Complaints Luxembourg Data Protection Information
CS Lux and/or its relevant branch may process as data controller(s) all information (hereinafter referred to as “Personal Data”) relating to any data subject, such as a future client, a client and/or any other person involved in the business relationship, as the case may be (e.g., as an authorized representative, a person holding a power of attorney, a beneficial owner, if different from the client), of which CS Lux/the branch becomes aware in connection with a complaint. Personal Data includes, for example, the data subject’s name, contact details and/or address of domicile and may be processed only to the extent necessary for complaint handling purposes. Such processing is deemed legitimate, as it is based on the legal obligation of CS Lux and its branches to maintain adequate complaint handling procedures and/or, as the case may be, as such processing takes place for the performance of a contract, to which the relevant data subject is party. Authorized personnel of CS Lux/the branches will have access to Personal Data solely for complaint handling purposes and on a need-to-know basis.
Personal Data will be stored securely at CS CH (a hosting service provider for CS Lux) in Switzerland, a country recognized by the European Commission as ensuring an adequate level of data protection. Personal Data will be stored for as long as necessary for CS Lux and its branches, to achieve the purposes of the complaint handling and comply with any applicable data retention laws. In addition, electronic communications will, for a period not exceeding the maximum statutory safekeeping period for business correspondence, be centrally stored in Switzerland by CS CH by means of an automated procedure known as “Communication Journaling”. In relation to the storage by CS CH of Personal Data as described in this paragraph, employees of CS CH may have access to Personal Data on a need-to-know basis for maintenance purposes.
The data subject has the right to access the Personal Data relating to him/her, the right to request rectification, erasure or restriction of processing or to object to the processing as well as the right to data portability free of charge.
In case the data subject wishes to exercise the abovementioned rights or has any concerns regarding the processing of his/her Personal Data by CS Lux/the branch for complaint handling purposes, he/she may contact CS Lux or the relevant branch at any time. The data subject may also lodge a complaint with the competent authority in accordance with the PDF document available on the previous page.
As complaints submitted via the website are transmitted in unencrypted form via a public network, there is the risk that they may be intercepted and used by an unauthorized third party. In addition, the transmission of complaints can be delayed or disrupted due to transmission errors, technical faults, disruptions, malfunctions, illegal interventions, network overloads, the willful blocking of electronic access by third parties, or other shortcomings on the part of the network provider. CS Lux and its branches shall not be liable in that respect, except in case of gross negligence or willful misconduct.