This privacy policy describes in detail how Your personal data is processed on the website (the Site) www.workinluxembourg.com.
It applies to all identified and identifiable persons: "talents" interested in a professional position in Luxembourg, representatives of employers present in the Grand Duchy, and all visitors to the Site (hereinafter referred to as ‘You’, ‘the Talents’, ‘the Employers’ and ‘the Visitors’).
Contents:
- Who are the data controllers?
- When is Your personal data collected?
- What personal data is collected?
- For what purposes is Your data processed and what is the legal basis for such processing?
- Who has access to Your personal data?
- How long will Your data be kept?
- How is Your data protected?
- What are Your rights and how can You exercise them?
1. Who is the data controller?
The Site www.workingluxembourg.com is initiated, launched and supervised by:
- The Ministry of the Economy (hereafter MECO), located 19-21 Boulevard Royal L-2449 Luxembourg-Ville,
- ADEM-Ministry of Labour (hereafter ADEM), located 19, rue de Bitbourg L-1273 Luxembourg-Hamm,
- Chambre de Commerce, registered in the Luxembourg Trade and Companies Register (RCSL) under number J41 and located 7, rue Alcide de Gasperi L-1615 Luxembourg-Ville,
- Chambre des Métiers, located 2, Circuit de la Foire Internationale, L‑1347 Luxembourg-Kirchberg,
- Luxinnovation GIE (hereafter Luxinnovation), registered in the Luxembourg Trade and Companies Register (RCSL) under number C16 and located 5, Avenue des Hauts Fourneaux, L-4362 Esch-sur-Alzette.
The project brings together several Luxembourgish state or semi public bodies. Each partner acts as a data controller for the processing operations it performs within the scope of its own mission in the project.
Some partners act as independent data controllers, as they do not share personal data with the other entities. Other partners jointly determine certain processing operations and therefore act as joint controllers for those specific activities.
No personal data is shared among all partners collectively, and each partner remains responsible for the processing it carries out or jointly determines.
The Site is published by Luxinnovation, which is responsible for its design, graphics, development and technical evolution, availability, content, etc. Luxinnovation operates under the supervision of the Ministry of the Economy, which determines the promotional strategy and corresponding objectives for attracting talent.
You can submit Your questions and requests to the email address: gdpr@luxinnovation.lu.
All partners listed above act as an independent data controller, meaning that they determine the purposes and means of the processing they carry out within the specific role assigned to them within the "Talent Attraction" project. When You use these services, the corresponding data processing is carried out under the sole responsibility of the partner concerned, in accordance with its own privacy notice.
Your data is only shared with the partners who need it to provide the service You requested (see point 5 below: Who has access to Your personal data?).
In this notice, the five operators identified above are collectively referred to as 'We' or 'Data controllers’.
2. When is Your personal data is collected?
The Site www.workingluxembourg.com does not require any prior registration from its visitors to view its content. Accepting cookies is recommended (see the Cookie Policy), otherwise some services may be unavailable (for example, contact and/or information request forms).
The independent data controllers collect Your personal data in several cases:
1. Direct collection: when You fill out a contact form, information request, and/or newsletter subscription form;
2. Automated collection: if You have accepted cookies from the Site, the Site may collect Your browsing data when You view our online content (please see our Cookie Policy).
3. What personal data is collected?
“Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject”).
The personal data collected is listed below (this list is not exhaustive and may be modified at any time, depending on the needs and requirements of the partners of the "Talent Attraction" project):
- Identification data: surname(s), forename(s);
- Contact data email address (business or personal, depending on what is provided by the data subject);
- Electronic authentication data: cookies and trackers.
We are committed to collecting only the personal data necessary and relevant to providing the services requested by Visitors on the Site, in accordance with the principle of data minimization.
To ensure the quality and authenticity of the personal data collected, we would appreciate it if You could provide us with reliable information.
4. For what purposes is Your data processed and what is the legal basis for such processing?
In accordance with the GDPR, all processing is based on one of the six lawful grounds it lists:
- the consent of the data subject,
- the necessity for the performance of a contract concluded with the data subject or for pre-contractual measures at the data subject's request,
- a legal obligation,
- the protection of the vital interests of a natural person,
- the fact that the processing is necessary to fulfil its public interest missions, or
- the legitimate interest of the data controllers.
Some features accessible through this Site are operated by “Talent Attraction” project partners as independent data controllers. Therefore, when You use these services, Your personal data is processed by the relevant partner for the specific purposes of that service. This processing is carried out under their sole responsibility, in accordance with their own data protection policy.
The relevant and authorized independent data controllers collect Your personal data only if it is essential for the following purposes, on the legal bases specified below:
Purposes | Legal basis |
Inform Visitors of changes made to the Site, such as updates and news | Execution of pre-contractual measures |
Manage the relationship with Users and/or Applicants | Execution of pre-contractual measures |
Allowing Visitors to access the respective websites of the partners of the “Talent Attraction” project | Execution of pre-contractual measures |
Allow Visitors to subscribe to the newsletter sent to them by email. | Execution of contractual measures
|
Communicate with the Talents and the Employers: send relevant information (events, offers, guides), respond to information requests, and provide administrative follow-up. | Execution of pre-contractual measures Legitimate interest in ensuring the management and monitoring of relations with Site Visitors |
Evaluate and monitor the Site's performance | Legitimate interests in the development and success of the "Talent Attraction" project Legitimate interests in measuring the attractiveness of the Site and the project |
For statistical purposes | Legitimate interests in the development and success of the "Talent Attraction" project Legitimate interests in informing its partners of its activities, achievements, and other matters |
For audit purposes | Legitimate interests in the development and success of the "Talent Attraction" project Legitimate interests in informing its partners of its activities, achievements, and other matters |
To defend and preserve the rights of the various the partners of the Talent Attraction project, in the event of disputes and claims. | Legitimate interests in protecting oneself in the event of litigation |
Ensure and strengthen the security and stability of the Site | Legitimate interests in protecting its activities from unintentional or intentional incidents |
5. Who has access to Your personal data?
As part of the “Talent Attraction” project, Your personal data is shared with the partners involved in the project's implementation (listed and described above in point 1 above, depending on the services you wish to use from the Site www.workingluxembourg.com.
To minimize data processing, Users are redirected to the respective websites of the relevant partners, depending on the services requested. The data collected for these services is then processed under the sole responsibility of these partners, in accordance with their own privacy policies, which we encourage you to review.
- a. Newsletter Subscription Management
Luxinnovation is responsible for managing subscriptions. As such, this organization only accesses Your email address to:
- register Your subscription,
- send You the communications You have subscribed to.
- b. Processing Contact and Information Requests
The Chamber of Commerce is the independent data controller for receiving and processing contact forms submitted through the "Talent Desk" initiative."
Any document attached to such contact form (e.g. CVs, cover letters, reference letters) could be transferred to any independent data controller as defined under section 1 above. For more information, regarding the processing of your personal data by the Luxembourg Chamber of Commerce, please refer to its privacy policy. If you have any questions regarding the Luxembourg Chamber of Commerce privacy policy, please send an email to the following address: dpo@cc.lu.
Your personal data is under no circumstances transferred outside the European Economic Area (EEA) without having informed You in advance via specific communication and having put in place all the necessary requirements established by the applicable data protection legislation.
- c. Jobboard Management
The Site will integrate the ADEM Jobboard via a redirect to its platform. ADEM is the independent data controller for the management of the Jobboard. It only processes the data necessary to:
- allow users to apply or create a candidate profile,
- ensure the proper functioning of this platform.
For more information, regarding the processing of your personal data by ADEM, please refer to its privacy policy. Your personal data is never sold or shared with private companies outside the project. All access is limited, controlled, and based on legal or contractual obligations. If you have any questions regarding ADEM privacy policy, please send an email to the following address: info.rgpd@adem.etat.lu
Your personal data is under no circumstances transferred outside the European Economic Area (EEA) without having informed You in advance via specific communication and having put in place all the necessary requirements established by the applicable data protection legislation.
- 6. How long will Your Data be kept?
The independent data controllers retain Your personal data only for the period strictly necessary for the purposes for which it was collected (as indicated in point 3 above), including the applicable statutory limitation period, and to comply with their own legal and regulatory obligations.
