The University of Luxembourg is committed to the protection of your personal data in accordance with data protection legislation especially the General Data Protection Regulation EU 2016/679. The aim of this Data Protection Notice is to inform you about which personal data we collect, the reasons why we use such data, how long we keep it, what rights do you have, and how you can exercise them in relation to the Scienteens Lab platform.

The University of Luxembourg is responsible as data controller, for collection and processing of your personal data in relation to the Scienteens Lab platform.

The University of Luxembourg is a public higher education and research establishment, operating under the supervision of the Ministry for higher education.

The University of Luxembourg has its official address at:
MAISON DU SAVOIR
2, avenue de l’Université
L- 4365 ESCH-BELVAL
Phone number: Tel.: (+352) 46 66 44 1
Internet address: https://wwwen.uni.lu/university

The University has appointed a DPO: reachable during working hours. Further information is provided on https://wwwen.uni.lu/university/data_protection and an email address is available: dpo@uni.lu

We process your personal data for the following purposes:

• To organise efficiently the different workshops
• To create the different accounts (student/ teacher)
• To deliver your certificate if you have completed and passed the workshop.

Please keep in mind that the platform is only used to reserve a spot in a workshop.

We process your personal data for the purposes listed in section 2. We will process various types of personal data depending on your status (student/ teacher), including:

• Students (self-registration): name, surname, login credentials, email address, telephone number and year of birth.
• Teachers: name, surname, login credentials, email, telephone number.
• Students (registered by their teacher): name and surname.

We process your personal data on the following legal basis in accordance with the GDPR:

Article 6 (f) GDPR: the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The University of Luxembourg has a legitimate interest in organising its educational courses and provides a booking platform to achieve this purpose. There is also a legitimate interest for students in attending the workshops in the course of their studies.

In order to fulfil the aforementioned purposes, your personal data will be shared internally with the organising team of the Scienteens Lab.

In addition, the University operates the Scienteens Lab booking platform through a data processor. Marc Wilmes Design S.à.r.l (MWD), is acting as data processor in relation to the hosting of the platform. Further information on MWD can be found below:

Marc Wilmes Design S.à.r.l
126, avenue de la faïencerie
L-1511, Luxembourg
Luxembourg

Your Personal Data will be processed within the European Union and your personal data will be hosted by the provider mentioned above.

The Personal Data provided by you are kept for a duration of 18 months after the finalisation of your course delivery of certificates, feedback and the University’s statistical and reporting purposes.

According to the GDPR, you benefit notably from the following rights: right to be informed, right to access to your personal data, right to rectification, right to erasure, right to restrict the scope of the processing, right to object, right to data portability, right to lodge a complaint. The University provides further information on its website page: https://wwwen.uni.lu/university/data_protection/your_rights.

In practice, you can exercise your rights by contacting our DPO:

• By sending a request per post to:
  Université du Luxembourg
  À l’attention de: DPO – Exercise of Data Subject rights
  Maison du Savoir
  2, Avenue de l’Université
  L-4365 ESCH BELVAL

Or

• By sending a request per email to the DPO, at dpo@uni.lu

Any request shall be processed by the University of Luxembourg without undue delay, and where feasible no later than one (1) month after its receipt, at least in order to inform you about the status of your request. This period may be extended for two (2) additional months for complex cases or due to a high volume of requests.

If you consider that the Processing of Personal Data relating to you infringes the GDPR, you will have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
In Luxembourg, the competent authority is the Commission Nationale pour la Protection des Données (CNPD).

Contact of the CNPD:
Commission Nationale pour la Protection des Données
1, avenue du Rock’n’Roll
Service des réclamations
L-4361 Esch-sur-Alzette
Tel. : (+352) 26 10 60 -1
Fax : (+352) 26 10 60 -29

You can also use their contact form, at: https://cnpd.public.lu/fr/support/contact.html

The present Notice shall be governed and construed in accordance with the Luxembourgish law.

Any dispute concerning the existence, interpretation or performance of this Notice which cannot be settle amicably, shall fall within the jurisdiction of the Courts of Luxembourg City, without prejudice to the rights of the Data Subjects to bring the matters before the court where he or she has her place of residence as well as its right to lodge a complaint with the supervisory authority.