Website Privacy Notice

We may process various types of personal data about you, including: 

-personal identification data (name, birth date,…)

- contact details (email address, postal address,…) 

- electronic identification data (cookies, information concerning the name of the domain and host from which you access the internet, the browser software and operating system of your computer, the IP address of your computer,...) 

- your family status, the composition of your household 

- your bank details; 

- your purchase history. 

In some cases, the personal data that we collect will also include special categories of data, such as health data or criminal record as a part of the selection process, if justified by the requirements of the job description and where permitted by law.

We only share your personal data with third parties when necessary and in accordance with the law. These third parties may include our IT service providers and other similar services to enable them to provide their services. 

Recipients of your personal data may be located within the European Economic Area ("EEA") as well as outside the EEA. When Personal Data is communicated to recipients located in a country outside the EEA which does not offer an adequate level of protection for personal data, data transfers to the latter are carried out based on mechanisms provided by the data protection legislation. 

Unless a longer retention period is required or permitted by law, your personal data will be stored for a period that is strictly necessary to achieve the purposes for which it was collected. 

Personal data processed in response to your information request may be stored for up to 2 years after the end of our relationship or up to 10 years if it concerns accounting data. 

Cookies and managed by us will be stored for no more than 13 months from the collection.

In accordance with the applicable data protection law (and subject to conditions and restrictions set forth therein), you may exercise at any time the following rights in relation to your personal data: 

• right of access: which enables you to obtain from us confirmation of whether your personal data is being processed or not and, if so, obtain access to such data; 
• right to rectification: which enables you to obtain from us the correction of any of your personal data; 
• right to erasure: which enables you, in certain specific cases to obtain from us the erasure of your personal data; 
• right to restriction of processing: which enables you, in certain specific cases to restrict the processing of your personal data by us; 
• right to object: which enables you to object to the processing of your personal data when certain conditions are met; 
• right to data portability: which enables you, in certain cases (subject in particular to technical feasibility and only with regard to the data you have provided) to request receipt of your personal data in a structured and commonly machine-readable format; 
• right to lodge a complaint: under which you are entitled to lodge a complaint with the the CNPD; 
• right to withdraw your consent at any time: you can withdraw your consent at any time when the processing activity is based on your consent. 

To exercise any of these rights, you may contact us: 

• by email: dataprotection@st-georges.lu 
• by postal mail: 11 rue des Peupliers, L-2328 Luxembourg.