Privacy notice

Homepage | Privacy notice

This privacy policy aims to inform you about how your personal data is collected, processed and protected when you visit our website, use our contact form, subscribe to our newsletter or register for our events, in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter the “GDPR”) and the Luxembourg law of 1 August 2018 on the organisation of the Commission nationale pour la protection des données and the general data protection framework.

Additional privacy notices are available for persons concerned by

  1. our general services and DPO services (Client Privacy Notice) and by
  2. our training programmes (Training Privacy Notice).
  1. Identity of the data controller

MGSI S.à r.l., a limited liability company incorporated under Luxembourg law, registered with the Luxembourg Trade and Companies Register under number B192771, with its registered office at 52a Waistrooss, L-5495 Wintrange, Luxembourg, represented by Mélanie Gagnon, in her capacity as manager (hereinafter “MGSI”).

  1. Data processed

We collect your personal data through our contact form, your subscription to our newsletter and your registration for our events (webinars, conferences). We may process the following categories of data:

  • Personal identification data: surname, first name, postal address, position, company;
  • Electronic identification data: telephone number, e-mail address;
  • Connection data: IP address, cookies strictly necessary for the proper functioning of the website.

We draw your attention to the fact that our website is not intended to receive special categories of data or data of a high level of confidentiality.

  1. Purposes and legal bases for processing

We process your data for the following purposes:

  • Responding to your contact request — legal basis: pre-contractual measures at your request (Article 6.1.b GDPR). This processing is necessary to respond to your request for information.
  • Sending our newsletter — legal basis: consent (Article 6.1.a GDPR). You may withdraw your consent at any time by clicking the unsubscribe link in each message or by contacting us (see section 10). When the sending of communications concerns customers in the context of an existing business relationship, MGSI relies on its legitimate interest, in accordance with the applicable information notices.
  • Managing your registration for our events — legal basis: pre-contractual measures at your request (Article 6.1.b GDPR). This processing is necessary to organise your participation in our webinars and events.
  1. Data retention periods

Data collected via the contact form is retained for a period of eighteen (18) months from your last interaction with us. After this period, your data is deleted.

Data used for sending our newsletter is retained for as long as your consent is not withdrawn and for a maximum of three (3) years from your last interaction (opening an e-mail, clicking). After this period of inactivity, your e-mail address is removed from our mailing list.

Data related to event registration is retained for one (1) year from the date of the event. After this period, your data is deleted.

  1. Data location

We store your personal data within the European Union.

  1. Sub-processing and recipients

We may share your personal data with:

  • our newsletter sending service provider;
  • our website service provider and hosting provider;
  • our service providers involved in the organisation of our events.

These recipients are bound by confidentiality and data protection obligations.

  1. Data security

MGSI implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures aim to protect your data against any unauthorised access, disclosure, alteration or accidental or unlawful destruction.

  1. Cookies

Our website only uses cookies strictly necessary for its proper functioning. These cookies do not require your consent. We do not use advertising, analytics or tracking cookies.

  1. Your rights

In accordance with Regulation (EU) 2016/679 (GDPR), you have the following rights:

  • Right of access: obtain confirmation that we process your data and obtain a copy thereof;
  • Right to rectification: request the correction of inaccurate or incomplete data;
  • Right to erasure: request the deletion of your data, subject to our legal retention obligations;
  • Right to restriction: request that we restrict certain processing in the cases provided for by the GDPR;
  • Right to data portability: receive your data in a structured, commonly used and machine-readable format;
  • Right to object: object at any time to processing based on legitimate interest;
  • Right to withdraw consent: withdraw at any time the consent given for processing based on Article 6.1.a GDPR (in particular the newsletter) without affecting the lawfulness of processing carried out prior to such withdrawal;
  • Right to lodge a complaint: lodge a complaint with the Commission nationale pour la protection des données (CNPD), the Luxembourg supervisory authority.
  1. Contact

If you have any questions about this policy or your personal data, or if you wish to exercise your rights, you may contact us:

  • By e-mail: privacy@mgsi.lu
  • By post: MGSI S.à r.l., 52a Waistrooss, L-5495 Wintrange, Luxembourg