Personal data protection

Banque de Luxembourg ensures that personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

We implement all necessary measures to ensure that Banque de Luxembourg fulfils its obligations. These efforts reflect our determination to maintain the trust of the people whose personal data is processed by the Bank.

Achieving this requires ensuring a high degree of transparency in relation to data subjects.

If you have any questions regarding how your personal data is processed by Banque de Luxembourg, please contact our data protection officer (DPO):

• by email: dpo@bdl.lu
• by post: 

Banque de Luxembourg - FAO DPO
14, boulevard Royal
L-2449 Luxembourg

• or by telephone: (+352) 49 924 1

1. Personal data protection policy

This policy provides information on the approach to protecting and processing personal data applied at Banque de Luxembourg every day.

The policy contains information on the purposes of the data processing, categories of processed data, legal basis, retention period, data recipients, data subjects’ rights and the use of profiling.

2. Information on video surveillance

This notice outlines the principles we apply when using video surveillance to protect people and property, and explains how we collect, use, share, store and protect your personal data in this regard.

It sets out your rights in relation to video surveillance and how to exercise them.

If you have any questions regarding how your personal data is processed by Banque de Luxembourg, please contact our data protection officer (DPO):

 Les informations relatives aux traitements de données effectués par la Banque de Luxembourg via son site www.banquedeluxembourg.com.

3. Information on the recording of telephone conversations

This notice informs you of the principles that apply to recordings of telephone conversations made by the Bank and of your rights and how to exercise them.

4. Managing subscriptions to Banque de Luxembourg publications

Banque de Luxembourg is the controller responsible for personal data collected via the subscription forms accessible at www.banquedeluxembourg.com.

1. Purposes of the data processing

The data is processed for the purposes of managing the distribution of Banque de Luxembourg publications.

This enables Banque de Luxembourg to:

• Manage subscriptions
• Compile statistics linked to the service

2. Categories of processed data

Identification data and contact details of persons concerned

• Email address
• Surname/first name
• Title
• Number, Street, Postcode, Town, Country

3. Categories of processed data recipient

The data recipients are:

• The communications department of Banque de Luxembourg
• The IT department (database administrator) of Banque de Luxembourg

4. Retention period

Your personal data will be retained for a period not exceeding that necessary for the Bank’s intended purpose, and in accordance with the Policy.

5. Rights of persons concerned

You have the right to access data about you and obtain a copy of it (article 15 of the general data protection regulation), to have incorrect or incomplete data rectified (article 16 of the general data protection regulation), to object to the processing of your data (article 21 of the general data protection regulation), to have such data erased (subject to the conditions set out in article 17 of the general data protection regulation) and to restrict its processing (subject to the conditions set out in article 18 of the same regulation).

If you have any questions regarding how your personal data is processed by Banque de Luxembourg, or wish to exercise your rights, please contact the DPO of Banque de Luxembourg.

6. Complaints

If you believe that Banque de Luxembourg has processed your data in a manner that contravenes the general data protection regulation, you may file a complaint with the Luxembourg data protection authority (CNPD).

5. Managing invitations to Banque de Luxembourg events

Banque de Luxembourg is the controller responsible for personal data collected via the event registration forms accessible at www.banquedeluxembourg.com.

1. Purposes of the data processing

The data is processed for the purposes of managing events organised by Banque de Luxembourg.

This enables Banque de Luxembourg to:

• Manage invitations
• Manage responses
• Manage events
• Compile statistics linked to the service

2. Categories of processed data

Identification data and contact details of persons concerned

• Email address
• Surname/first name
• Title
• Postcode, Town, Country
• Personal choice if multiple options are offered in relation to the event
• Number of accompanying persons

3. Categories of processed data recipient

The data recipients are:

• The communications department and events division of Banque de Luxembourg
• The IT department (database administrator) of Banque de Luxembourg

4. Retention period

Your personal data will be retained for a period not exceeding that necessary for the Bank’s intended purpose, and in accordance with the Policy.

