GDPR

The University of Luxembourg Competence Centre is the Data Controller for the processing of personal data communicated by candidates when registering for a course organised by the Competence Centre. The personal data are processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, entitled the General Data Protection Regulation ("GDPR"), with applicable laws and -/- or regulations as well as with the terms of this contract.

The Competence Centre has appointed a Data Protection Officer (DPO). MGSI S.à r.l. has been appointed to this role. Its registered office is located in Luxembourg, Wintrange, 52a route du vin L-5495.

The data concerned are those directly provided by the participants via the registration form. In addition to this data, the Competence Centre records attendance at training courses, results of tests, examinations plans as well as certificates obtained. The type of personal data involved therefore varies depending on the type of course you have registered for, as different courses might require different information. When you participate in one of our activities, you are informed that we may take photos, film or make a sound recording. You can then, if necessary, be visible on these images and/or voice recording.

The processing of the participant personal data is carried out for the purposes of the organisation, administration and management of the course in which the participant is involved (certificate, test scores, attendance sheet). Some data are collected for statistical purposes. Photos and videos of the participant can be used as part of the training. These can be broadcast by the Competence Centre on training platforms, its website or social networks.

The processing of your personal data is based on article 6.1.b (performance of a contract), Article 6.1.e (public interest mission of Data Controller) and Article 6.1.f (legitimate interest of the Data Controller) of the GDPR.

Your personal data may be passed on to persons outside the Competence Centre, in particular to administrative centre, the Competence Centre's partner institutions and trainers in connection with the organisation of training courses. Please be aware that when the Competence Centre communicates about an event in various media and social networks, or even in its own publications, your image may be visible to the general public. In addition, the Competence Centre uses MailChimp as an automatic marketing platform. The information you have provided is therefore transferred to MailChimp, which processes it in accordance with its privacy policy, which you can view here.

The Competence Centre shall store personal data in order to meet the legal requirements applicable concerning: - documents produced by the participants and attendance certificates : 3 years; - accounting and taxation: 10 years; - certificate and results of exams: 10 years.

Please find below the list of your rights.

In terms of data protection, the participant has the possibility of exercising a right of access. This right of access takes the form of a written request to the Competence Centre via the address dpo@competence.lu, enclosing a copy of a valid identity document which will be destroyed as soon as the request has been processed. The Competence Centre communicates to the participant a statement of the personal data at its disposal with the precision of the purpose, the duration of data conservation, and if necessary with the precision of the source of the data and that of a possible transfer to a third party.

The participant has the right to request that inaccurate data concerning him be subject to correction. Such a request must be sent to the Competence Centre via the email address dpo@competence.lu, enclosing a copy of a valid identity document which will be destroyed as soon as the request has been processed.

The participant has the right to request the erasure of data concerning him in the following cases:

• if the latter considers that these data is no longer necessary regarding the purpose(s) for which they were collected and / or processed;
• if the processing of data is based on the sole consent of the participant and this consent is withdrawn;
• if the participant justifiably exercises his right of objection for a reason related to his particular situation and the Competence Centre has no compelling legitimate reason to assert;
• if the participant considers that his personal data is processed unlawfully by the Competence Centre;
• if the participant's data must be deleted in order to comply with a legal obligation to which the Competence Centre is subject to.

The request of the candidate / participant should be sent to the Competence Centre via the email address dpo@competence.lu, enclosing a copy of a valid identity document which will be destroyed as soon as the request has been processed. For its part, the Competence Centre may oppose the participant's request:

• if the processing of personal data is necessary by the law;
• if the processing of personal data is carried out for scientific or historical research purposes or for statistical purposes when their erasure would risk making it impossible or seriously jeopardizing the achievement of the purposes of said processing;
• if the Competence Centre should need it for the purpose of exercising its legal rights.

The participant has the right to request the limitation of processing in the following cases:

• if the participant disputes the accuracy of his data, the limitation thus operating the time necessary to verify the accuracy of the data;
• if, in the event of unlawful processing, the participant himself opposes the erasure of his data, and alternatively requests the limitation of his data;
• if the Competence Centre no longer need their data but the participant needs it for the establishment, exercise or defense of his legal rights;
• if the participant has objected to the processing for a reason related to his specific situation, the time necessary to verify whether the legitimate grounds pursued by the Competence Centre prevail over those of the participant.

The participant's request must be sent to the Competence Centre via the email address dpo@competence.lu, enclosing a copy of a valid identity document which will be destroyed as soon as the request has been processed.

The participant has the right to object to the processing of his data for the following reasons:

• for reasons related to its specific situation, unless the Competence Centre demonstrates that it has legitimate and compelling reasons for the processing of the data of the candidate / participant concerned which prevail over the interests of the candidate / participant or if the Competence Centre has the need in order to establish, exercise or defend his legal rights;
• if the processing is carried out for prospecting purposes by the Competence Centre.

The request of the candidate / participant should be sent to the Competence Centre via the email address dpo@competence.lu, enclosing a copy of a valid identity document which will be destroyed as soon as the request has been processed.

When the processing of the participant's personal data is based on the latter's consent, the participant has the right to withdraw his consent at any time. The Competence Centre will cease all use of the participant's personal data; the participant's personal data will be destroyed. The participant's request must be sent to the Competence Centre via the email address dpo@competence.lu, enclosing a copy of a valid identity document which will be destroyed as soon as the request has been processed.

The participant has the right to lodge a complaint with the National Commission for Data Protection (CNPD); For more information, the candidate / participant can refer to the CNPD website www.cnpd.public.lu.

When the processing of personal data is based on consent or is necessary for the possible performance of a contract concluded with the Competence Centre and the processing of data is carried out by the Competence Centre through automated processes, the participant has the right to receive personal data available to the Competence Centre in a structured, commonly used and machine-readable format, so that it can be transmitted to another data controller. The participant may also request the Competence Centre to transmit his personal data directly to another data controller, providing that this is technically possible. The participant's request must be sent to the Competence Centre via the email address dpo@competence.lu, enclosing a copy of a valid identity document which will be destroyed as soon as the request has been processed.