Protection of personal data – GDPR (General Data Protection Regulation)

1/ Collection and processing of personal data

The Company Eivilux Sarl-S is the data controller within the meaning of Regulation (EU) 2016/679 known as the General Data Protection Regulation or GDPR, for the collection and processing of personal data carried out on this website, hereinafter the Site. This Data Protection Policy explains how personal information is obtained, stored and used when you interact with our websites.

• Company: Eivilux Sarl-S
• Address: 1, rue de Turi, L-3378 ROESER (Luxembourg)
• Telephone: +352 691 1977 22
• Director of publication: Mrs. Celine CAMPI-BLAIN

“Personal Data” means any information that can be attributed to you, such as your name, postal address or e-mail address.
Eivilux Sarl-S is responsible for the personal data collected as data protection officer and therefore determines the purpose and methods of storage.

2/ General information on data processing

We only process users’ personal data in accordance with relevant data protection regulations, in accordance with data minimization and data prevention requirements. This means that user data is only processed if a legal permission exists, in particular if the data for the execution of our contractual achievements as well as online services is required, or prescribed by law or in the presence of a consent.

Personal data is processed for the following purposes based on legal permissions or user consent:
– The provision, execution, maintenance, optimization and securing of our services
– Provide effective customer service and technical support

3/ Data collection

3.1 Contact forms and email contacts

Contact forms that can be used for electronic contact are available on our sites. By clicking on the “Send” button, you agree that the data entered in the input mask will be transmitted to us.

You can also contact us via the email address provided. In this case, the user’s personal data transmitted by e-mail and our response will be stored. The personal data voluntarily transmitted to us in this context enables us to process your request and contact you.

The legal basis for the transfer of data is Art. 6 para. 1, point a of the GDPR. We use the data for this purpose until the conversation with you is over. The conversation is over when it can be inferred from the circumstances that the facts in question have finally been clarified.

3.2 Use of subcontractors for platform hosting and security, administrative services, troubleshooting and support.

We use subcontractors to provide our services. The legal basis for the use of these processors is a legitimate interest according to Art. 6 para. 1, point f of the GDPR. The legitimate interest is the pursuit of our business purposes, in particular for the provision of the services otherwise described in this Data Protection Statement. No conflict of interest is apparent, as we have entered into a contract with the relevant processors in accordance with Art. 28 GDPR.

3.3 Data processing for contract management and preparation purposes

We process personal data in order to carry out contract management, i.e. to enable us to provide our customers with the services covered by the contract and to prepare the corresponding contracts.

If the customer is a natural person, the legal basis is that the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 para. 1, point 1 b GDPR.

If we process personal data of customer employees, the legal basis is a legitimate interest under the terms of Art. 6 para. 1, point 1 f GDPR. The legitimate interest lies in the performance of our business activities and those of the customer. There is no conflict of interest on the part of the data subject insofar as the processing by us within the framework of the existing employment relationship with the data subject or for a legitimate interest is already necessary from the point of view of our client. For this purpose, we store personal data for the duration of the contract.

3.4 Advice to clients

We process personal data received in the context of a contract or a request from an interested party of the customer or an interested party or its employees as contact persons, including after the end of the contract or , if no contract is concluded, in order to advise the customer and to be able to recommend appropriate services on the basis of previous contracts or inquiries in the event of a new request from the customer or the interested party.

The legal basis is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR. The legitimate interest lies in the performance of our business activities. For this purpose, we store personal data for as long as we assume that the customer concerned can conclude a new or first contract with us in the future, which is the case until the customer concerned declares to us that he will not enter into a contract with us under any circumstances.

3.5 Data processing for the publication of advertisements products

If our clients post advertisements or company portraits on our site, we process the personal data of the client if the client is a natural person, if our client provides contact data of an employee in an advertisement, we process his personal data to make it available to our users on our platform as part of the advertisement and to enable the advertisement to be found on our platforms using the search function.

In order to broaden the impact of the announcement by forwarding it to our partners, we may send all or part of the content of the announcement to those of them who publish the announcement or a preview of it on their website.

3.6 Data processing for general advertising purposes

We process the personal data of our customers as well as other entrepreneurs and companies that do not have a business relationship with us and, where applicable, also contact persons for the purposes of direct prospecting, within the limits permitted by the law.

If we have not collected this data directly from the data subject, we may also obtain contact data of the data subject from public sources, such as, in particular, the website of the company concerned, directories commercial or contacts published by the company. Within the framework of these direct prospecting objectives, we can also take into account the previous contracts concluded by our customers and the specificities of the company, such as the sector to which it belongs or the size of the company/entrepreneur concerned, in order to design the ad in the most appropriate way possible.

The legal basis is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR. The legitimate interest lies in the processing of personal data for direct marketing purposes (see recital 47 GDPR). Data subjects have the right to object at any time to the processing of personal data concerning them for prospecting purposes.

You can report this opposition at any time under the contact data specified in point 1, in the case of prospecting by e-mail, an Opt-Out link is present in the e-mail itself.

We store the data for this purpose as long as we are interested in concluding a contract with the respective company or until an objection has been made.

3.7 Processing based on consent

Where you have consented, we collect and use the following information about you:

Contact details
We use your contact details to contact you in order to answer your questions, to send you information within the framework of the services and to send you marketing information (provided that you have consented to this, insofar as you send your information and provided you have not opted out of our list).

