Privacy Policy


The University of Luxembourg and the Conseil Supérieur pour un Développement Durable initiated the project and are the main sponsors for the platform's development. By Articles 12, 13 and 14 of the EU General Data Protection Regulation 2016/679 (hereafter the “GDPR”), this Information Notice explains how the University of Luxembourg and its partners collect, process, and protect Personal Data about your registration and participation to the platform by writing articles on sustainability initiatives.

This Notice shall cover the processing made by all the partners.

1) WHAT PERSONAL DATA DO WE PROCESS?
You must create a free user account on our platform to integrate your contribution to our website.
By creating this account, you provide Personal Data, which means you shall be considered a data subject.
The personal data processed include:

  • Your first and last name
  • Your email address
  • Your desired username
  • Your password
  • Your affiliation (civil society, government, municipality, research, school, or enterprise).
2) WHO IS RESPONSIBLE FOR PROCESSING THE DATA?
This platform is developed in collaboration with partner organisations, who all play a role in shaping the platform's content, structure, and functions. The platform is a place where everybody can be informed about sustainability awards. All the partners are joint controllers according to the GDPR.
For the moment, we count two partner organisations:
• The University of Luxembourg
• IMS Luxembourg
The number of partner organisations can grow for the development of the platform. The notice will be updated accordingly.
The coordination between partner organisations in the development of the contents and the structures and functions of the platform is ensured by the University of Luxembourg and IMS Luxembourg.
 
3) WHO HAS ACCESS TO YOUR DATA AND TO WHOM ARE THEY DISCLOSED?
Only the partner organisations will have access to your data to review your article(s) and application(s).
Please note that the platform's content, including your provided data, is hosted by Innovationbit / Koye-brand GmbH in Amalienstr. 77, 80799 München, Germany, thus acting as processor on behalf of the partner organisations.
Your data will be processed within the European Union.
 
4) WHAT IS THE PURPOSE OF THE PROCESSING?
The purpose of the Processing of Personal Data is:
  • To carry out your registration on our platform
  • To allow you to apply for the Sustainability Awards
  • To promote your practice(s) via the awards and the SustainLux platform and in all the awards process (ceremony, videos, brochure and communications)
5) HOW LONG DO WE STORE YOUR DATA?
The personal data you provide through registration is kept on our platform for the duration of your account. If you decide to be a contributor to the platform no longer and want to delete your account, your personal information will be deleted as soon as possible.
 
6) WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
The legal basis is laid down in Article 6.1. (a) of the GDPR: the data subject has consented to processing his or her data for one or more specific purposes. Indeed, we need your data to create a user account.
 
7) WHAT ARE YOUR RIGHTS ABOUT THE PROCESSING OF YOUR DATA?
According to the GDPR, you benefit notably from the following rights: right to be informed, right to access your data, right to rectification, right to erasure, right to restrict the scope of the processing, right to object, right to data portability, right to complain.
 
8) WHOM SHOULD YOU CONTACT IF YOU HAVE QUESTIONS CONCERNING THE PROCESSING OF YOUR DATA?
In practice, you can exercise your rights by contacting:
Maximilian Klein
Email: maximilian.klein@uni.lu

IMS Luxembourg 
Tel.: +352 26 25 80 13 
Email: awards@imslux.lu
 
9) HOW CAN YOU LODGE A COMPLAINT?
If you consider that the processing of personal data relating to you infringes the GDPR, you will have the right – without prejudice to any other administrative or judicial remedy – to complain with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In Luxembourg, the competent authority is the Commission Nationale pour la Protection des Données (CNPD).

Contact of the CNPD:
Commission Nationale pour la Protection des Données
15, boulevard du Jazz
Service des réclamations
L-4370 Belvaux
Tel. : (+352) 26 10 60 -1
Fax : (+352) 26 10 60 -29
 
You can also use their contact form at: https://cnpd.public.lu/fr/support/contact.html
 
10) APPLICABLE LAW - JURISDICTION
The present Notice shall be governed and construed per the Luxembourgish law.
Any dispute concerning the existence, interpretation or performance of this Notice which cannot be settled amicably shall fall within the jurisdiction of the Courts of Luxembourg City, without prejudice to the rights of the Data Subjects to bring the matters before the court where he or she has her place of residence as well as its right to complain with the supervisory authority.