Privacy Notice
1. Identity and contact details of the controller
The Turkish Chamber of Commerce for Luxembourg (TURKISHCHAM) Non-profit association governed by Luxembourg law
Address: 6, Avenue Guillaume 1650 Luxembourg
Telephone: 00352 28 48 00 45
Email: info@turkishcham.com
Website: https://turkishcham.lu/
Represented by: President of TURKISHCHAM
2. Purposes, legal bases for processing categories of personal data
The association processes personal data of its members in the context of its activities, in particular:
| Purposes | Legal bases |
|---|---|
| Membership management and administration of the association | performance of a contract – Article 6(1)(b) GDPR |
| Organisation of events, meetings and activities | legitimate interest – Article 6(1)(f) GDPR |
| Accounting and administrative management | legal obligation – Article 6(1)(c) GDPR |
| Communication with members (information, invitations, association updates) | consent – Article 6(1)(a) GDPR |
| Networking and promotion of members | consent – Article 6(1)(a) GDPR |
3. Categories of personal data
The data collected and processed mainly include:
- identification data (last name, first name);
- contact data (email address, telephone number);
- data related to professional life (title, position, employer, professional training, etc.);
- where applicable, data relating to your image and/or your voice.
Other data may be generated or collected during the course of the relationship.
Consents given may be withdrawn at any time, in the same manner as they were given, notably by contacting the association.
4. Categories of recipients of the personal data
Personal data may be disclosed to the following recipients:
- Internally, to members of the board of directors and persons in charge of the association’s management, strictly on a need-to-know basis;
- External service providers (processors) acting on behalf of the association (e.g. IT hosting, email services, association management tools, accounting), under data processing agreements compliant with the GDPR;
- Public authorities, where required by law;
- Other members of the association, solely in the context of networking activities or directories, and where appropriate, based on consent.
Where personal data is transferred outside the European Economic Area, such transfers are safeguarded in accordance with the GDPR (e.g. standard contractual clauses or other appropriate safeguards).
Data is hosted by providers located in the European Union.
5. Retention periods
- Membership data: retained for the duration of the membership and for a period of 5 years after termination;
- Accounting and financial data: retained for 10 years, in accordance with Luxembourg legal obligations;
- Data used for communications (newsletters, invitations): retained until withdrawal of consent or for a period of 2 years after last contact;
- Event-related data: retained for a period of 2 years after the event.
Retention periods may be adapted to comply with legal obligations or for the establishment, exercise or defence of legal claims.
6. Cookies policy
A cookie (hereinafter the “Cookie(s)”) is a small text file stored on a device (computer, tablet, or smartphone) when visiting a website. A Cookie is used in particular to collect information relating to the User’s browsing activity on the Site and to provide the User with personalized services and content.
A Cookie is considered “essential” when it is “used solely for the purpose of carrying out the transmission of a communication over an electronic communications network” or when it is “strictly necessary in order for the provider to supply an information society service explicitly requested by the subscriber or user.” An essential Cookie therefore does not require the User’s prior consent.
Our website https://turkishcham.lu/ uses only essential Cookies, which are strictly necessary for the proper operation of the Site and for the provision of the services requested by the User. These Cookies do not require the User’s prior consent.
7. Rights of data subjects
Under the GDPR, you have the following rights:
- right of access (Article 15 GDPR)
- right to rectification (Article 16 GDPR)
- right to erasure (Article 17 GDPR)
- right to restriction of processing (Article 18 GDPR)
- right to data portability (Article 20 GDPR, where applicable)
- right to object (Article 21 GDPR, in particular for processing based on legitimate interest)
You may exercise your rights by contacting the association at: info@turkishcham.com
8. Complaint
If you consider that the processing of your personal data infringes the GDPR, you may lodge a complaint with the Luxembourg supervisory authority (CNPD):
https://cnpd.public.lu/fr/particuliers/faire-valoir/formulaire-plainte.html