Privacy Policy

  1. Controller
  2. The National Commission for Data Protection (CNPD) is responsible for the processing of personal data carried out within the framework of the DAAZ project.

    The contact details of the CNPD are as follows:

    Commission nationale pour la protection des données
    15, Boulevard du Jazz
    L-4370 Belvaux
    Tél. : (+352) 26 10 60 -1

  3. Purposes and legal basis of processing
  4. The DAAZ project helps to promote awareness among controllers and processors of their obligations under the GDPR. The implementation of that project is part of a public-interest mission which falls to the CNPD on the basis of Article 57(1)(d) of the GDPR.

    The anonymity of users is preserved thanks to a unique identifier automatically generated at the first connection. The CNPD and its partner the LHC-NC3 (Luxembourg House of Cybersecurity, National Cybersecurity Competence Center) are therefore unable to identify the user as part of their training journey.

    However, if a user requests support from the CNPD (via the address daaz@cnpd.lu), personal data (name, surname and email address of the data subject) will be processed in order to be able to respond to them. Users' attention is drawn to the fact that they should only provide daaz@cnpd.lu with the information necessary to process their request.

  5. Recipients
  6. The personal data processed in the context of a support request will be accessible only to the Commissioners and agents of the CNPD in charge of the DAAZ project as well as to the agents appointed within the LHC-NC3.

  7. Retention period
  8. As part of a support request, the processed data will be kept for a period of three months from the request.

  9. Rights of data subjects
  10. You have the right to access and obtain a copy of the data concerning you processed in the context of your support request (Article 15 of the General Data Protection Regulation), to obtain the rectification of inaccurate or incomplete data (Article 16 of the General Data Protection Regulation), to object to the processing of your data (Article 21 of the General Data Protection Regulation), to obtain the erasure of your data under the conditions laid down in Article 17 of the General Data Protection Regulation and to restrict processing under the conditions laid down in Article 18 of the General Data Protection Regulation.

    For any questions concerning the processing of personal data by the CNPD, and for any request relating to the exercise of your rights, you can contact the Data Protection Officer (DPO) of the CNPD: dpo@cnpd.lu.

  11. Complaint
  12. If you consider that the processing of your data by the CNPD constitutes a breach of the General Data Protection Regulation, you can enter a complaint to the CNPD.