Privacy Policy Helvilux.lu

Last updated: November 01, 2025

This Privacy Policy describes how HELVILUX (“the Company”, “We”, “Us”, or “Our”) collects, uses, and protects your personal data when you use helvilux.lu (“the Website” or “the Service”) in accordance with the General Data Protection Regulation (GDPR) and Luxembourg data protection law.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

Interpretation

Words with initial capital letters have defined meanings. These definitions apply whether used in singular or plural.

Definitions

Account – A unique profile created to access the Service.
Company – HELVILUX (ISSN 3122-1076) – Luxembourg’s digital media.
Cookies – Small files stored on your device.
Country – Luxembourg
Device – Any device capable of accessing the Service.
Personal Data – Any information relating to an identifiable person.
Service – The Website and related services.
Service Provider – Any processor acting on Our behalf.
Usage Data – Automatically collected technical data.
You – The individual using the Service or the legal entity they represent.

2. Collecting and Using Your Personal Data

2.1 Types of Data Collected

Personal Data

We may collect the following information:

  • Email address
  • First and last name
  • Phone number
  • Address and location information
  • Any data explicitly provided by you through forms or requests

Usage Data

Collected automatically and may include:

  • IP address
  • Browser type and version
  • Pages visited, time and date
  • Device identifiers
  • Mobile device information
  • Diagnostic and analytics data

3. Tracking Technologies and Cookies

We use Essential, Functionality, and Analytics Cookies.
You may disable cookies in your browser, but certain functions may not work.

(Full cookie details remain as written in your text.)

4. Legal Bases for Processing (GDPR Art. 6)

We process Personal Data based on:

  • Consent (Art. 6(1)(a))
  • Performance of a contract (Art. 6(1)(b))
  • Legal obligations (Art. 6(1)(c))
  • Legitimate interests (Art. 6(1)(f)), such as improving our service
  • Journalistic exemption for media work under GDPR and Luxembourg law

5. Use of Your Personal Data

We use your Personal Data to:

  • Provide and maintain the Service
  • Manage user accounts
  • Communicate with you
  • Send updates or newsletters (when consented)
  • Improve our Service
  • Ensure security and detect fraud
  • Respond to requests or complaints
  • Perform legally required duties

(Your original list remains applicable.)

6. Retention of Personal Data

We retain Personal Data only as long as necessary for:

  • The purposes described in this policy
  • Legal or regulatory obligations
  • Journalistic archiving, when relevant

7. International Transfers of Data (GDPR Chapter V)

Your data may be transferred outside the EU/EEA.
When this occurs, we use Standard Contractual Clauses (SCCs) or rely on other approved safeguards to ensure GDPR-level protection.

8. GDPR-Compliant Processors

We only work with third-party Service Providers who:

  • Meet GDPR compliance standards
  • Sign a Data Processing Agreement (DPA) with us
  • Use data solely for instructed purposes
  • Implement adequate technical and organizational security measures

9. Your Data Protection Rights (GDPR Chapter III)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Delete your data (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the CNPD

To exercise these rights, contact us at helvilux@gmail.com.

10. Deleting Your Personal Data

You may request deletion of your data via email or through account settings (if applicable), except where we must retain data due to legal obligations or journalistic archiving rights.

11. Disclosure of Data

We may disclose your data:

  • To comply with legal obligations
  • To protect the rights or safety of HELVILUX or users
  • During mergers or transfers of business
  • When required by law enforcement with valid legal basis

12. Security of Personal Data

We use commercially reasonable measures to protect your data, but no method of transmission is 100% secure.

13. Children’s Privacy

We do not knowingly collect data from children under 13.

14. Links to External Websites

We are not responsible for third-party site practices.

15. Changes to This Privacy Policy

We may update this Policy and will post revisions with an updated date.

16. Journalistic Disclaimer

HELVILUX conducts investigative reporting and journalistic-style work but does not claim the protected legal title of “Journalist” as defined under Luxembourg law.
We aim to provide truthful and evidence-based reporting to our readers.

If you wish to file a complaint regarding our journalistic practices, you may also contact:

Conseil de Presse Luxembourg
52, avenue de la Gare
L-1610 Luxembourg
Tel: +352 22 23 11
Email: secretariat@press.lu
Website: press.lu

17. Contact Information

Data Protection Officer

HELVILUX (ISSN 3122-1076)
Luxembourg
Email: helvilux@gmail.com

Supervisory Authority (Luxembourg CNPD)

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux, Luxembourg
Website: cnpd.public.lu