Privacy Policy

The Luxembourg Institute of Socio-Economic Research (“LISER”) is committed to complying with applicable data protection regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”), as well as Luxembourg national data protection laws.

This privacy policy (hereinafter referred to as the ”Policy”) applies to the use of LISER website. It aims to inform you about the processing of personal data carried out by our organization in connection with the use of the site, as well as the conditions governing these processes. We are committed to providing transparent information about the data we collect, how it is used, and the rights you have in relation to it.

For the purposes of this Policy, the following terms are defined as follows:

Personal data: Any information relating to an identified or identifiable natural person, either directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the identity of that person.
Processing: Any operation or set of operations performed on personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation, extraction, consultation, use, communication, dissemination, or erasure.

1. Who is the data controller?

LISER is the data controller responsible for the processing of personal data described in this Policy.

LISER is a public establishment established under Luxembourg law, with its registered office at 11, Porte des Sciences, L-4366 Esch-sur-Alzette, Grand Duchy of Luxembourg.

For any questions about this Policy or the processing of your personal data, you may contact:

General:

Data Protection Officer (DPO):

2. What personal data do we collect?

LISER collects only adequate, relevant, and limited data necessary for the purposes for which it is processed. This data may include, but is not limited to, the following information:

Identification and communication data: name, email address, phone number, content of messages sent via the contact form or by email;
Technical data: IP address, browser type and version, operating system, selected configuration, visit times, search terms.

3. For what purposes is the data processed?

The personal data collected by LISER may be processed for the following purposes:

Security: Ensuring the security of the website and the data, preventing and detecting security incidents and fraud attempts;
Legal compliance: Meeting legal and regulatory obligations, particularly in relation to personal data protection;
Access management: Managing access to the website, enabling updates to content and publications;
Handling requests via the contact form: Processing requests and messages received, and ensuring appropriate follow-up.

4. What legal bases do we rely on for processing?

The processing of your personal data is based on several legal grounds:

Legal obligations: LISER process your personal data to comply with legal obligations regarding the security and management of the website;
Legitimate interests: Data processing is necessary for LISER's legitimate interests, including the management, security, and administration of the website, as well as responding to user queries via the contact form.

5. Who are the recipients of personal data?

We only share your personal data with third parties who help us provide our services, as follows:

Service providers: Companies that assist us in managing the website, technical maintenance, data hosting, security, and personalization services;
Legal and regulatory authorities: Public bodies or legal authorities when we are required to do so to comply with legal obligations or to protect our rights and interests.

These recipients are legally or contractually required to ensure the confidentiality and security of your personal data and to process it in accordance with applicable data protection regulations.

6. Are personal data transferred outside the European Economic Area?

Personal data are primarily processed in Luxembourg and, more generally, within the European Economic Area (“EEA”). LISER prioritises local and European data storage and processing solutions.

In certain cases, LISER may use service providers that process personal data outside the EEA. Where such transfers occur, LISER ensures that they are carried out in accordance with applicable data protection law and are subject to appropriate safeguards.

This may include relying on an adequacy decision adopted by the European Commission or, where no such decision exists, using appropriate safeguards such as the European Commission’s standard contractual clauses, supplemented by additional security measures where appropriate.

7. What security measures do we implement?

LISER is committed to implementing technical and organizational measures to ensure the security of your personal data. We take reasonable precautions to prevent the loss, misuse, or alteration of your personal information.

We ensure that authorized personnel responsible for processing personal data have received adequate training in personal data protection and are bound by confidentiality obligations.

While the transmission of information over the internet is inherently insecure, and we cannot guarantee the absolute security of data sent via the internet, we take all necessary measures to enhance its protection.

8. How long do we retain your personal data?

LISER is committed to retaining personal data only for the time necessary to fulfill the purposes for which it was collected, in accordance with applicable legal and regulatory requirements.

The retention period for data may vary depending on its nature and the legal obligations in place. In general:

Communication data: This data is retained for as long as necessary to process your request, then stored for a maximum of 3 years from your last contact with LISER;
Navigation data: Information related to your website navigation is retained for a maximum period of 13 months.

LISER uses cookies and similar technologies when you visit its website. These technologies may be used to support the operation of the website, remember your choices and understand how the website is used.

For more information about the cookies and services used, as well as how you can manage your preferences, please read our Cookie Policy.

10. What are your rights as a data subject?

As a natural person, you have several rights regarding your personal data, including:

Right of access: You can request access to your data at any time, as well as a copy of this data;
Right to rectification: You can request the correction of inaccurate or incomplete data at any time;
Right to erasure: You can request the deletion of your personal data when, for example, it is no longer necessary for the purposes for which it was collected or processed;
Right to restrict processing: You can request the restriction of the processing of your data, for example, if you contest the accuracy of the data concerning you or if you object to the processing of your data;
Right to data portability: You can request the transfer of your data to another data controller in a structured, commonly used, and machine-readable format when the processing is automated and based on your consent;
Right to object: You have the right to object to the processing of your data and to withdraw your consent at any time if the processing of your data is based on consent.

To exercise these rights, you can contact our Data Protection Officer (DPO) at the following address: .

Any request will be processed within one month, which may be extended by two additional months if the request is complex or in case of a high volume of requests. We will inform you of any extension as soon as possible.

Your requests will be handled within the limits provided by law, in particular in accordance with Articles 15 to 23 of the GDPR.

If you are not satisfied with the way we handle your data or respond to your requests, you also have the right to file a complaint with the National Commission for Data Protection (CNPD), or any other competent supervisory authority in an EU Member State.

11. Modification of this Policy

We reserve the right to modify this Policy at any time to reflect changes in our data processing practices or applicable law. We will publish any changes on our website, and we encourage you to regularly review this page to stay informed of any updates.

Last update: 23/07/2026