Effective date: 31 May 2026
This Privacy Policy explains how LuxembourgMedia.com collects, uses, stores, and shares your personal data when you visit this website. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Luxembourg Law of 1 August 2018 on the organisation of the National Commission for Data Protection.
Please read this policy carefully. If you have questions, contact us at privacy@luxembourgmedia.com.
1. Who We Are (Data Controller)
The data controller for this website is:
PublicVision Inc. Incorporated in Ontario, Canada Responsible person: Rundong Li Contact: privacy@luxembourgmedia.com
LuxembourgMedia.com is an independent editorial and directory platform. It is not affiliated with, endorsed by, or connected to the CSSF (Commission de Surveillance du Secteur Financier), GLEIF, or STATEC. It does not provide financial advice.
Because PublicVision Inc. is established outside the EU but directs services to individuals in Luxembourg and the wider European Economic Area, it is subject to the GDPR by virtue of Article 3(2).
2. What Personal Data We Collect and Why
2.1 Website Analytics
We have integrated Plausible Analytics — a cookieless, privacy-first analytics tool — into this website. Plausible is not currently active. If and when it is enabled, it will collect only aggregated, non-personally-identifiable data such as page views, referral sources, approximate country of origin, and device type. It does not use cookies, does not track individual users across sessions, and does not create profiles. When active, the legal basis for this processing is legitimate interest (Article 6(1)(f) GDPR) in understanding how the site is used in order to improve it. No IP addresses are stored in identifiable form.
2.2 Affiliate Tracking Cookies
This site contains links to third-party financial products and services. When you click one of these links, the respective affiliate network may set a tracking cookie on your device to attribute any subsequent transaction to this site. We do not place these cookies ourselves — they are set by the third-party networks. We obtain your consent before any such cookies are set, via our cookie consent banner.
The affiliate networks we work with are:
- Wise Partners (via Partnerize): If you click a Wise link, Partnerize sets a cookie to track whether you open a Wise account. Partnerize's privacy policy governs that data. Partnerize is operated by Partnerize Ltd.
- Awin: Awin is an affiliate network whose tracking cookie records clicks on participating advertiser links. Awin AG's privacy notice applies to data they collect.
- Impact (Impact.com): Impact's tracking technology records clicks and conversions for advertisers on its platform. Impact Tech, Inc.'s privacy policy governs that data.
- Skimlinks: Skimlinks automatically converts certain product or service links into affiliate links and sets a cookie to track referrals. Skimlinks Ltd.'s privacy policy governs that data.
The legal basis for our role in facilitating this cookie-based tracking is your consent (Article 6(1)(a) GDPR), given via the cookie banner before any cookie is placed. You may withdraw consent at any time by adjusting your cookie preferences or by using your browser settings to delete or block cookies.
We do not receive any personally identifiable information from affiliate networks beyond aggregate commission reports. We do not know your name, email address, or payment details from any affiliate transaction.
2.3 Contact Form Submissions
If you contact us via the contact form or by emailing hello@luxembourgmedia.com, corrections@luxembourgmedia.com, or privacy@luxembourgmedia.com, we collect:
- Your email address
- The content of your message
- Any other information you choose to include
The legal basis for processing this data is legitimate interest (Article 6(1)(f) GDPR) in responding to enquiries about the site, handling correction requests, and administering privacy rights requests. Where the contact relates to a potential business or editorial relationship, it may additionally be processed on the basis of steps taken at the request of the data subject prior to entering a contract (Article 6(1)(b) GDPR).
We do not use your contact details for marketing. We do not add you to any mailing list. We have no newsletter.
2.4 What We Do Not Collect
We want to be clear about the limits of our data collection:
- We have no user accounts — you cannot register or log in.
- We have no payment processing — we sell nothing directly, and we never receive or store payment card data or bank details.
- We do not knowingly collect data from children under 16 (see Section 9).
- We have no newsletter and do not collect email addresses for marketing purposes.
3. How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Contact form and email messages | Up to 2 years from the date of last correspondence |
| Analytics data (when Plausible is active) | Up to 13 months |
| Affiliate cookie data (set by third parties) | Per each network's own retention policy |
We delete or anonymise data once the purpose for which it was collected has been fulfilled and the retention period has expired, unless we are required by law to keep it longer.