5. Rights of persons concerned

You have the right to access data about you and obtain a copy of it (article 15 of the general data protection regulation), to have incorrect or incomplete data rectified (article 16 of the general data protection regulation), to object to the processing of your data (article 21 of the general data protection regulation), to have such data erased (subject to the conditions set out in article 17 of the general data protection regulation) and to restrict its processing (subject to the conditions set out in article 18 of the same regulation).

If you have any questions regarding how your personal data is processed by Banque de Luxembourg, or wish to ask to exercise your rights, please contact the DPO of Banque de Luxembourg.

6. Complaints

If you believe that Banque de Luxembourg has processed your data in a manner that contravenes the general data protection regulation, you may file a complaint with the Luxembourg data protection authority (CNPD).

6. Managing initial outreach from prospects to Banque de Luxembourg

Banque de Luxembourg is the controller responsible for personal data collected via the subscription forms accessible at www.banquedeluxembourg.com.

1. Purposes of the data processing

The data is processed for the purposes of managing the distribution of Banque de Luxembourg publications.

This enables Banque de Luxembourg to:

• Contact the prospect
• Compile statistics linked to the service

2. Categories of processed data

Identification data and contact details of persons concerned

• Email address
• Surname/first name
• Title
• Postcode, Town, Country
• Personal choice if multiple options are offered
• Telephone number

3. Categories of processed data recipient

The data recipients are:

• The sales departments of Banque de Luxembourg
• The IT department (database administrator) of Banque de Luxembourg

4. Retention period

Your personal data will be retained for a period not exceeding that necessary for the Bank’s intended purpose, and in accordance with the Policy.

5. Rights of persons concerned

You have the right to access data about you and obtain a copy of it (article 15 of the general data protection regulation), to have incorrect or incomplete data rectified (article 16 of the general data protection regulation), to object to the processing of your data (article 21 of the general data protection regulation), to have such data erased (subject to the conditions set out in article 17 of the general data protection regulation) and to restrict its processing (subject to the conditions set out in article 18 of the same regulation).

If you have any questions regarding how your personal data is processed by Banque de Luxembourg, or wish to exercise your rights, please contact the DPO of Banque de Luxembourg.

6. Complaints

If you believe that Banque de Luxembourg has processed your data in a manner that contravenes the general data protection regulation, you may file a complaint with the Luxembourg data protection authority (CNPD).

7. Managing Banque de Luxembourg’s digital events

Banque de Luxembourg is the controller responsible for personal data collected in connection with the digital events it organises.

1. Purposes of the data processing

The data is processed for the purposes of managing the distribution of Banque de Luxembourg publications.

This enables Banque de Luxembourg to:

• limit digital event access to only the participants who are invited to participate
• disclose the identity of participants to all event participants

2. Legal basis for the processing

Processing is necessary for the purposes of the legitimate interests pursued by the Bank.

3. Categories of processed data

Identification data and contact details of the data subjects:

• Surname
• First name
• Email address

4. Source of processed data

Data is collected upon registration to the workshop.

5. Automated decision-making

Automated decision-making is not used to process the data.

6. Data subjects

Participants registered for the event organised by Banque de Luxembourg.

7. Categories of processed data recipient

The data will be transferred to the Webex platform for technical purposes in order to enable participants to connect to the workshop.

8. Retention period

The images and discussions are not recorded and will not be used at a later date.The data is only retained for the duration of the event and is deleted immediately after the event.

9. Data security of event participants

Data security is compliant with state of the art practices in this area and meets the requirements of the Bank’s security policy.

10. Rights of data subjects

Event participants have the right to access the data relating to them and to obtain a copy thereof, to rectify inaccurate or incomplete data, to object to the processing of their data, to have it erased and to restrict processing.If you have any questions regarding how your personal data is processed by Banque de Luxembourg, or wish to exercise your rights, please contact the DPO of Banque de Luxembourg (dpo@bdl.lu) .

11. Complaints

If you believe that Banque de Luxembourg has processed your data in a manner that contravenes the general data protection regulation, you may file a complaint with the Luxembourg data protection authority (CNPD).