Data Protection


In accordance with Articles12, 13 and 14 of the EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter the “GDPR”), this Privacy Notice (hereafter “the Notice”) explains how the CD2H of the University of Luxembourg collects, processes and protects Personal Data in relation with the HistorEsch project. The HistorEsch project collects images of objects and memories that relate to the history of the city Esch-sur-Alzette. The aim is to present a multi-narrative and inclusive story about the city through the collection on this website, an exhibit and a free audio-tour.

1) Who Are We?

The University of Luxembourg is a public higher education and research establishment, operating under the supervision of the Ministry for higher education.

The University of Luxembourg has its official address at:

2, avenue de l’Université

Phone number: Tel.: (+352) 46 66 44 1

Internet address: https://wwwen.uni.lu/university

The University has appointed a DPO: reachable during working hours. Further information is provided on https://wwwen.uni.lu/university/data_protection and an email address is available: dpo@uni.lu

2) Why Do We Process Your Personal Data?

The CD2H runs the HistorEsch platform for the collection and processing of images and recordings of memories to present a multi-narrative and inclusive story about the city. The CD2H wants to offer the users of the platform a way to contribute their memories and images of objects to this research project. A selection of the submissions of objects and stories will be approached to participate in the creation of an exhibit and/or the multi-lingual audio tour.

Personal data is processed within the HistorEsch project for two reasons: first of all, we collect and use the e-mail addresses of users to get in touch with them in case we want to include their contribution in the exhibition or audio-tour. Furthermore, we collect contributions by our users through uploads that can take the form of text, images, videos or audio recordings that we make available online.

3) Which Personal Data Do We Collect And Further Process?

The personal data processed includes:

  • name, surname
  • e-mail address
  • photos (optional)
  • videos (optional)
  • written statements
  • audio recordings (optional)

4) How Did We Collect Personal Data?

We collect the Personal Data as provided directly by the user through the platform.

5) On Which Legal Basis Do We Process Your Personal Data?

The legal basis for the processing of your personal data is article 6.1 a) the data subject has given consent to the processing of his or her personal data for the processing of your personal data on the website

6) Who Are The Recipients Of Your Personal Data?

E-mail addresses and names will be only available to researchers of the University of Luxembourg.

Texts, images, videos and audio recordings will be published to all visitors of the website HistorEsch.

Contributors can decide if they want their real names published and choose a nickname/pseudonym.

7) Do We Transfer Your Personal Data Outside Of European Union?

Your Personal Data is processed within the European Union.

8) How Long Do We Store Your Personal Data?

The Personal Data provided by you are kept for a duration of 10 years which are necessary to conduct the research project.

9) What Are Your Rights With Regard To The Processing Of Your Personal Data?

According to the GDPR, you benefit notably from the following rights: right to be informed, right to access to your personal data, right to rectification, right to erasure, right to restrict the scope of the processing, right to object, right to data portability, right to lodge a complaint. The University provides further information on its website page: https://wwwen.uni.lu/university/data_protection/your_rights.

In practice, you can exercise your rights by contacting our DPO:

By sending a request per post to:

Université du Luxembourg
À l’attention de: DPO – Exercise of Data Subject rights
Maison du Savoir
2, Avenue de l’Université

By sending a request per email to the DPO, at dpo@uni.lu

Any request shall be processed by the University of Luxembourg without undue delay, and where feasible no later than one (1) month after its receipt, at least in order to inform you about the status of your request. This period may be extended for two (2) additional months for complex cases or due to a high volume of requests.

10) How Can You Lodge A Complaint?

If you consider that the Processing of Personal Data relating to you infringes the GDPR, you will have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In Luxembourg, the competent authority is the Commission Nationale pour la Protection des Données (CNPD).

Contact of the CNPD:

Commission Nationale pour la Protection des Données
1, avenue du Rock’n’Roll
Service des réclamations
L-4361 Esch-sur-Alzette

Tel. : (+352) 26 10 60 -1
Fax : (+352) 26 10 60 -29

You can also use their contact form, at: https://cnpd.public.lu/fr/support/contact.html

11) Applicable Law – Jurisdiction

The present Notice shall be governed and construed in accordance with the Luxembourgish law.

Any dispute concerning the existence, interpretation or performance of this Notice which cannot be settle amicably, shall fall within the jurisdiction of the Courts of Luxembourg City, without prejudice to the rights of the Data Subjects to bring the matters before the court where he or she has her place of residence as well as its right to lodge a complaint with the supervisory authority.

Language (automatic)