4. Who We Share Your Data With (Processors and Sub-Processors)
We use a small number of third-party services to operate this website. These act as data processors and are bound by data processing agreements:
- Vercel Inc. (United States): Our website is hosted on Vercel's infrastructure. Vercel processes server logs and request metadata as part of normal hosting operations. Vercel is based in the US; see Section 6 on international transfers.
- Supabase Inc. (EU/Ireland): Our database is hosted on Supabase infrastructure located within the EU (Ireland). Supabase stores structured site data and may incidentally process contact data if you submit a form that writes to our database.
- Resend (email delivery): We may use Resend to deliver email responses to contact form submissions. If used, Resend processes your email address and message content solely for the purpose of sending the reply you requested.
We do not sell your personal data to third parties. We do not share your data with advertisers or data brokers.
5. Legal Bases for Processing — Summary
| Processing activity | Legal basis |
|---|---|
| Aggregated analytics (when active) | Legitimate interest (Art. 6(1)(f)) |
| Affiliate tracking cookies | Consent (Art. 6(1)(a)) |
| Responding to contact/correction enquiries | Legitimate interest (Art. 6(1)(f)) |
| Pre-contractual enquiries | Pre-contractual steps (Art. 6(1)(b)) |
6. International Data Transfers
Vercel is headquartered in the United States and its infrastructure may process data there. The United States does not have an EU adequacy decision that covers all commercial data transfers. Accordingly, transfers to Vercel are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission, which provide appropriate safeguards for your personal data under Article 46(2)(c) GDPR.
Supabase stores data within the EU (Ireland) and therefore no international transfer is involved for that processor.
You may request a copy of the relevant safeguards by contacting privacy@luxembourgmedia.com.
7. Your Rights Under the GDPR
If you are located in the EU or EEA, you have the following rights regarding your personal data:
- Right of access (Art. 15): You may request a copy of the personal data we hold about you and information about how we use it.
- Right to rectification (Art. 16): If any data we hold about you is inaccurate or incomplete, you may ask us to correct it.
- Right to erasure (Art. 17): You may ask us to delete your personal data where there is no longer a legitimate reason for us to hold it, subject to legal exceptions.
- Right to restriction of processing (Art. 18): You may ask us to pause the processing of your data in certain circumstances, for example while a rectification request is being assessed.
- Right to data portability (Art. 20): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
- Right to object (Art. 21): You may object to processing based on legitimate interest. We will stop processing unless we can demonstrate compelling legitimate grounds.
- Right to withdraw consent (Art. 7(3)): Where processing is based on consent (e.g., affiliate cookies), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
- Right not to be subject to solely automated decisions (Art. 22): We do not make solely automated decisions that produce legal or similarly significant effects about individuals.
How to Exercise Your Rights
To exercise any of the rights listed above, email privacy@luxembourgmedia.com with a description of your request. We will respond within one calendar month of receiving a valid request. We may ask you to verify your identity before fulfilling a request.
There is no charge for exercising your rights unless a request is manifestly unfounded or excessive.
8. Right to Lodge a Complaint
If you believe we have not handled your personal data in compliance with the GDPR, you have the right to lodge a complaint with the Luxembourg supervisory authority:
Commission Nationale pour la Protection des Données (CNPD) Website: cnpd.public.lu
You may also complain to the supervisory authority in the EU member state where you habitually reside or work, or where the alleged infringement took place.
We would, however, appreciate the opportunity to address your concern before you approach the CNPD. Please contact us first at privacy@luxembourgmedia.com.
9. Children
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal data to us, please contact privacy@luxembourgmedia.com and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the effective date shown at the top of this page. For significant changes, we may also display a notice on the website. We encourage you to review this page periodically.
Continued use of the site after an updated policy has been posted constitutes your acknowledgment of the changes. If you disagree with a revised policy, you should stop using the site and may exercise your rights as described in Section 7.
11. Contact
For general enquiries: hello@luxembourgmedia.com For privacy requests: privacy@luxembourgmedia.com For factual corrections: corrections@luxembourgmedia.com
PublicVision Inc. — Operator of LuxembourgMedia.com