What does GDPR mean for me?
The EU General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC and is designed to:
- Harmonize data privacy laws across Europe,
- Protect and empower all EU citizens data privacy
- Reshape the way organizations across the region approach data privacy.
1. Basic data privacy principles
- Who collects and holds data in Luxembourg?
Your data is held by Solvay Alumni Luxembourg a.s.b.l. and managed by the 7-member alumni team, only.
- Who can I speak at the Alumni Association if I have questions?
All questions can be addressed to gdpr (at) solvay alumni (dot) lu.
- Is there anyone else using my personal data ?
No. We never share your data with befriended associations, sponsors or event partners.
2. Privacy for our Alumni
- What categories of personal data is checked (we consult externally only)?
For every Solvay alumna or alumnus we verify the following data (we do not store it):
- Whether you have graduated from an education program from the Solvay Business Schools.
- When you have graduated.
- What categories of personal data is collected?
We keep your first name, surname, email address, in our database.
- Why do we utilise the aforementioned data?
We process the data to ensure the alumni network is truly constituted of Solvay graduates we can reach out to you.
- How long do we keep the data?
We keep your email address as subscriber in an data warehouse for as long you want to be subscriber.
3. Data we collect automatically
- What Information do you collect automatically?
- As you communicate electronically as well, which device information is saved?
We collect information about the device and applications you use to access emails sent through our Services, such as your IP address, your operating system, your browser ID, and other information about your system and connection.
- Do you see whether we consult the alumni newsletter?
Yes, to help make our communication more effective, we collect usage data about you whenever you interact with emails sent through the Mailchimp, which may include dates and times you access emails and your browsing activities (such as what pages are viewed). We also collect information regarding the performance, including metrics related to the deliverability of emails and other electronic communications .
4. Data processing
- Which external parties are involved in processing my data?
Your data is being stored via two external platform and software providers:
> Combell NV/SA : provides the hosting platform for our website and email service.
> The Rocket Science Group LLC d/b/a Mailchimp : is the controller of your mailing list and stores your email, name and surname.
- Is my email data stored outside the EU?
No. We store our emails via Combell in Belgium.
- Is my newsletter activity stored outside the EU?
Yes. Newsletter data is managed via Mailchimp which use data centres in the US. You can read more about the Privacy Shield Framework vie the following link here.
4. You have the following data protection rights:
- To access, correct, update, or request deletion of your personal information. You may contact us directly at any time about accessing, correcting, updating, or deleting your personal information, or altering your newsletter data or marketing preferences by emailing us. We will consider your request in accordance with applicable laws.
- In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
- Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- You have the right to complain to a data protection authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA are available here.