DATA PROTECTION

The Blood Transfusion Foundation of the Luxembourg Red Cross (hereinafter referred to as the “Foundation”) attaches great importance to the protection of personal data and respect for privacy. This is why we wish to provide you with transparent information on how your data is collected through our website, how we process it and the rights you have.

To access the specific information notice for donors, click here.

APPOINTMENT BOOKING

1. Purpose and legal basis of the processing

We process your personal data in connection with the management of appointments with the Foundation.

This processing is based on your consent (Article 6.1.a of the General Data Protection Regulation).

You may withdraw your consent at any time by contacting the Foundation at the following address : transfusion.gdpr@croix-rouge.lu.

2. Categories of data processed

In accordance with the law, the Foundation only collects data that is necessary for the performance of its missions. This data is processed confidentially and is not transferred to any commercial company or other organisation, whether Luxembourg-based or foreign.

The personal data we collect in connection with appointment booking mainly includes :

– identification data (surname, first name, sex, date of birth) ;

– contact details (postal address, email address, telephone number) ;

– donor-related data (new donor, existing donor) ;

– appointment-related data (reason for the visit, date, time, place, etc.).

3. Retention period

Your personal data relating to appointments will be added to your personal file and kept for the period necessary for the purposes mentioned above, in particular to meet donation traceability requirements, for the maximum period provided for by law (which may be up to 30 years from the last donation made). If an appointment does not take place, the data relating to the appointment booking will be deleted.

4. Data recipients

The Foundation processes your data in complete confidentiality and only shares it with third parties where this is necessary and compliant with the law.

In connection with appointment booking, we inform you that your personal data will be collected and processed by our processor Doctena. Your data will only be collected for the purpose of managing and organising your appointment. Access to your personal data is strictly limited to the minimum necessary for the provision of the services, and Doctena is subject to the same confidentiality and data protection obligations as the Foundation.

5. Your rights

In accordance with the law, you have the following rights :

– The right to information. We hope that this notice has answered your questions.

– The right to access your data free of charge.

– The right to rectify your data when it is incorrect or outdated.

– The right to lodge a complaint with the National Commission for Data Protection (CNPD) if you believe that the processing of your data does not comply with the law.

In certain cases and subject to the conditions laid down by law, you also have the following rights :

– The right to request the deletion of your data.

– The right to request the restriction of processing of your data.

– The right to object to the processing of your data on legitimate grounds.

– The right to data portability for the data you have provided to us (i.e. the right to receive your personal data in a machine-readable format), insofar as this is technically possible.

You can contact the Data Protection Officer for any request for information regarding the processing of your personal data or to exercise your rights :

– by email : transfusion.gdpr@croix-rouge.lu

– by post :

Luxembourg Red Cross

44, boulevard Joseph II

L-1840 Luxembourg

Tel.: 27 55 20 006.

6. Applicable law

Any dispute relating to the website, its consultation or its use by the user shall be governed by Luxembourg law and shall fall within the jurisdiction of the Luxembourg courts.

7. Contact

You can contact us at the email address info@help.lu for any request for information or at the following telephone number : Tel.: (+352) 27 55 20 006

Luxembourg Red Cross

44, boulevard Joseph II

L-1840 Luxembourg

Tel.: 27 55 20 006.

CONTACT

1. Purpose and legal basis of the processing

We also process your personal data in connection with the management of your requests.

This processing is based on your consent (Article 6.1.a of the General Data Protection Regulation).

2. Categories of data processed

The personal data we collect in connection with your request is mainly your email address and any data you choose to send us by email.

3. Retention period

Your data is kept until your request has been fully processed.

4. Data recipients

The Foundation processes your data in complete confidentiality and only shares it with third parties where this is necessary and compliant with the law. These third parties may include the feedback management service and/or the IT department. Access to your personal data is strictly limited to the minimum necessary for the provision of the services.

5. Your rights

In accordance with the law, you have the following rights :

– The right to information. We hope that this notice has answered your questions.

– The right to access your data free of charge.

– The right to rectify your data when it is incorrect or outdated.

