Privacy policy

In accordance with the provisions of EU Regulation No. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") and any applicable national data protection laws, we are required to collect, store and process some of your personal data (hereinafter "personal data") in the course of our business.

When we process your personal data, we are acting as controller and are required to inform you of the terms of our processing and of your rights under the GDPR.

WHO WE ARE

We are the Luxembourg City Tourist Office a.s.b.l., abbreviated "LCTO", a non-profit oassociation founded in 1933.

We are a reference organisation for leisure and business tourism in Luxembourg and one of the main players in the organisation of concerts and events in the capital's public space.

Our head office is located at 30, Place Guillaume II L-1648 Luxembourg.

COLLECTION OF YOUR PERSONAL DATA

As part of our activities, we may collect and process information about you in the following situations:

  • You contact us by e-mail, telephone, via our dedicated online form or in person at our reception desk.
  • You apply for a open position at the LCTO
  • You place an order or make a purchase on our website or at our reception desk
  • You are visiting tourist attractions under our responsibility (in particular the Pétrusse and Bock casemates)

You may, at your discretion, refuse to provide us with some or all of the personal data requested by the LCTO, necessary for the performance of a service. In this case, we may not be able to provide the said service.

If you provide us with the personal data of third parties (for example in the context of organising a guided tour for groups), you are obliged to inform these third parties of the processing of their data by the LCTO and of the existence of the present privacy policy.

COOKIES

We use cookies on our website. A cookie is a text file placed on your terminal (computer, mobile or tablet) when you visit our website. Cookies enable us to improve your browsing experience.

When you log on to our site for the first time, you are asked to choose your cookie preferences. You are free to consent to their storage or to refuse them.

You can change your preferences and/or withdraw your consent at any time via our cookie management tool, which is accessible via the floating icon in the bottom left-hand corner of this page.

Please note that there are different categories of cookies. Cookies that are "strictly necessary" for the proper operation of our website do not require your prior consent. Our cookie management tool informs you of the different categories of cookies used on our website.

VIDEO SURVEILLANCE OF CASEMATES

The LCTO has set up video surveillance systems for the Casemates du Bock and the Casemates de la Pétrusse, two major tourist attractions in Luxembourg City, for which the LCTO has been awarded an operating concession by the government of the Grand Duchy of Luxembourg.

In accordance with the guidelines for video surveillance issued by the National Commission for Data Protection:

  • The cameras' field of vision is limited to the area required to achieve the desired objectives.
  • Permanent and continuous surveillance is avoided.
  • Only images are monitored, not sound.

CATEGORIES OF PERSONAL DATA COLLECTED

The data we collect depends on the context of your interactions with us and the choices you make, including the services provided to you.

In accordance with the principle of data minimisation, we only collect personal data that is strictly adequate, relevant and limited to what is necessary for the purposes for which it is processed.

The data processed may include:

  • Your identification data (surname, first name, age, nationality, address, telephone number, e-mail address, images).
  • Your curriculum vitae, if applicable (professional experience, photograph).
  • Your electronic and technical identification data (IP address, browser used, type of terminal, session statistics).
  • Your bank details (account number, IBAN and BIC code, amount invoiced).
  • Your image (excluding sound) captured by the video surveillance systems of the Bock and Pétrusse casemates.
  • Your country of residence.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

The LCTO collects your personal data for the following specific, explicit and legitimate purposes:

  1. To process the communications, you send us and to respond to your questions, requests and complaints.
  2. To provide the service you have requested and/or organise the event you have booked, and to comply with the obligations arising therefrom (in particular in terms of invoicing, where applicable, and declarations).
  3. Carry out the recruitment process (in the event of an application)
  4. Defend our interests in legal proceedings.
  5. Protecting visitors and our staff, safeguarding assets and managing incidents (in connection with the video surveillance of the casemates).
  6. To keep internal statistics.

