Data Protection Policy
GDDA Luxembourg thanks you for your interest in our website and wishes to make your online visit to our internet presence as convenient as possible for you. As a Luxembourg law firm, the protection of your individual privacy is highly important to us. In the following you will therefore find information on the handling of your personal data and your respective rights.
This website is operated and maintained by GDDA Luxembourg SARL | Avocat à la Cour (hereinafter referred to as “GDDA Luxembourg”), a Luxembourg law firm in form of a société à responsabilité limitée registered with the Luxembourg Bar (List V), having its seat at 1, rue Goethe, L-1637 Luxembourg Grand Duchy of Luxembourg and registered with the Luxembourg Trade and Companies Register (R.C.S. Luxembourg) under no. B.239896.
With regard to the processing of your personal data in connection with this internet presence, we are the "Controller" within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR).
In this function we can be reached as follows:
GDDA Luxembourg | Avocat à la Cour
1, rue Goethe
Grand Duchy of Luxembourg
phone: +352 27 87 40 02
fax: +352 27 87 40 03
This data privacy notice (hereinafter referred to as the “Data Privacy Notice”) applies to the present internet presence, operated by us (hereinafter referred to as the "Website") as well as to further processing activities in connection with advertising and communication measures of our law firm described below.
Should our internet presence also facilitate access to the offers of other providers (hereinafter referred to as "Third Party Offers"), our Data Privacy Notice shall not apply to such Third Party Offers. In this case we are also not responsible for the processing of your personal data within the sense of such Third Party Offers as defined in Art. 4 No. 7 GDPR.
Processing of access data
You may visit our Website without providing any personal information. We might store the following access data in server log files:
- host name of accessing computer;
- IP address (anonymised);
- type of browser;
- date and time of Website retrievals;
- operating system;
- website previously visited;
- next website visited.
Such data can be analysed to ensure a proper operation of the Website.
The IP address can be considered as personal data due to the fact that, under certain circumstances and with information provided by the respective internet provider, it is possible to identify the specific individual that has accessed our Website. However, to our best knowledge the IP address is processed and stored solely in anonymised form, without reference to a specific individual.
The above data might be provided to the web agency and hosting platform, acting as processor for us and rendering services in the field of web analysis to us.
Data processing to process your requests
We collect such personal data you have deliberately provided when you established contact with us, in particular by e-mail or through forms on our Website
Such data are processed only to communicate with you and for the purpose for which you have made the data available, always in the context of this communication, as for instance to process your request or to contact you at your request. In this case the processing of personal data is carried out with your consent and is permissible pursuant to Art. 6 (1) lit. a GDPR.
After completion of your request, your data are blocked for further use and erased upon expiry of any storage terms, if so required, unless you have given your express consent to further use of your data, or unless we are otherwise obliged or entitled to storage.
Use of unsolicited data
Should you provide us in other cases with your personal data without being requested (e.g. handing over a business card, forwarding by post or e-mail), we shall include these data into our address management tools and store it there. This is performed on the basis of Art. 6 (1) lit. f GDPR and our legitimate interest in an efficient management of business contact data as well as to ensure the data protection compliant use of such data. These data shall be erased if requested by you, insofar as there are no statutory retention obligations or we are not otherwise entitled or obliged to store such data.
With respect to our processing of your personal data you have the following rights:
Revocation of consents granted
You may revoke any consent you provided to us at any time with effect for the future.
You are entitled to obtain information regarding your personal data recorded. In addition to that, you are entitled to have access to the information listed in Art. 15 GDPR.
Rectification and deletion
Furthermore, you have the right to rectification of inaccurate and completion of incomplete personal data in accordance with Art. 16 GDPR as well as erasure of your personal data if the conditions referred to in Art. 17 GDPR are met.
Restriction of processing
Under the conditions set out in Art. 18 GDPR you may restrict the processing of your personal data.
Disclosure of data and data transmission
Moreover, you have the right to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have us transmit these personal data to another controller on your instruction, where technically feasible. The right to data transmission only relates to personal data, the processing of which is based on consent pursuant to Art. 6 (1) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR, and where the processing is carried out by automated means. The right to data transmission to another controller shall be excluded if the rights and freedoms of others (e.g. personal data of third parties, our business and trade secrets or intellectual property rights) would be adversely affected.
The exercise of all rights detailed above is basically free of charge for you.
In case of manifestly unfounded or, in particular because of their repetitive character, excessive applications relating to the rights under b. through e., we may, however, in accordance with Art. 12 (5) GDPR either
(i) demand a reasonable compensation which takes into account administrative expenses for the communication or notification or the implementation of the requested action, or
(ii) refuse to act on the request.
Please contact us for the exercise of your rights.
Obligations to provide data
You have no legal or contractual obligation to provide personal data to us.
Right to complain
Should you believe that we are not acting in proper compliance with our data privacy and data protection duties, you may contact the data protection authorities at any time. The data protection commissioner responsible for us can be reached as follows:
Commission Nationale pour la Protection des Données
1, avenue du Rock’n’Roll
Grand Duchy of Luxembourg
phone: (+352) 26 10 60 1
Updating of this Data Protection Policy
From time to time it may be necessary to update this Data Protection Policy. We shall keep you informed about any developments on this webpage. We generally recommend reading this Data Protection Policy regularly to check whether any changes were introduced.
Last update on 1 December 2019.