– The right to lodge a complaint with the National Commission for Data Protection (CNPD) if you believe that the processing of your data does not comply with the law.

In certain cases and subject to the conditions laid down by law, you also have the following rights :

– The right to request the deletion of your data.

– The right to request the restriction of processing of your data.

– The right to object to the processing of your data on legitimate grounds.

– The right to data portability for the data you have provided to us (i.e. the right to receive your personal data in a machine-readable format), insofar as this is technically possible.

You can contact the Data Protection Officer for any request for information regarding the processing of your personal data or to exercise your rights :

– by email : transfusion.gdpr@croix-rouge.lu

– by post :

Luxembourg Red Cross

44, boulevard Joseph II

L-1840 Luxembourg

Tel.: 27 55 20 006.

6. Applicable law

Any dispute relating to the website, its consultation or its use by the user shall be governed by Luxembourg law and shall fall within the jurisdiction of the Luxembourg courts.

7. Contact

You can contact us at the email address info@help.lu for any request for information or at the following telephone number : Tel.: (+352) 27 55 20 006

Luxembourg Red Cross

44, boulevard Joseph II

L-1840 Luxembourg

Tel.: 27 55 20 006.

REGISTRATION FOR THE AMBASSADOR PROGRAMME

1. Purpose and legal basis of the processing

We process your personal data in connection with the management of registrations for the ambassador programme, communication with ambassadors, as well as the monitoring and evaluation of their engagement in the programme, in particular by means of questionnaires.

This processing is based on your consent (Article 6.1.a of the General Data Protection Regulation).

You may withdraw your consent at any time by contacting the Foundation at the following address : transfusion.gdpr@croix-rouge.lu.

2. Categories of data processed

The personal data we collect mainly includes :

– identification data (surname, first name, language) ;

– contact details (email address, telephone number) ;

– data relating to your activity as an ambassador and your personal connection with blood donation, collected through questionnaires sent to registered ambassadors.

3. Retention period

The personal data of ambassadors is kept for the entire duration of their participation in the ambassador programme. The data will be deleted in the event of unsubscribing.

4. Unsubscribing

Ambassadors may unsubscribe at any time by clicking the unsubscribe link included in each email or by sending an email to the following address : transfusion.gdpr@croix-rouge.lu.

5. Data recipients

The Foundation processes your data in complete confidentiality and only shares it with third parties where this is necessary and compliant with the law.

In connection with the ambassador programme, we inform you that your personal data will be collected and processed by the communication department of the Luxembourg Red Cross. Access to your personal data is strictly limited to the minimum necessary for carrying out the ambassador programme.

6. Your rights

In accordance with the law, you have the following rights :

– The right to information. We hope that this notice has answered your questions.

– The right to access your data free of charge.

– The right to rectify your data when it is incorrect or outdated.

– The right to lodge a complaint with the National Commission for Data Protection (CNPD) if you believe that the processing of your data does not comply with the law.

In certain cases and subject to the conditions laid down by law, you also have the following rights :

– The right to request the deletion of your data.

– The right to request the restriction of processing of your data.

– The right to object to the processing of your data on legitimate grounds.

– The right to data portability for the data you have provided to us (i.e. the right to receive your personal data in a machine-readable format), insofar as this is technically possible.

You can contact the Data Protection Officer for any request for information regarding the processing of your personal data or to exercise your rights :

– by email : transfusion.gdpr@croix-rouge.lu

– by post :

Luxembourg Red Cross

44, boulevard Joseph II

L-1840 Luxembourg

Tel.: 27 55 20 006.

DATA RELATING TO NAVIGATION ON THE PLATFORM

Each time our website is accessed, usage data is transmitted by the browser and stored in log files, such as the date and time of the visit, the name of the page visited and the amount of data transferred. This data cannot be attributed to a specific person and is used exclusively for the secure operation of our website and the improvement of our services.

For more information about navigation data, please consult our cookie policy.