Each of the purposes mentioned is based on one of the lawfulness grounds provided for in the GDPR. Thus, we only process your data if you have consented to it, if the processing is necessary for the preparation and/or performance of a contract between you and LCTO, if the processing meets a legal or regulatory obligation to which LCTO is subject or if the processing is based on our legitimate interest.

The LCTO's legitimate interests mentioned above are:

  • The processing purposes described in points (a), (d) and (e) of the above paragraph.
  • Compliance with foreign laws and regulations and/or any order of a foreign court, government, supervisory, regulatory or tax authority.

In addition, your personal data will under no circumstances be further processed in a manner incompatible with the purposes initially identified.

TRANSMISSION OF YOUR PERSONAL DATA

Your personal data is processed by LCTO staff (employees and freelancers) who are authorised to do so and who are subject to strict confidentiality obligations.

The LCTO may transmit some of your data to processors who act under our responsibility and according to our instructions set out in a contract that complies with the GDPR. We use processors to manage our accounting and IT operations, storage and maintenance.

Our processors may pass on your personal data to their own subcontractors ("sub-processors"), who will process your data for the sole purpose of assisting our subcontractors in carrying out the tasks we have entrusted to them.

Our sub-processors are located in the European Economic Area.

We may also, and only if you consent, pass some of your data to the suppliers of the cookies used on our website.

We may also need to transfer your personal data to comply with applicable law or to respond to subpoenas, court orders or other legal process. This may involve sharing your data with law enforcement agencies, government agencies, courts and other organisations acting as separate data controllers.

YOUR RIGHTS TO YOUR PERSONAL DATA

In accordance with the conditions and limitations set out in the GDPR, you have a number of rights over your personal data, namely:

  • to access your personal data, i.e. to obtain a copy of your personal data at any time;
  • to rectify your personal data if it is inaccurate or incomplete;
  • to object to the processing of your personal data (including for marketing purposes, where applicable);
  • to restrict the use of your personal data if, for example, it is inaccurate;
  • to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected; and/or
  • to request the portability of your personal data where technically possible.

You can exercise your rights by contacting our data protection officer at the following address: [email protected].

Please note that these rights are not absolute and that we may not be able to respond positively to your requests in certain situations.

You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données ("the CNPD") at the following address: 15, Boulevard du Jazz, L-4370 Belvaux).

PROTECTION OF YOUR PERSONAL DATA

We have put in place appropriate organisational, physical and technical security measures (including in relation to our employees, facilities, hardware and software, storage and networks, access controls, monitoring and recording, vulnerability and breach detection, incident response) to prevent and where necessary manage unauthorised or accidental access, loss, alteration, disclosure or destruction of your personal data.

RETENTION OF YOUR PERSONAL DATA

LCTO will retain your personal data for the duration of the agreement/contract/service provision, and thereafter for a period of ten (10) years, unless longer or shorter statutory limitation periods apply.

Data collected in connection with an unsuccessful application will be deleted immediately or retained for 6 months if an offer can be made during this period.

Images recorded at the Casemates du Bock are kept for 24 hours from the time they are recorded. In the event of an incident or offence, the images may be kept for longer than this and, if necessary, communicated to the competent police or judicial authorities.

In certain circumstances, the data collected may be rendered anonymous so that it can no longer be associated with the persons concerned, in which case it is no longer personal data and may be kept for an unlimited period.

Once LCTO no longer needs the personal data for the purposes for which it was collected, it will securely destroy it in accordance with applicable laws and regulations.

#My_Luxembourg

The LCTO has set up a "Social Media Wall" through which we regularly republish on our website photographs posted on Instagram that contain the hashtag "#My_Luxembourg". The LCTO does not make any commercial use of these photographs. If you wish to object to the republication of one of your photographs, please contact us at: [email protected]

CHANGES TO THIS POLICY

LCTO reserves the right to amend this privacy policy from time to time to reflect changes in the law, our data collection and use practices, and to ensure that it is accurate, complete and up to date*.

We encourage you to review this Privacy Policy from time to time.

*Last updated on 16.07.2024