Recherche

Companies or administrations must give you these elements in clear and plain language at the same time as the collection of your data or, at the

Further processing of personal data Where the processing for a purpose other than that for which the personal data have been collected is not based on

Processing operations carried out by the CNPD through the forms on its website (cnpd.public.lu) The National Data Protection Commission (CNPD) will

Processing of sensitive data Where your processing operations involve "sensitive data", special conditions may apply (examples: a data protection

Records of processing activities As a controller, you shall maintain a record of processing activities under your responsibility. Similarly, your

Before data may be processed by the controller, a number of conditions of lawfulness must be met to ensure an adequate protection of privacy. When you

The data subject's consent is one of the conditions processing operations can be based in order to be lawful. The provisions concerning the conditions

In order to be lawful, the processing operations must be based on one of the following conditions: The data subject has consented to the processing of

Since 25 May 2018, the General Data Protection Regulation imposes stricter accountability obligations on private and public actors. You will be

Security of personal data Both you and your processors shall implement appropriate technical and organisational measures to ensure a level of security

Only choose processors that provide sufficient guarantees to ensure the protection of the personal data processed. Conclude a contract that sets out

To demonstrate your compliance with the Regulation, you must maintain the necessary documentation. To continuously ensure the protection of the

International transfers of personal data If the European Commission does not recognise the country to which you are transferring personal data as

Data Protection Impact Assessment If you have determined that the processing is likely to result in a high risk to the rights and freedoms of data

Comply with the rights of data subjects The General Data Protection Regulation grants certain rights to individuals and defines their conditions and

Privacy by design and privacy by default Privacy by design means implementing appropriate security measures at the earliest stages of the development

The right to restriction of processing You notice that information concerning you is inaccurate or irrelevant. Instead of requesting the erasure of

You are visting a search engine (Google, Bing, Yahoo etc.) and, when you enter a combination of your first and last name, you find a search result

Data Protection Officer (DPO) The Data Protection Officer (DPO) has an important role in the legal framework created by the General Data Protection

If you have noticed that personal data concerning you is inaccurate, incomplete or simply not up to date, you can request to rectify it. If contacted,