How you use our services
We collect information about the web pages you have visited and your activity on our sites. We collect this information to enable us to determine which parts of our website are most visited and useful in order to identify and improve our most popular services.

Advertising/Email Communications
Eivilux Sarl-S will share with you, on our websites or by e-mail, information concerning the services offered by Eivilux Sarl-S within the framework of its services.

Uses for legal reasons
To respond to legal requests or to prevent fraud, we may need to disclose information or data about you that we have. If we receive a legal request, we may need to inspect the data in our possession to determine how to respond.

4/ Technical Administration

Your personal data is used exclusively for the purposes of the technical administration of the websites, to operate and maintain our services and to ensure their full functionality, to provide you with technical support and to give you access to special information, or for general communications with you. We use this information to understand and analyze usage trends and preferences of our visitors and users.

We have taken appropriate steps to ensure that we impose very clear limitations and that only information necessary to satisfy those legitimate interests is used.

We process your personal information under the following categories of data and on the basis of legitimate interest:

Device data

We collect device and browser information from you to troubleshoot website functionality issues and to fix bugs.

Log data

We use Log Data for various management purposes, to do the following:
Fix bugs and resolve product functionality issues.

Cookies and audience measurement

We use cookies for our websites. Cookies are text files that are stored on a computer system via an Internet browser. We use these cookies both as a technical means for the provision of services on our platforms and for the analysis of the behavior of our visitors on the websites and, on this basis, to improve the user-friendliness of our offers. We may also use other techniques for this purpose, such as tracking pixels or a code in the apps. We may also use these cookies or other techniques to send you targeted job postings and other content of interest to you.

Cookies are pieces of information transmitted from our web server or third-party web servers to users’ web browsers and stored for later retrieval. The use of cookies as part of the pseudonymous range measurement informs users in the context of this privacy policy.
The consideration of this online offer is also possible with the exclusion of cookies. If users do not want cookies stored on their computer, they will be prompted to disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies may lead to functional restrictions of certain online offers.

5/ Transfer to third parties

Eivilux Sarl-S may share your personal data with its third party service providers such as IT service providers, to provide you with high quality services.

Third parties, acting in our name and on our behalf, will receive your personal information, but only for the specific purposes assigned to them. Eivilux Sarl-S ensures that these third parties have the same legal obligations with regard to the protection of your personal data and considers them responsible for any possible breach of confidentiality, the obligation to respect private life or the security.

We enter into confidentiality and data processing agreements with partners to ensure that they adhere to high levels of confidentiality and best practices with respect to privacy and security standards, and we regularly review these standards and practices.

We also need to share information or data to:

Respond to any applicable law or regulation, or any legal process or other request from the authorities.
Enforce relevant policies, including investigating possible violations.
Detect, prevent or otherwise confront fraud, security breaches or technical problems.
Provide protection against harm to the rights, property or safety of users and the public, as permitted or required by law.

With respect to non-personally identifiable information, we may share it with interested third parties to help them understand the patterns of use of our services and those of our partners. This non-personally identifiable information is anonymous usage data, such as platform types, number of clicks, exit pages, etc. Additionally, non-personally identifiable information may be stored indefinitely.

6/ Integration of third-party services and content

Content or services from third-party providers, such as maps or fonts from other websites, may be included in our online site.

The inclusion of content from third-party providers always requires the third-party providers to perceive the IP address of users, as they cannot send the content to users’ browser without the IP address.

The IP address is therefore required for the presentation of this content. Additionally, third party content providers (e.g. Google Maps, social networks such as LinkedIn) may set their own cookies and process user data for their own purposes. In the process, user profiles can be created from the processed data.

Links to other websites

Our websites may contain links to other providers to which this Privacy Policy does not apply. When you leave one of our websites, find and read the privacy statements of each website that collects personally identifiable information. We are not responsible for the content or privacy and security practices or policies of any third-party sites or services to which links or access are provided through our websites. We encourage you to learn about the privacy and security policies of third parties before disclosing information to them.

If you use the functionality of social media plug-ins such as those provided by LinkedIn, Twitter, Facebook Inc. or any other social network, they may log your IP address and, if you are logged into your account while you visit our website, the two pieces of information will be linked. The plug-in will create a direct link between your browser and the servers of that social networking company.

We have no influence on the nature and amount of data that the module will transmit to these servers.

7/ Right of access to your personal data

You have a right to access, rectify or erase personal data concerning you, and, where applicable, a right to the portability of your data.

You can request the limitation or oppose the processing of your data, or if necessary, withdraw your consent.

You can exercise these rights by writing to the following address:

EIVILUX
Place called “The Mill”
Altwies

or by email at the email address: info@eivi-lux.com

8/ Changes to our legal notices and GDPR

We reserve the right to modify our legal notice and Personal Data Protection in order to adapt them to changed legal situations, or to changes in the service and data processing.

This only applies to data processing declarations. If user consent is required or if elements of the privacy policy contain provisions of the contractual relationship with users, changes will only be made with the consent of users.

Users are requested to regularly inform themselves of the content of the legal and GDPR notices.

Date of Revision: June 27, 2019