C.K. does not process any personal data without your consent in connection with the provision of any service, when you use our website or when you contact us by any other means. Specific data processing arrangements may be put in place depending on the provision of a particular service or services. In this case, you should also refer to the general terms and conditions of use of these services.
I – Collection and processing of personal data
Certain services offered on our website can only be provided if C.K. is able to contact you (e.g. requests for products or services). In this respect, the possibility to use these services depends on your provision of specific personal data (contact information). C.K. collects, uses and processes this data only to the extent necessary to provide you with the corresponding service. C.K. does not use or process the data in any way whatsoever unless this is permitted in accordance with the legal provisions or you have expressly consented to this. You can revoke your consent at any time. To do so, please contact the contact person indicated in section IX.
The following data will be collected as part of the registration process and will be processed in order to prepare the application: company address, customer status, title, first and last name, telephone and fax number, e-mail address. If you have explicitly consented to this, your e-mail address will also be used to send you a regular newsletter. C.K. collects personal data on www.ck-group.lu and/or on the occasion of organized events, in order to optimize our communication with you.
C.K. is committed to always provide you with the most interesting marketing content on C.K. solutions according to your needs and profile. Therefore C.K. stores the following information: name, first name, e-mail address, company name, company address, telephone number, company size, business sector, function, workstation, user behaviour on the basis of the e-mails sent and on the use of the following website : www.ck-officetechnologies.lu.
C.K. ensures that this information will only be used for the creation of user profiles, will not be shared with third parties and will not be commercialized..
We may also process personal information for the following purposes:
- communicating and responding to your questions and inquiries ;
- to analyze, develop, improve and optimize the use, function and performance of the website and our products and services ;
- manage the security of our website, networks and systems;
- comply with laws and regulations.
Other cookies remain on your device and enable C.K. to detect your browser on your next visit (persistent cookies). You can configure your browser to inform you when cookies are saved, to allow you to decide whether to accept cookies on a case-by-case basis or never to accept cookies. If you choose not to accept cookies, the functionality of our website may be restricted.
III – Recipient of data
The main recipient of your data is C.K.
However, C.K. is likely to communicate your personal data to certain subcontractors.
All our subcontractors are established in the European Union and are committed to respecting the GDPR. Upon written request, C.K. will provide you with a complete list of its current subcontractors. C.K. and/or the subcontractors have put in place technical, physical and organizational measures to protect personal information against accidental or unlawful destruction, accidental loss, damage, alteration, unauthorized disclosure or access, as well as any other form of unlawful processing.
IV – International transfers of personal data
Generally, C.K. does not transfer personal data internationally. The data is stored on a local and private server.
Nevertheless, C.K. or any other third party may transfer, consult and store personal data in connection with the provision of services within the European Economic Area if this is necessary for the execution of specific services.
V – Retention of data
C.K. will retain your personal data for the purposes for which it was collected, generally for the duration of a contractual relationship or for a maximum period of 10 years, except for certain data for which the law requires a retention period of less than 10 years.
When C.K. processes your personal data following an online application, this data will be deleted as soon as the recruitment procedure is completed, i.e. as soon as the position is actually filled. However, if C.K. considers that there is a particular interest (such as a similar position soon to be opened within C.K.) to keep your personal data for a longer period of time, not exceeding two years, C.K. undertakes to ask for your consent for this retention, with the possibility for the unsuccessful candidate to request the immediate destruction of his file.
VI – Data breach notification and incident management
C.K. examines and deals with incidents that suggest or indicate unauthorized access or use of personal information related to specific services as soon as possible.
If C.K. becomes aware of and determines that an incident involving personal information related to specific services is considered a security breach resulting in misappropriation or accidental or unlawful destruction, loss or alteration, unauthorized disclosure or access to personal information related to specific services transmitted, stored or otherwise processed on third party systems made available by C.K., compromising the security, confidentiality or integrity of such personal information related to specific services, C.K. will promptly notify you of such breach.
As information relating to the breach is collected or becomes reasonably available to C.K., and to the extent permitted by applicable law, C.K. will provide you with additional relevant information it has about the breach.
VII – Rights of data subjects
- The right of access: the data subject has the right to obtain confirmation from the data controller (C.K.) whether or not personal data concerning him/her are processed and, if so, access to such personal data. C.K. must be in a position to communicate to the data subjects all the data concerning them.
- The right of rectification: the data subject has the right to obtain from the data controller (C.K.), as soon as possible, the rectification of the personal data concerning him/her that are inaccurate.
- The right to erasure: the data subject has the right to obtain from the data controller (C.K.) the erasure, as soon as possible, of personal data concerning him/her and C.K. has the obligation to erase these personal data. In the event of difficulties in exercising these rights, you also have the right to lodge a complaint with the National Commission for Data Protection.
- The right of limitation of the processing: i.e. the right to request the interruption of the processing of your data: when you notice the inaccuracy of a data while waiting for the data controller to verify it; if the processing is unlawful and you prefer a limitation to an erasure; if you need the limitation of the processing for the ascertainment, exercise and defence of your rights in court. In case of limitation, your data may no longer be processed.
- The right to data portability: the data subject has the right to retrieve the data he has communicated in a structured, commonly used and readable format to C.K. and to pass it on to a third party, if the processing is based on his consent or a contract between him and C.K. of the data and it has been carried out by means of automated processes.
- The right of opposition: you have the right to oppose at any time to the processing of your data for the future. Your opposition is only valid for the future and not for the past. In case of opposition, C.K. will immediately stop the processing of your data. Your objection does not apply, however, if the processing is provided for by law.
In the event of difficulties in exercising these rights, you may file a complaint with the National Data Protection Commission (www.cnpd.lu ).
VIII – Identity of the data controller and data protection officer
The data controller is C.K., represented by Mr. Tom FRISCH, member of the management. His contact details are as follows:
CK Charles Kieffer Group
Mr. Tom FRISCH – Partner / General Manager – Administration
2 Léon Laval Street
Z.A. Am Bann
Tel: 00352 – 26 380 1
C.K. has appointed a Data Protection Officer who is responsible for ensuring compliance with the provisions of the GDPR. It concerns
BONN & SCHMITT S.à r.l. represented by Gabriel BLESER, Managing Partner – Avocat à la Cour, established at L-1511 Luxembourg, 148, avenue de la Faïencerie.
The Data Protection Officer ensures that the rights of the natural persons whose data are processed by C.K. are respected.
His contact details are: firstname.lastname@example.org
XI – How to contact us
If you wish to report data privacy issues or if you have any questions, comments or complaints, please contact :
– the data controller C.K. via the following address: email@example.com
– or only our data protection officer via the following address: firstname.lastname@example.org
C.K. undertakes to handle complaints in connection with the collection and use of your personal data with due diligence.