Sect. 1 General
We will process your personal data (e.g. title, name, address, e-mail address, phone number) solely in accordance with the provisions of Luxembourg data protection law (loi du 1er août 2018) and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.
Sect. 2 Contact us
(1) Purpose of data processing
Your personal data you provide us by e-mail, contact form etc., will be processed to answer your inquiries. You are not obliged to provide us with your personal data but we would not be able to answer your inquiries sent by e-mail without your e-mail address.
(2) Legal basis
a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 (1) (a) of the GDPR.
b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 (1) (b) of the GDPR.
c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.
You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.
In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.
(3) Legitimate interest
Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-effectively. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).
(4) Recipient categories
Provider of hosting
(5) Duration of storage
Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified.
However, if a contract is concluded, the data required by commercial and tax law will be retained by us for the periods as required by law, i.g. generally for ten years (cf. Article 16 Code de commerce).
(6) Right of revocation
You have the right to revoke your consent for processing at any time in compliance with your consent.
Sect. 3 More information
Server log files
(1) Purpose
When you access this website, the web server automatically records access data (IP address, date and time, page requested, amount of data transferred, browser type and version, operating system, referring page). This data is used to operate the website securely and reliably and to investigate malfunctions and attacks. It is not combined with other data or evaluated for marketing purposes.
(2) Legal basis
Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
(3) Retention
Log files are deleted after 30 days at the latest, unless they are needed for longer to investigate a security incident.
Consent bar and cookies
(1) On your first visit, a bar at the bottom of the screen lets you decide whether external content (currently only the OpenStreetMap map on the contact page) may be loaded. You can choose "Accept all", "Necessary only" or "Settings". External media are disabled by default; the website can be used without restriction even if you do not consent.
(2) This website sets only the following first-party cookies: "_leoniq_session" - technically necessary for the session and to protect the forms against misuse (CSRF); deleted when you close your browser; "leoniq_consent" - stores your decision on external content, contains only the selected categories and no identifier, is set only once you make a decision, lifetime 6 months. No analytics, tracking or advertising cookies are used.
(3) Legal basis
Art. 6(1)(f) GDPR (legitimate interest in a functioning website and in documenting your consent decision) in conjunction with the Luxembourg loi modifiée du 30 mai 2005.
OpenStreetMap map (contact page)
(1) Purpose
The contact page can embed a map provided by OpenStreetMap, operated by the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Without your consent nothing is loaded and no data - not even your IP address - is transmitted to the OpenStreetMap Foundation; instead you see a placeholder with a notice. Only when you consent via the consent bar (category "External media") or via the "Load map" button on the placeholder does your browser load the map tiles from the OpenStreetMap Foundation's servers. Your IP address is transmitted in the process.
(2) Legal basis
Art. 6(1)(a) GDPR (consent).
(3) Third-country transfer
Data is transferred to the United Kingdom, for which an adequacy decision of the European Commission is in place.
(4) Withdrawal
You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer of the website. The withdrawal takes effect immediately; the map will then no longer be loaded.
Applicable law and supervisory authority
The controller is Leoniq S. à r. l., established in Luxembourg. In addition to the GDPR, the Luxembourg Data Protection Act (loi du 1er août 2018) and the loi modifiée du 30 mai 2005 on cookies and electronic communications apply. The competent supervisory authority is the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, www.cnpd.lu.
Sect. 4 Information about cookies
(1) Purpose of data processing
This website uses technically necessary cookies. These are small text files that are stored for a short period in or by your Internet browser on your computer system and only serve the functionality of the website. Other cookies remain stored permanently and recognize your browser on your next visit to improve the usability of the website.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality and usability of our website. The user data collected by technically necessary cookies and long term cookies are not used to create user profiles to preserve your interest in data protection.
(4) Duration of storage
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.
(5) Right of revocation
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website.
Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.
Sect. 5 Your rights as a data subject
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:
1. Right to information
You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.
2. Right to rectification
If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.
3. Right to erasure
You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.
4. Right to restriction of processing
You have the right to restrict the processing your personal data under Article 18 of the GDPR.
5. Right to data portability
You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
6. Right to revoke the consent given under data protection law
You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.
7. Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement).
Please also note your right of objection under Article 21 GDPR:
a) In general: reasoned objection required
If the processing of personal data concerning you takes place in order
- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)
- to safeguard the public interest (legal basis: Article 6 (1e) GDPR),
you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;
b) Special case of direct marketing: simple objection is sufficient
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Responsible for data processing:
Leoniq S. à r. l.
7, Zone d’activités Grousswiss
L-6833 Biwer
Phone: +352 283 369 01
michael.loeb@leoniq.lu