General Data Protection Regulation (GDPR) – Data Protection Web Policy

LuxXPrime is a trading window created and managed by the Luxembourg Stock Exchange (“LuxSE”). LuxSE is dedicated to deal with and process your Personal Data (as defined in point 1 below) with due care, in confidence and in accordance with the requirements of the General Data Protection Regulation.

1. Data Protection – Key definitions and principles

Data controller: the person or entity that determines the purpose and means of the processing of the Personal Data.

GDPR: the General Data Protection Regulation (EU) 2016/679 is an EU regulation on personal data protection and privacy. GDPR achieves the uniformity in the data protection rules applicable to all individuals within the European Union.

Personal Data: any information related to an identified individual or that may allow to directly or indirectly identify an individual (e.g. name, phone number, job title). Personal Data does not include any information or data related to legal entities (e.g. investment funds, securities issuers…). Processing:  any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means (e.g. collection, recording, organization, storage, consultation).

You: the person who uses or is using LuxXPrime’s website.

2. Scope of Policy

The present Data Protection Web Policy (the “Policy”) does not apply to any processing of your Personal Data by LuxSE when you are a client, a commercial counterparty, a provider or supplier, an employee or any person with who LuxSE has established or is in the process of setting up any contractual, legal or commercial relationship.

The Policy only explains how and why LuxSE collects and uses your Personal Data when:

  • You use LuxXPrime’s website (the “Website”) or any functionalities or request form available on the Website; and
  • You request the sending of communications or invitations from LuxSE.

 

In both cases, LuxSE acts as data controller. 

3. Processing of your Personal Data

3.1 Use of the Website

When you use the Website or any functionality of it, LuxSE collects and processes your Personal Data as follows:

  • Collection of your Personal Data: Your Personal Data are collected through cookies (text files which are stored on your computer by your browser), through the information received from your browser, and/ or when you log in to dedicated or personalized pages of the Website.

  • Personal Data collected by LuxSE: LuxSE will collect your IP address, the pages of the Website you visit, the duration and time of your visit as well as in some cases (e.g. log in to dedicated pages), your name, address, phone number and/or email address.

  • Ground for the processing of the Personal Data: LuxSE collects and processes the Personal Data for legitimate interests (e.g. monitoring of its website, security, identification of users…).

  • Processing of your Personal Data: LuxSE will process your Personal Data for:
  • Obtaining statistical data about the use and access volume of the Website so as to improve the quality and efficiency of LuxSE’s services and create a better experience by enhancing functionalities and by reaching a better user-friendliness level,
  • Manage and operate the Website,
  • Allow you to access dedicated webpages; and
  • Make your access to dedicated webpages faster and easier.

 

Any further use of your Personal Data, out of that context, will require another specific consent.

3.2 External communications and invitations

When you request the sending of communications and/ or invitations by LuxSE, LuxSE collects and processes your Personal Data as follows:

  • Collection of your Personal Data: LuxSE will collect your Personal Data when you complete the subscription/ request form for receiving communications and/ or invitations from LuxSE (according to your preferences). LuxSE may also collect data when tracking the receipt or consultation of the external communications.

  • Personal Data collected by LuxSE: LuxSE will solely collect the data you provide when completing the subscription/ request form that is to say your name, first name, job title, email address, the name of your company and in some cases your phone number(s) (as the case may be). You do not have any obligation to provide whole of the above information and may decide, at your own discretion, to disclose only part of the requested information.

  • Ground for the processing of the Personal Data: LuxSE collects and processes the Personal Data as a result of the consent given by you when you asked for receiving LuxSE’s communications.

  • Processing of your Personal Data: LuxSE will process your Personal Data for the sole purpose of sending you communications and/ or invitations (according to your preferences).

 

Any further use of your Personal Data, out of that context, will require another specific consent.

3.3 Sending of requests to LuxSE by mean of the contact form

  • Collection of your Personal Data: LuxSE will collect your Personal Data when you complete the contact form.

  • Personal Data collected by LuxSE: LuxSE will collect the data you provide when completing the contact form that is to say your name, first name, job title, email address, the name of your company, your phone numbers as well as the contact of your request. You do not have any obligation to provide whole of the above information and may decide, at your own discretion, to disclose only part of the requested information. 

  • Processing of your Personal Data: LuxSE will process your Personal Data for the sole purpose of handling your request and provide you with an appropriate answer. Such answer may be, when appropriate, an offer or solicitation to subscribe to services supplied by LuxSE.

 

Any further use of your Personal Data, out of that context, will require another specific consent.

4. Storage of your Personal Data

LuxSE takes reasonable and appropriate technical and organizational security measures in order to:

  • Store your Personal Data in secure databases or systems with restricted access,
  • Protect your Personal Data against loss, accidental or intentional misuse, alteration, destruction and access by unauthorized persons.

 

LuxSE will notify you without undue delay in the event LuxSE becomes aware of any unauthorized or improper use, access or disclosure of the Personal Data, which is likely to result in a high risk to your rights and freedoms.

Please kindly note that some of the databases or systems used by LuxSE for mailing services and storage systems may be hosted and/or maintained by third party service providers located inside or outside of the European Union (e.g. MailChimp). Your Personal Data will only be disclosed to and processed by such service suppliers if LuxSE has deemed, in its reasonable opinion, that such service providers offer appropriate guarantees with regard to confidentiality, security and protection of your Personal Data.

LuxSE also reserves the right to disclose Personal Data to any court, judicial or administrative authority when required or legally compelled to do so.

5. Retention Period

LuxSE will retain your Personal Data in accordance with the legal retention periods applicable in Luxembourg or where required for LuxSE to assert or defend against legal claims until the end of the relevant retention period or until the claims in question have been settled.

Your Personal Data will be deleted when:

  • It is no longer reasonably required for the purpose the Personal Data were initially collected for,
  • You withdraw your consent (where applicable); or
  • LuxSE is not legally required or otherwise permitted to continue storing your Personal Data.

6. Your right to access, correct and request the deletion of your Personal Data

You have the right to access, modify, correct and/ or request the deletion of your Personal Data at any time as well as to restrict or oppose to the use of your Personal Data for the purposes mentioned above including:

  • For communications and invitation sent by LuxSE: You may withdraw your consent to receive communications or invitations at any time by sending an email to privacy@bourse.lu. In that case, LuxSE will immediately cease to send you communications and invitations.

  • For the use of the Website: you may have, at any time, the option to either accept or refuse cookies on the Website by changing the settings of you browser. However, if you choose to refuse cookies, you may not be able to access and use certain portions of the Website. You may also encounter difficulties or restrictions when accessing whole or part of the Website for which LuxSE disclaims any liability or responsibility of any kind.

If any of the Personal Data that you have provided to LuxSE changes or becomes no longer up-to-date, you should send an email to privacy@bourse.lu. LuxSE will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete Personal Data that you provided.

7. Amendment to the Policy

The Policy may be amended, replaced or supplemented at any time and without prior or further notice by LuxSE. You are therefore advised to review it from time to time for any possible changes.

Contact

Please feel free to send any queries or requests related to the processing of your Personal Data by LuxSE, in the context described above.
Contact us