1. Data Protection Officer

The Data Protection Officer within the meaning of the General Data Protection Regulation is:

CIGR WILTZ Plus a.s.b.l.
Legal form: non-profit organization (ASBL)

26, Grand-Rue
9530 Wiltz
Luxembourg

dpo@wiltz.cigr.eu
+352 26 95 22 1

2. Types of personal data collected

We collect and process personal data only to the extent necessary for the use of our website or to fulfill legal obligations. This includes, in particular, the following data:

• Last name, first name
• Email address (for example, for contact forms or newsletters)
• IP address and technical data (for example, browser type, operating system, access times)
• Cookies and tracking data (see the Cookies section)
• Interactions with embedded content (for example, YouTube, Vimeo, Google Maps)

3. Purpose and legal basis for data processing

We process personal data for the following purposes:

• Provision and operation of the website
  Legal basis: Art. 6, para. 1, point b of the GDPR (contract / provision of the website)
• Contact / inquiries
  Legal basis: Art. 6, para. 1, point a of the GDPR (consent) or point b (contract / response to an inquiry)
• Analysis of user behavior / website improvement
  Legal basis: Art. 6, para. 1, point f of the GDPR (legitimate interest)
• Marketing / newsletter (if applicable)
  Legal basis: Art. 6, para. 1, point a of the GDPR (consent)

4. Cookies and Tracking

Our website uses cookies, web beacons, and similar technologies.

• Technically necessary cookies: for the operation of the website.
• Preference / statistics cookies: for analysis and optimization.
• Marketing cookies: for personalized content and advertisements.

You can change your cookie settings at any time via the cookie banner or in your browser.

5. Embedded Content / Third-Party Content

We integrate content from third-party providers on our website, for example:

• YouTube videos
• Vimeo videos
• Google Maps
• Social media feeds

The use of this content may result in the transfer of data to the relevant third-party providers (for example, IP address, interaction data).
If you are logged into these platforms, providers may associate your behavior with your account.

You will find more details in the privacy policy of the relevant third-party providers and in our cookie policy.

6. Analysis and Statistics Tools

We use, where applicable:

• Google Analytics or similar analysis tools
• Heat maps / traffic statistics

These tools collect anonymized data (where applicable, pseudonymized IP addresses) in order to optimize our website.
You can refuse this collection by not accepting cookies or by using the corresponding opt-out options.

7. Transmission of data to third parties

Personal data is only transmitted to third parties in the following cases:

• when required by law (for example, tax or retention obligations)
• when necessary for the execution of the contract (for example, payment service providers)
• you have given your explicit consent

A transfer to third countries outside the EU only takes place if an adequate level of data protection is guaranteed.

8. Data storage / retention period

We retain personal data only for the duration necessary for the intended purposes:

• Contact forms: max. 3 years after the last contact
• Newsletter: until unsubscription
• Analysis data / cookies: depending on the duration of the cookies (see Cookie Policy)
• Legal retention obligations (for example, accounting) remain unchanged.

9. Your rights under the GDPR

You have the right:

• to obtain information about the processed data;
• to rectify inaccurate data;
• to delete data (“right to be forgotten”);
• to restrict processing;
• to transfer your data;
• to object to processing;
• to withdraw your consent.

To exercise your rights, please contact: dpo@wiltz.cigr.eu

10. Right of appeal

If you believe that the processing of your personal data violates the GDPR, you may file a complaint with:

National Commission for Data Protection (CNPD)
1, avenue du Rock’n’Roll
L-4361 Esch-sur-Alzette
Luxembourg
Website: https://cnpd.public.lu

11. Data Security

We take technical and organizational measures to protect your data against:

• loss
• misuse
• unauthorized access
• modification.

Despite all security measures in place, 100% security cannot be guaranteed on the Internet.

12. Changes to this Privacy Statement

We reserve the right to update this privacy statement at any time.

You will always find the current version on this page.