Last revised: August 2021
The Luxembourg Institute of Science and Technology (hereafter “LIST”, “We”) is committed to ensure the highest standards of data protection in compliance with the applicable legislation, notably with reference to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter “GDPR”).
The present document aims at illustrating what personal data we collect about you, the reason why LIST uses your data and, as the case may be, share your data and the applicable retention periods. Additionally, the notice also provides you with information regarding your rights, how to exercise them and whom you can contact in case of any query.
The present notice is directed to all individuals whose personal data are recorded in our Customer Relationship Management tool (hereinafter, the “tool”).
The data controller is LIST, having its registered office at 5, Avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette, Luxembourg.
We collect personal data about qualified contacts, who have been in contact with us and shown interest in LIST. These data will only be added to the tool after the occurrence of a first meeting with LIST.
Please find here below a list of personal data we may collect and process. Those may at times include:
Please find here below a list of the purposes for which LIST collects and processes your personal data:
Please find here below a list of the legal basis on whose grounds LIST collects and processes your personal data:
Please kindly note that you can object to the processing of your personal data by sending an e-mail to firstname.lastname@example.org.
Please kindly note that LIST will not share any of your personal data with any third part. Moreover, access to your personal data will only be accessible is strictly limited to LIST’s employees who are authorised to process them for the purposes mention in Section 5 of this document and based on their professional role.
In compliance with the applicable data protection legislation, LIST has put in place appropriate technical and organisational measures in order to prevent or act upon any unauthorised and unlawful processing or disclosure, accidental loss, modification or destruction of personal data. These measures are implemented based on the current state of art, an evaluation of the risks derived by the processing activity and the need to protect personal data. Such technical and organisation measures are regularly updated and/or adjusted to new technical developments or any organisational change that may affect LIST.
LIST will only retain your personal for a period of three (3) years from the creation of your account. Upon expiration of this period, your account shall be retained only on justified basis due to an ongoing relationship with you or to the existence of a business partnership or service opportunity. In such cases, LIST ensures to perform an annual review of the persistence of such justifications.
With regards to your personal data collected and processed by LIST, you may exercise at any time the following rights:
You may exercise any of these rights by contacting our Data Protection Officer (DPO):
Luxembourg Institute of Science and Technology
Attn. Data Protection Officer
5, Avenue des Hauts-Fourneaux
L-4362 Esch-sur-Alzette, Luxembourg.
Please kindly note that your rights are not absolute and they may be withheld in accordance with applicable data protection laws. In such event, LIST will provide you with the reasons for not complying with your request. In such case, you may lodge a complaint with the CNPD and seek a judicial remedy against such decision.
LIST may make changes to this privacy notice from time to time, to reflect our current privacy practices or to comply with changes in the applicable data protection legislation. LIST encourages you to regularly visit this page in order to remain informed on how LIST collects and processes personal data.