We, the Stëmm vun der Strooss ASBL (the Stëmm), hereby inform you about the use and processing of the photographs and videos (including sound track) of you (the Recordings), as well as, where relevant, other related personal data you may have given to us while obtaining your consent, including your name, signature, e-mail address and family relationships (i.e. whether you have children or not) (together with the Recordings, your Personal Data).
We process your Personal Data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
- Our contact details
We, the Stëmm, act as a data controller in respect to your Personal Data and may be contacted using the following contact details:
Data Protection Officer
7, rue de la Fonderie
Tél. : 49 02 60
Fax : 49 02 63
- For which purposes do we use the Recordings?
We will rely on your consent to make the Recordings and to publish them on our website (www.stemm.lu), in our bimonthly journal, in a local newspaper, or any other media in order to promote our activities and to give you the possibility to have the Recordings as a memory of the event you have attended. For these purposes, we may in some cases rely on the legitimate interests pursued by us (right to freedom of expression) or by a third party (right to information), provided that theses interests are not overridden by your right to privacy.
Based on our legitimate interests, we will also keep the Recordings for archiving purposes.
In those cases where the publication of the Recordings would have an impact on your privacy that outweighs our legitimate interests, we will ask for your consent. We will process the personal data you provide to us by filling out the consent form for the sole purposes of keeping evidence of your consent.
Based on our legitimate interests, we may incidentally process your Personal Data while working on our website, our IT systems, or in our files in general.
- Do I have to be photographed or filmed?
You are not obliged to give your Personal Data, respectively to be photographed or filmed. Please inform us, if you do not wish to be photographed or filmed.
- Can I change my mind and have my Personal Data deleted?
You may withdraw your consent at any time, without affecting, however, the lawfulness of the publication of the Recordings based on your consent before its withdrawal. If you withdraw your consent, we will delete your Personal Data, except if there is another legal ground for keeping the data.
You also have the right to object at any time to the use of the Recordings, on grounds relating to your particular situation. In this case, we will delete your Personal Data, except if we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (article 21 of the GDPR).
Please note that you may also request your Personal Data to be deleted in the case where they are no longer necessary in relation to the purposes for which they were collected or otherwise processed, where we have unlawfully processed your Personal Data, or where your Personal Data has to be erased for compliance with a legal obligation to which we are subject (article 17 of the GDPR).
- Data transfers and third parties
We may communicate your Personal Data to our website and IT service providers. We may communicate the Recordings to local newspapers, social media platforms, our Facebook, our sponsors, or other associations that are involved in the activities of the Stëmm.
Except as otherwise indicated on our consent forms, we do not share your Personal Data with any recipient in a country outside of the European Economic Area.
- For how long do we keep your data?
We will keep your data for the time of existence of the Stëmm, respectively until you object to the processing of your Personal Data.
- What other rights do I have?
Beyond the right to withdraw your consent, the right to object, and the right to deletion (see above under “Can I change my mind and have my Personal Data deleted?), you enjoy, under certain circumstances, the following rights with regard to your Personal Data:
- the right to access your Personal Data, to obtain information about the processing thereof and request us to rectify your Personal Data held about you that are inaccurate (article 15 and 16 of the GDPR);
- the right to restriction of processing (i) if you contest the accuracy of your Personal Data, for a period enabling us to verify the accuracy of the Personal Data, (ii) if the processing is unlawful and you reject the erasure of the Personal Data and request the restriction of their use instead, (iii) if we intend to delete your Personal Data, but you need them for the establishment, exercise or defence of legal claims, or (iv) if you have objected to the processing of your Personal Data pending the verification whether our legitimate grounds override yours (article 18 of the GDPR).
the right to lodge a complaint with the Commission nationale pour la protection des données (www.cnpd.lu) or with any other supervisory authority in the European Union.