Data protection policy

We take the protection of your privacy and data, which we process within the scope of our activity, very serious.

Our privacy policy relates to the users of our Website www.atp.lu

Responsible body for data protection

The body responsible for data protection shall designate the unit, who is responsible for the ways in which, personal data is processed, transmitted and stored.

The publisher of the website is also considered to be responsible for data protection:

Association d’Aide par le Travail Thérapeutique pour Personnes Psychotiques a.s.b.l.

8 Zone Industrielle

L-8287 Kehlen

Trade and Companies Register (RCSL): F688

Intra-Community VAT. LU14910025

The person responsible for data protection can be contacted under the following number (+352) 26 33 16 84-1 or contacted via E-mail atp@atp.lu

Collected personal data

Technical data

When you visit our website, we can process certain technical data:

· Type of browser and version, also screen resolution

· Operating system and terminal device (computer, mobile, tablet)

· Session statistics

· Browsing history and clicks

· IP address

This data is stored anonymously and does not allow identification of your person

Reception of personal data

We collect personal data, that you voluntarily communicate to us, e.g. when subscribing to our newsletter, by filling out the contact form and if you send us an e-mail.

We also collect data on the use of our website and its services, when you visit these pages or fill out forms.

Usage of personal data

A cookie is a small piece of data in the form of a text file, sent from a website and stored on the user's terminal device (computer, handy, tablet) while visiting the website. Cookies enable the identification of the terminal device each time you visit the website, for the respective lifetime of the cookie. We use several types of cookies:

Required cookies

These cookies are essential for browsing a website. If these cookies are blocked by the browser, it is possible that you may no longer be able to use certain functions of the website. These cookies are placed exclusively from our website.

Function-related cookies

These cookies enable the optimisation, improvement and functioning of the website by offering or proposing personalised functions (e.g. suggested language). If these cookies are blocked by the browser, you may no longer access personalised functions. These cookies are placed by our website and also third-party providers. Below you will find the list of third-party providers and the respective types of cookies placed.

Analytical cookies

These cookies enable us to compile statistics regarding the use of our website. This data is essential for the improvement of our website. We assume that we have a legitimate interest in placing analytical cookies and that your prior consent would not be required.

Handling of cookies

Handling of cookies

Certain providers offer the possibility to block tracking of their services through a so-called opt-out solution:

• AddThis
• Google Analytics
• Hotjar

Most Internet browsers can be configured to warn users before the placement of cookies, to limit the types of cookies on the terminal device. For the different options available, please consult the help function of your browser.

Legal basis:

We collect personal data for:

· the adaptation and improvement of our offer and service

· the observance of legal guidelines

· our legitimate interests

· defending our interests in the event of legal proceedings

· commercial purposes, when obtaining your consent

Storage duration of personal data

Your personal data will not be stored by us longer than necessary, i.e. only for the time and purposes required for specified processing.

Personal data shall be kept for a period appropriate to the data concerned.

The criteria determining the duration may vary according to the purpose of the data collection:

· lawful and contractual obligation to keep records

· limitation periods, during which persons concerned can assert their rights against our association

· good practises

· commercial purposes of our association

The maximum period for personal data retention is ten years.

Personal data protection

We have implemented various technical and organisational security measures to protect your personal data from unauthorized disclosure.

Personal data transfer to third parties and country of data retention

For organisational reasons, we may share data internally as well as with various service providers depending on existing contractual arrangements with them.

Certain personal data is transferred to partner companies in the context of subcontracting agreements. As from the 25.05.2018 these partner companies commit themselves to the processing of data passed on by us in compliance with the General Data Protection Regulation (GDPR).

Your rights

In accordance with Regulation (EU) 2016/679 relating to the protection of individuals with regard to the processing and free movement of personal data, you have a right of access, a right of rectification and where appropriate, a right to have information concerning you deleted. You also have the right to withdraw your consent at any time and, in legitimate cases, to object to the processing of your data.

Please note that some of the above rights may be limited where we have an overriding interest or legal obligation to continue processing your data.

If you wish to exercise any of these rights, please contact the body responsible for the processing of your personal data, address and telephone number as indicated in the form above.

You also have the possibility to lodge a complaint with the National Commission for Data Protection headquarters at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette.