Privacy Policy

Responsible party pursuant to data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

Eagle and Lion Consulting S.à r.l.
23, Grand-Rue 
L-6633 Wasserbillig

E-Mail: info@eagleandlion.lu

1. Your rights as the data subject

You can exercise the following rights at any time using the contact details of our data protection officer:

  • Information on your data stored by us and the processing thereof (Art. 15 GDPR),
  • Rectification of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of the data processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data with us (Art. 21 GDPR) and
  • Data portability, provide that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us consent (Art. 7 GDPR), you may withdraw this consent at any time through either directly contacting our Data Protection Officer or by using the “wheel icon” displayed at the bottom left of our webpages showing your cookie settings. The legality of your data having been processed until you withdraw your consent remains in effect.

You can contact a supervisory authority with a complaint at any time, e.g. the supervisory authority of the state of your residence or the CNPD, which is the authority that oversees us as the responsible party (www.cnpd.lu).

You will find a list of supervisory authorities (for the non-public area) with their respective addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html (in German only).

2. Collecting general information during a visit to our website

Type and purpose of the processing

When you access our website – i.e. if you do not submit information to us – information of a general nature will be collected automatically by our website typically from your browser. This information (i.e. server log files) contains:

  • Type of web browser and browser version,
  • Operating system that you used,
  • The domain name of your internet service provider,
  • Referrer URL,
  • Your IP address,
  • Date and time of your session and the like.

This data is processed for the following purposes:

  • Establishing and maintaining an unproblematic website connection,
  • Maintaining a seamless use of our website,
  • Analyzing system and website security,
  • Analyzing system and website stability and
  • For additional administrative purposes.

We will not use your data to draw conclusions about your person. This type of information will be statistically analyzed by us if necessary to optimize our website and its underlying technology.

Legal basis

The processing on our website occurs according to Art. 6 Para. 1 (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.

Other recipients than us

Recipients of the data may, besides us as data controller, also be technical service providers, who work on the operation and maintenance of our website as data processors.

Retention period

The data will be deleted as soon as it is no longer required to fulfill the purpose that it was originally collected for. This is generally the case, after the respective session has ended, and the data is no longer used to make the website available. In special circumstances such as that an attack on our website was launched from your IP address, we may retain your data for longer than the session to protect our website from further cyber-attacks from you.

Mandatory or required provision

The provision of the aforementioned personal data is neither legally nor contractually mandatory. However, without the provision of your IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services can become temporarily or fully unavailable for you to use. For this reason, an objection is excluded.

3. Cookies

Type and purpose of the processing

Like many other websites, we use so-called ‘cookies’. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

With cookies, we receive certain information such as IP address, type of browser and operating system used from you.

Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation of our site and properly display our webpages for you.

The data collected by us will not be shared with third parties under any circumstances nor will a link to personal data be created without your consent.

You may view our website with only the use of essential cookies. Internet browsers are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time. Please use your internet browser’s help function to learn how to change these settings, and keep in mind that individual features of our website may not work if you have disabled the use of cookies.

Cookie-consent tracking

Our website uses a plugin called Ultimate GDPR from CreateIT sc. to track your consent to use certain cookies on your computer as well as document this in line with your data protection rights. As soon as you access this website, the following personal data will be stored using the technology provided by CreateIT sc.:

  • Your consent to use only essential or as well analytical cookies,
  • Your IP address,
  • Information related to your browser and technical device,
  • Date and time of your visit.

Furthermore, the consent tracker will place a cookie on your device to track your consent or refusal to the use of other type of cookies for the next time you visit our website. All collected data with regards to consent tracking are permanently saved until you request us to delete this data, the consent tracking cookies reaches it retention time and self-destroys or the purpose for saving this data seizes.

The processing of the data entered in the cookie-consent tracker occurs on the basis that we need to demonstrate that you have given us consent to the processing of your personal data for one or more specific purposes or not. Our legal basis for using this cookie-tracker is Art. 6 Para. 1 (c) of GDPR.