7. How is Your data protected?
In accordance with the requirements of the GDPR, the Site provided by Luxinnovation has technologies at its disposal that guarantee the security of its data, including Your personal data. Furthermore, We have a team of experts who are committed on a daily basis to developing and implementing the technical and organisational security measures required to ensure the highest standards in this field. Security audits are carried out in order to regularly improve systems for detecting risks of piracy, unauthorised disclosure, total or partial accidental loss, and/or unlawful modification of Your data.
8. What are Your rights and how can You exercise them?
As a data subject, You have various rights. Below is a brief description of these rights and how You can exercise them, via the e-mail address : gdpr@luxinnovation.lu
- Right to information: You can send us any questions regarding the recording and processing of Your data.
- Right of access: You may, at any time, by way of a simple written request, obtain confirmation as to whether or not personal data concerning You is being processed and, if that is the case, obtain access to such data and a free copy of the same.
- Right of rectification: You may, at any time, by way of a simple written request, insist on the rectification of any inaccurate personal data concerning You. You can also make a request for incomplete data to be rendered complete in the same way.
- Right to erasure: You may, at any time, by way of a simple written request, have Your data deleted, provided that one of the following reasons applies:
- the data is no longer necessary for the purposes for which it was collected and processed;
- You have withdrawn Your consent on which the processing was based and there is no other legal basis for this;
- You object to the processing and there is no compelling legitimate reason for such processing;
- the data has been processed unlawfully;
- the data must be deleted to comply with a legal obligation.
- Right to restriction of processing: You may request, by writing, that processing be restricted for one of the following reasons:
- You dispute the accuracy of the personal data (processing will be restricted to the time necessary to verify the accuracy of the data);
- in the event of unlawful processing, You object to the erasure of Your data and request that its use be restricted;
- We no longer need Your data for processing purposes, but it is still necessary to establish, exercise or defend legal rights;
- You have objected to the processing (the processing will be restricted for the period of time necessary to verify the existence of legitimate grounds which override Yours).
Where processing restrictions are granted, personal data may – with the exception of storage – only be processed with the consent of the data subject for the establishment, exercise or defence of legal rights, or for the protection of the rights of another natural or legal person, or for important reasons relating to the public interest.
- Right to object: You have the right, on grounds relating to Your particular situation, to object at any time to the processing of Your data based on the execution of a public mandate or this being necessary for the legitimate interests pursued by us, simply by sending us a request in writing.
We will no longer process such personal data unless it can be shown that there are compelling legitimate grounds for processing which override Your interests and rights and freedoms, or for the establishment, exercise or defence of legal claims.
When Your personal data is processed for marketing purposes, You have the right to object to this processing at any time.
- Right to data portability: You have the right, by sending us a written request, to receive Your personal data provided to us by You in a structured, commonly used and machine-readable format, and to transmit this data to another controller, when:
- processing is based on Your consent or on a contract; and
- the processing is carried out using automated processes.
- Right to lodge a complaint: We make every effort to ensure that our legal obligations concerning data protection are respected and respond to any complaint addressed to us in this respect as quickly as possible.
We draw Your attention to the fact that the independent data controllers reserve the right to verify Your identity before granting Your request to exercise the rights provided for under the GDPR. As a reminder, the exercise of Your rights does not outweigh the prior validity of the processing applied to Your personal data.
If processing Your request requires the mobilization of human and technical resources from one or more of the independent data controllers over a given period, We reserve the right to invoice You for our services.
All requests to exercise rights on behalf of the GDPR will be kept for five years from the date they were submitted.
For any questions regarding the processing of Your personal data via the Site https://www.workinluxembourg.com and for any questions relating to the exercise of Your rights, please contact: gdpr@luxinnovation.lu
If You are not satisfied with the response You receive, You have the option of filing a complaint with the Luxembourg supervisory authority.
Commission Nationale pour la Protection des Données (National Data Protection Commission) ("CNPD").
15, Boulevard du Jazz
L-4370 Belvaux
Grand Duchy of Luxembourg
You also have the option of contacting the supervisory authority in Your own country. You can find contact details for all the supervisory authorities by clicking on the following link: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Last modification: June 2026