Privacy policy
This statement describes which personal data are processed when using this course site, for what purpose, on what basis and for how long.
Data controller
Rosa Lëtzebuerg asbl
19, rue du Saint Esprit
, L-1475 Luxembourg
info@rosa-letzebuerg.lu
What data we process
Account and enrolment in a course
First name, surname, email address and, if you wish, phone, address, organisation and job title. Plus the sessions booked, the status of the enrolment and the attendance recorded.
Basis: performance of the participation contract. Without these details no enrolment is possible.
Billing details
Invoice recipient, billing address, VAT number, email address for sending and, if your organisation uses one, purchase order or cost centre.
Basis: performance of the contract and the statutory duty to retain accounting records.
Dietary information
Only for courses with catering and only if you provide them voluntarily. They go to the kitchen or the caterer, as a rule as a number without your name, and are deleted automatically 30 days after the course.
Such details may reveal religion or health. The basis is therefore your explicit consent, which you may withdraw at any time. Without the information we simply cannot take it into account for catering; participation is unaffected.
Courses through your employer
If you book through a framework contract of your organisation, the named contact person there learns your name, your email address and the course you wish to attend. This is unavoidable with employer-funded training.
You decide yourself: assignment to a contract only happens if you request it. You can enrol at your own expense at any time instead.
Enquiries via the form
Name, organisation, email, phone and your description of the request. Basis: your enquiry and our legitimate interest in answering it.
Logs
We log changes to enrolments and the sending of emails with recipient, subject and time, but not their content. This serves traceability and troubleshooting.
Who receives the data
- our own team, as far as necessary for running the course
- the trainers of the course concerned, in the form of the participant list
- with catering: the kitchen or the caterer, as a rule only as a number
- when booking through a framework contract: the contact person at your organisation
- our hosting provider, which runs the servers, under a data processing agreement
No transfer outside the European Union takes place. We do not sell data and do not build advertising profiles.
How long we store data
- Account and enrolments: as long as the account exists
- Proof of attendance and accounting records: in line with statutory retention periods
- Dietary information: 30 days after the course
- generated files such as certificates: one hour, after that they are recreated on demand
On request we delete your profile. Enrolments then remain without any link to a person, so that attendance figures and billing stay traceable.
Cookies
We use no analytics or advertising cookies and embed no third-party services. Only technically necessary cookies are used:
- Language choice, one year, only if you switch language
- Sign-in to your account, set by WordPress, for the duration of the session
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future.
Please contact info@rosa-letzebuerg.lu for this.
You may also lodge a complaint with the national data protection authority: Commission nationale pour la protection des données, 15 boulevard du Jazz, L-4370 Belvaux, www.cnpd.lu.
Security
Transmission is encrypted. Access to enrolments is limited to authorised people. Generated files are kept in a protected directory and removed after sending.
As at 16 September 2026