The purpose of this notice is to define the conditions under which the non-profit organisation
European Capital of Culture 2022, with its registered office at 163 rue de Luxembourg, L-
4222 Esch/Alzette, registered at the Luxembourg Trade and Companies Register under the
number F10850 (‘us’ or ‘Esch2022’), collects and processes personal data of visitors (the
‘Visitors’) and saved users (the ‘Users’ or ‘You’) from the website, accessible at
www.esch2022.lu (the ‘WEBSITE’).
Which personal data are processed by Esch2022?
Personal data is information that is able to identify a physical person, directly or indirectly.
With the exception of cookies (mentioned below) we only collect personal data that is
voluntarily provided by you via the sign-up form on the WEBSITE, or that we automatically
collect by email, particularly contact details, for example your name, email address and all
other personal information provided by you (the ‘contact details’). When you create a
personal account on the WEBSITE, a valid email address, username, and first and last
name must be provided without exception. Otherwise, your account will not be able to be
For what purposes are these personal data collected and processed?
The personal data collected by Esch2022 (the ‘Personal Data’) are processed for the
– To communicate with you and provide you with requested information;
– To confirm your registration and give you access to proposed services on the
– To promote our activities (sending newsletters about our latest news);
– Processing of access, correction and opposition requests, as well as other rights
concerning Personal Data;
– Complaint and dispute management
– Development of visit statistics in order to improve the performance of the WEBSITE;
Personal Data are necessary for the execution of services requested by the visitor and the
user, as well as to allow us to fulfil our legal obligations. They are also necessary for our
lawful interest, as they allow us to promote our activities, to communicate our programme
and to improve browsing experience on the WEBSITE. These aims constitute Esch2022’s
legal basis in processing Personal Data.
To whom are these collected Personal Data transmitted?
Personal Data are internally processed by highly authorised persons, within their respective
responsibilities. They may also be communicated to the following external recipients:
– Appropriate administrative and legal authorities, as well as the tax authorities, to
allow Esch2022 to meet its legal obligations in this matter;
– Subcontractors (including IT service providers who store the data) and external
service providers of Esch2022 (such as web designers, communication agencies,
legal support etc.), to a strictly necessary extent and subject to the existence of
specific contractual guarantees to ensure the security and confidentiality of data.
How does Esch2022 protect the Personal Data it processes?
Esch2022 processes the Personal Data it collects, in its capacity as the one responsible for
processing, in accordance with applicable data protection legislation (in particular the
Regulation (EU) 2016/679 of the European Parliament and the Council of 27th April 2016,
and the 1st August 2018 law on the organisation of the National Data Protection
Commission and the general data protection scheme in terms of protecting persons with
regard to the processing of Personal Data, as well as all subsequent regulations). Esch2022
is committed to putting technical and organisational security measures in place that are likely
to ensure the protection of Personal Data from risks related to the use of information
systems. Esch2022 respects widely accepted security norms to protect the Personal Data of
Visitors and Users. However, no method of Internet transmission or electronic storage is
100% secure. Therefore, we cannot guarantee total Personal Data security. The Personal
Data are stored on servers in Switzerland. Switzerland is a country recognised by the
European Commission that can ensure the same level of data protection as the one in force
in the European Union.
Personal Data of Users are stored until the closure of their personal account, as well as
during the applicable limitation period. Contact Details are kept for the required time to
process requests and to establish that we have answered to these requests. A year after the
closing of the User’s account or our reply to your request, the Contact Details are archived
and are only accessible if needed by specially authorised persons. On dissolution of
Esch2022, they will be completely and directly destroyed. For more information on the
retention period of your data, you can contact us at the contact address mentioned below.
What rights do visitors and users have?
In accordance with current law in effect and limitations provided in applicable texts, Visitors
and Users have the right to obtain free of charge:
– Access to personal data about them;
– Confirmation that their Personal Data have or have not been processed;
– Non-exhaustive information concerning, at the very least, the processing aims, the
data categories which are processed and the recipients or categories of recipients to
whom the data are communicated; as well as
– Communication, in an understandable form, of the processed Personal Data.
In the limitations provided in applicable texts, the Visitor/User is also entitled to correct
Personal Data about them and to object to the collection and processing of these data, on
condition that they provide reasons pertaining to their particular situation. They are also
entitled to request the partial or total deletion of their data or processing limitations, and to
exercise their right to data portability. However, Esch2022 will only be able to proceed with
this deletion under certain limitations, namely those in relation to its legal obligations as the
one responsible for the processing.
These rights can be exercised by email at the following address: email@example.com <br/>.
We reserve the right to request your provision of a copy/scan of your ID card in order to
verify your identity so that we may process your request. Users can also directly modify their
Personal Data directly on their user account. You can also refuse to receive our newsletters
at any time, either by following the instructions mentioned in the newsletter or by sending us
an email to the address mentioned above.
For more information on how Personal Data are managed or to exercise one of the
aforementioned rights, do not hesitate to contact us at the above-mentioned address. You
also have the right to make a complaint, in the case of a breach of the applicable rules in
terms of protection of personal data, to a supervisory authority such as the National Data
Protection Commission (CNPD), seated at 1, Avenue du Rock’n’Roll, L-4361 Esch/Alzette.
What is a cookie?
The WEBSITE uses ‘cookies’ and other similar tools. Cookies are small text files that are left
on your computer when you visit the WEBSITE. They collect information related to your
operating system, including in particular your IP (Internet Protocol) address, browsing and
operating system, the date and time of the visit, registration information, browsing history
and the User’s preferences. Certain cookies are necessary in order to benefit from all of the
WEBSITE’s features, others are to stop fraudulent use of login information and to protect
Users’ data from non-authorised third parties. Other cookies are used to permit and facilitate
browsing on the WEBSITE, namely by memorising the User’s browsing preferences or to
avoid the User having to provide their personal information again. These cookies do not
by configuring your Internet browser. Nevertheless, such a deactivation could hinder use of
some of the WEBSITE’s features.
Other cookies used by Esch2022 on the WEBSITE require your prior consent. This consists
of cookies used for the following purposes:
– Statistical analysis and traffic management. These cookies are used to improve the
WEBSITE’s ergonomics and the value of its services, and to allow us to develop new
services and features, and
– Sharing content on social networks.
Esch2022 can use third-party services for analytical and traffic management purposes, such
The information generated by these cookies concerning your use of the WEBSITE (including
your IP address) will be transmitted to and stored by Google Inc. on servers in the United
States of America. Google Inc. will use this information to assess your use of the WEBSITE,
to compile reports on the WEBSITE’s activity for our use and to provide other services
related to the WEBSITE’s activity and Internet use. Google Inc. can also send this
information to third parties if required by law, or to its subcontractors. Google Inc. will not link
your IP address with any other data it holds. You can withdraw your consent to the use of
cookies by writing us an email at the following address: firstname.lastname@example.org or by configuring
deposit in the Visitor/User’s terminal equipment.