, having its registered office at 5, Avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette, Luxembourg. LIST is responsible for collecting and processing your personal data in relation with your subscription to LIST’s Newsletter.
4. Categories of personal data we collect
We collect personal data about you when you subscribe to LIST’s Newsletter via our corporate website or during registration to a public event organized by LIST.
Please find here below a detailed list of personal data we collect and process:
- Contact details (name, surname, e-mail address)
- Personal information (country, language, interests with regards to LIST’s activities, image URL),
- Professional information (company),
- IT information (IP address, usage data, cookies data, online navigation data, location data, browser data).
5. Purpose and legal basis for processing
Please find here below a list of the purposes for which LIST collects and processes your personal data:
| Processing of contact details for inviting to future events | To process contact details to manage the subscription of Participants to a mailing list of LIST's future events. |
| Processing of contact details for sending LIST newsletters | To process contact details to manage the subscription of Participants to LIST newsletters. |
Please find here below the legal basis on whose grounds LIST collects and processes your personal data:
| Processing of contact details for inviting Participants to future events | Consent provided through subscription. To withdraw consent, the Participant can click the unsubscribe link in the footer of any email received or contact LIST at communication@list.lu. |
| Processing of contact details for sending Participants LIST newsletter | Consent provided through subscription. To withdraw consent, the Participant can click the unsubscribe link in the footer of any email received or contact LIST at communication@list.lu. |
6. Share of your personal data with third parties
In order to fulfil the purposes mentioned in Section 5 (“Purposes and legal basis for processing”), LIST will transfer your personal data to:
The Rocket Science Group LLC d/b/a Mailchimp: Mailchimp is the online platform that we use to manage and send LIST newsletters. Mailchimp may transfer and process personal data to and in the United States and anywhere else in the world where Mailchimp, its affiliates or its sub-processors maintain data processing operations. As between LIST and Mailchimp, such processing is done in compliance with the standard contractual clauses. For more details, you can have a look at the following webpage: https://mailchimp.com/
7. Ensuring personal data security and integrity
In compliance with the applicable data protection legislation, LIST has put in place appropriate technical and organisational measures in order to prevent or act upon any unauthorised and unlawful processing or disclosure, accidental loss, modification or destruction of personal data. These measures are implemented based on the current state of art, an evaluation of the risks derived by the processing activity and the need to protect personal data. Such technical and organisation measures are regularly updated and/or adjusted to new technical developments or any organisational change that may affect LIST.
In particular, access on a need-to-know basis has been implemented to ensure only staff with appropriate need for the purpose has access to the personal data of Subscribers. Additionally, we have a data processing agreement in place with our processor.
8. Data retention periods
LIST will only retain your personal for a period of time that is strictly necessary for the purposes for which we collect your data, namely until the Newsletter services for which you registered is being operated. You can choose at any time to unsubscribe to our Newsletters, by clicking on the specific “Unsubscribe” button in the Newsletter or by sending an e-mail to communication@list.lu. Your personal data is immediately deleted in a permanent way.
9. Your rights and how to exercise them
With regards to your personal data collected and processed by LIST, you may exercise at any time the following rights:
- Right to access: You have the right to receive confirmation about whether or not your personal data is being processed by LIST. If that is the case, you have the right to know what data is being collected and processed and to obtain of copy of it;
- Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request to have it rectified;
- Right to erasure: Subject to certain conditions specified in art. 17 of the GDPR, you have the right to have your personal data deleted by LIST;
- Right to restriction of processing: Subject to certain conditions specified in art. 18 of the GDPR, you have the right to obtain restriction of the processing of your personal data performed by LIST;
- Right to object: You have the right to object the processing of your personal data when the conditions set out in art. 21 of the GDPR apply;
- Right to withdraw consent: If LIST is processing your personal data based on your consent, you have the right to withdraw that consent at any time. The withdrawal of such consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD). More information on how to lodge a complaint are available on CNPD’s website: https://cnpd.public.lu.
You may exercise any of these rights by contacting our Data Protection Officer (DPO) by filling the online form
10. Changes to this notice
LIST may make changes to this privacy notice from time to time, to reflect our current privacy practices or to comply with changes in the applicable data protection legislation. LIST encourages you to regularly visit this page in order to remain informed on our data protection policies.