Retention period and cookies used

If you allow us to use cookies, via your browser settings or consent, the following cookies may be utilized on our web pages:

Cookie names Type of cookie First or Third party Can be blocked Session or Persistent Expiry Time Purpose

In various sections of this Policy, we provide you with information concerning how these cookies can (also) pertain to personal data.

In your browser settings, you can also delete individual cookies or the entire set of cookies. You will also find information and instructions on how to delete these cookies or prevent them from being saved in advance. The following links provide the information you will need for the respective browser providers:

4. Contact form

Type and purpose of the processing

The data you enter are used for individual communication with you. A valid e-mail address and name as well as company name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.

Legal basis

The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR).

By providing the contact form, our aim is to facilitate uncomplicated means for you to contact us directly. The information you enter will be used to process the inquiry and saved for possible follow-up questions.

If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).

Recipients

Recipients of the data may also be processors, e.g. our hosting provider.

Retention period

The data will be retained until you request us to delete this data or after the purpose for our processing your inquiry has ended.

Provided that we enter into a legal contract together, we will use the statutory retention periods provided for in the Luxembourg Commercial Code. Therefore, the deletion of your data will occur according to the respective stipulated deadlines for such data, which typically is 10 years after the end of the contractual relationship with us.

Mandatory or required provision

The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.

5. Using Google Analytics

Type and purpose of the processing

This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: ‘Google’). Google Analytics uses so-called ‘cookies’, i.e. text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is typically transmitted to a Google server in the U.S. and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there. On behalf of the operator of this website, which is the data controller, Google will use this information to evaluate your use of the website, summarize reports on website activities and provide other services related to website and internet usage to the website operator as a data processor. The IP address transferred from your browser as part of Google Analytics will not be combined with other data from Google.

The purpose for processing this data is the website-use analysis and the summary of reports on activities on the website to further improve our website service. Based on the use of the website and the internet, other related services will be provided.

Legal basis

The processing of the data occurs on the basis of the user’s consent (Art. 6 Para. 1 (a) GDPR). How we track user consent is further explained in the section about Cookies.

Since our processing of your personal data is based on consent, you have the right to withdraw your consent at any time in line with Art. 7 Para. 3 GDPR. You can withdraw your consent by using the “wheel icon” displayed at the bottom left of our webpages or, in exceptional circumstances, by directly contacting our data protection officer. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Recipients

The recipient of the data is Google as the processor. For this, we have entered into the corresponding data-processing contract with Google in line with Art. 28 of GDPR.

Retention period

The deletion of the data occurs as soon as it is no longer necessary for our recording-keeping purposes, however, at the latest after 14 months.

Third country transfers

Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Mandatory or required provision

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.

Revocation of consent

You can prevent the storage of cookies by a corresponding setting in your browser software; however, please note that in this case you may not be able to use all the functions of this website in their entirety. Furthermore, you can prevent the collected data generated by the cookie and the data related to your use of the website (including your IP address) being transmitted to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: browser add-on to deactivate Google Analytics.

Profiling

With the assistance of the tracking tool Google Analytics, the browsing behavior of the website visitors can be evaluated, and their respective interests can be analyzed. For this analysis, we create a pseudonymous user profile.

IP anonymization

We have activated IP anonymization on our website for the use of Google Analytics. This means that your IP address will be truncated before any submission to the U.S. by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there.

Google Privacy Policy and Google Analytics Privacy Policy

Further information about how Google and its affiliated companies process personal data can be found here:

6. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.

7. Appointed processors

The following organizations, companies or people were commissioned with data processing by Eagle and Lion Consulting as data controller in line with Art. 28 under GDPR:

  • Google LLC.,
  • Zonat S.A.,
  • CreateIT sc., and
  • Defiant, Inc.

8. Revision of our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will be subject to the new privacy policy.

9. Questions for the data protection officer

If you have any questions pertaining to data protection, please send us an e-mail or contact the person responsible for data protection in our organization:

Joachim Rass
Data Protection Officer
Eagle and Lion Consulting S.à rl.
2, Cite Herrenberg
L-6679 Mertert

E-Mail: info@eagleandlion.lu

The privacy policy was created using the template from the activeMind AG privacy policy generator and amended accordingly. The privacy policy was last updated on 01. October 2022.