INFORMATION NOTICE FOR DONORS

The Blood Transfusion Foundation of the Luxembourg Red Cross (hereinafter referred to as the “Foundation”) attaches great importance to the protection of your personal data. This information notice is intended to inform blood donors about the use the Foundation makes of their personal data and about the rights they have, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). It is intended for new donors as well as regular donors.

If you have any questions, please contact our Data Protection Officer at the following address: transfusion.gdpr@croix-rouge.lu.

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

Your personal data is processed by the Blood Transfusion Foundation of the Luxembourg Red Cross, whose registered office is located at 44, Boulevard Joseph II, L-1840 Luxembourg.

2. WHY AND ON WHAT LEGAL BASIS DO WE PROCESS YOUR DATA?

The Foundation collects and processes personal data of blood donors (new or regular donors) for the following purposes and on the following legal bases:

PURPOSE OF PROCESSING and LEGAL BASIS: view details

3. WHAT DATA DO WE PROCESS?

In accordance with the law, the Foundation only collects the data necessary for the purposes mentioned above. In addition to the information you may provide to us in connection with your blood donation, the Foundation collects certain information necessary for the processing and proper management of blood donations and as required or permitted by applicable law, in particular:

– your identification data (surname, first name, donor number, national identification number, photo, date of birth, etc.)

– your contact details (postal address, email address, private and/or professional telephone number)

– your personal physical characteristics (sex, weight, height)

– your lifestyle and consumption habits

– your spoken language

– your characteristics as a donor (status, deferral, donation history, etc.)

– data concerning your health (physical and mental health, illness, condition, family history, care-related data, risk situations or behaviours, etc.)

– genetic data

– data concerning your sex life.

4. TO WHOM DO WE DISCLOSE YOUR DATA?

The Foundation processes your data in complete confidentiality and only shares it with third parties where this is necessary and in accordance with the law. These third parties may include competent administrations and authorities (Health Directorate), as well as service providers performing services on our behalf (for example: analysis laboratories, IT service providers).

Certain services entrusted to our service providers may involve the transfer of donors’ personal data to the United States, but this is done in a form that does not allow you to be directly identified.

5. HOW LONG DO WE KEEP YOUR DATA?

Your data is kept for the period necessary for the purposes mentioned above, in particular to meet donation traceability requirements, for the maximum period provided for by law (which may be up to 30 years from the last donation made).

6. HOW DO WE PROTECT YOUR DATA?

The Foundation implements appropriate organisational and technical security measures, taking into account the sensitivity of the data processed, in order to protect this personal data against the risk of unauthorised access, loss, misuse, disclosure, alteration or destruction.

7. WHAT ARE YOUR RIGHTS?

In accordance with the law, you have the following rights:

– the right to information. We hope that this information notice has answered your questions. For any further information, you can contact our Data Protection Officer.

– the right to access your data. You can access your data by contacting our Data Protection Officer. Please note, however, that as the Foundation processes a large amount of data and in accordance with the law, we may ask you to specify, before any data is provided, which data or which processing operations your request relates to.

– the right to rectify your data when it is incorrect or incomplete.

Subject to the conditions laid down by law (in which case the Foundation will first verify that these conditions are met), you also have the following rights:

– the right to request the deletion of your data. However, once a donor enters into a donation registration process with the Foundation, for example by providing information on their state of health or information submitted via the duly completed medical questionnaire, the Foundation will be required, under its legal obligation, to keep the data for 30 years in order to ensure full traceability. The data may only be deleted after this retention period.

– the right to request the restriction of processing of your data.

– the right to object to the processing of your data for prospecting purposes or on any other legitimate grounds (unless the Foundation has compelling legitimate grounds to continue the processing).

For any question or to exercise your rights, you can contact the Foundation’s Data Protection Officer.

Blood Transfusion Foundation of the Luxembourg Red Cross

Data Protection

44 Boulevard Joseph II

L-1840 Luxembourg

transfusion.gdpr@croix-rouge.lu

This information notice may be updated in order to best protect your personal data. The latest version in force can be consulted on this page.

*Please note: The English version of this policy is provided for information purposes only. The French version of this page is authoritative.