1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
Conscious Business Foundation – Luxembourg Chapter
A non-profit association established under the law of 7 August 2023 on non-profit associations and foundations.
Registered office: 9, rue du Laboratoire, L-1911 Luxembourg
For any questions about this Policy or your personal data, contact us at: cbflux@gmail.com
2. What Personal Data We Collect
Depending on how you interact with us, we may collect:
| Category | Examples | When collected |
|---|---|---|
| Identity & contact data | Name, email address | Membership sign-up, newsletter/podcast sign-up, contact via LinkedIn |
| Membership & payment data | Billing details, transaction history | Processed via Stripe when you purchase a membership |
| Event registration data | Name, email, RSVP status | When you register via Eventbrite or LinkedIn Events |
| Communications data | Messages you send us | Via LinkedIn or email |
| Technical & usage data | IP address, browser type, pages visited, approximate location | Automatically, via Google Analytics (only after cookie consent) |
We do not knowingly collect special categories of data (e.g., health, religious beliefs, political opinions) through the Website.
3. How and Why We Use Your Data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing membership applications and payments | Performance of a contract |
| Managing event registrations (Eventbrite, LinkedIn Events) | Performance of a contract / legitimate interest |
| Sending podcast updates, newsletters, and community communications (via Go High Level) | Consent |
| Responding to enquiries received via LinkedIn | Legitimate interest |
| Measuring and improving Website performance (Google Analytics) | Consent (via cookie banner) |
| Complying with legal and accounting obligations (e.g., asbl bookkeeping requirements) | Legal obligation |
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
6. International Data Transfers
Some of our service providers (Stripe, Google, Go High Level, LinkedIn) are based in, or transfer data to, the United States. Where this occurs, we rely on appropriate safeguards recognized under GDPR, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs), as implemented by each provider.
7. How Long We Keep Your Data
We keep personal data only as long as necessary for the purposes described above:
| Data type | Retention period |
|---|---|
| Membership data | For the duration of your membership, plus any period required by Luxembourg accounting/legal obligations |
| Event registration data | For as long as retained by Eventbrite/LinkedIn under their own policies, and internally only as needed to manage the event |
| Newsletter/podcast subscriber data | Until you unsubscribe |
| Website analytics data | Per Google Analytics' standard retention settings |
8. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing
- Data portability for data you provided to us
- Withdraw consent at any time (e.g., unsubscribe from our newsletter, decline cookies)
To exercise any of these rights, contact us at cbflux@gmail.com.
You also have the right to lodge a complaint with the Luxembourg data protection authority:
Commission Nationale pour la Protection des Données (CNPD)
1, avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette
www.cnpd.public.lu
9. Children's Privacy
Our Website and membership programs are intended for adults. We do not knowingly collect personal data from individuals under 16.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised.
11. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact us at: