Luxembourg School of Business Website Privacy Policy (www.luxsb.lu)

Last updated: 13.02.2026

1. Introduction

This Privacy Policy explains how Luxembourg School of Business (LSB) (“LSB”, “we”, “us”) collects, uses, shares, and protects your personal data when you visit our website, interact with our online forms (including brochure downloads, event registrations, and contact requests), or otherwise communicate with us through the website.

We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) and relevant rules on electronic marketing communications.

If you cannot, or will not, provide personal data we reasonably require, we may be unable to provide you with the information or services you requested (for example, access to a brochure or response to an enquiry).

2. Who We Are (Controller)

LSB is the data controller responsible for your personal data.

Our details

  • Legal name: Luxembourg School of Business a.s.b.l. (association sans but lucratif)

  • Address: 46 Côté d’Eich, 1450 Luxembourg, Luxembourg

  • VAT: LU27398543

  • Contact: info@luxsb.lu

3. The Personal Data We Collect

“Personal data” means any information that relates to an identified or identifiable individual.

Depending on how you use our website, we may collect the following categories of personal data:

a) Identity and contact data

  • First name, last name

  • Email address

  • Phone number

  • Country of residence (if provided)

  • Program of interest and related information you submit via forms

b) Enquiry and interaction data

  • Information you provide in messages or forms (e.g., questions, preferences, comments)

  • Records of your requests (e.g., brochure requests, event signups)

c) Technical and usage data

  • IP address

  • Device and browser information (e.g., browser type/version, operating system)

  • Time zone and approximate location derived from IP

  • Pages visited, time spent, clicks and navigation patterns

  • Referring/exit pages and similar browsing information

d) Cookie and tracking data

We may collect information through cookies and similar technologies (see Section 8).

We do not intentionally collect special category data (e.g., health data) through our website forms. Please do not submit sensitive information unless we explicitly request it for a specific purpose.

4. How We Collect Your Personal Data

We collect personal data in the following ways:

  • Directly from you: when you fill out forms (brochure downloads, contact forms, event registrations), request information, or contact us.

  • Automatically: through cookies and similar technologies when you browse our website.

  • From third parties (where applicable): for example, where you interact with us via social media or where we use service providers for analytics, form handling, CRM, and email delivery (see Section 9).

5. How We Use Your Personal Data (Purposes and Legal Bases)

We only use your personal data when we have a lawful basis to do so. Depending on the context, we may rely on:

  • Consent (e.g., for marketing communications where required)

  • Steps prior to entering a contract / contract necessity (e.g., responding to your admissions-related request)

  • Legitimate interests (e.g., improving our website, ensuring security, handling enquiries efficiently)

  • Legal obligation (e.g., compliance and record-keeping where required)

  • Legal claims (e.g., establishing, exercising, or defending legal claims)

Typical purposes

We may process your personal data to:

  1. Provide what you requested

  • Provide access to brochures and requested materials

  • Respond to enquiries and communicate with you about your request

  1. Admissions and programme communications

  • Support your information journey (e.g., programme details, application steps, deadlines, events relevant to your enquiry)

  1. Marketing communications (where applicable)

  • Send updates about programmes, events, deadlines, and related opportunities (see Section 7)

  1. Operate and improve our website

  • Monitor performance and improve user experience

  • Understand which pages and content are most helpful

  1. Security and fraud prevention

  • Protect our website, systems, and users

  • Detect and prevent misuse or security incidents

  1. Compliance and record-keeping

  • Maintain records of requests, consent logs, and opt-out preferences

  • Meet applicable legal, regulatory, or reporting requirements

6. If You Do Not Provide Personal Data

If you choose not to provide required data (e.g., email address), we may not be able to:

  • send you requested materials (such as a brochure),

  • register you for an event, or

  • respond to your enquiry.

7. Marketing and Sales Communications

7.1 What we send

If you request a brochure, register for an event, or submit an enquiry, we may contact you to:

  • provide the material you requested and

  • follow up with relevant information about the programme(s) you expressed interest in.

In addition, where you have provided consent (for example via a checkbox on our forms), we may send you marketing communications about:

  • programmes, events, deadlines, scholarships, webinars, open days, and related opportunities.

7.2 Legal basis

  • Consent: where required for marketing communications, we rely on your consent given at the point you sign up or request materials.

  • Legitimate interests / steps prior to entering a contract: we may process limited data to respond to your request and provide admissions-related information connected to your enquiry.

7.3 Your right to unsubscribe / withdraw consent

You can stop receiving marketing communications at any time by:

  • clicking the unsubscribe link in any marketing email we send, or

  • contacting us at info@luxsb.lu.

Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew it.

7.4 Alternative to obtain a brochure without marketing communications

If you prefer not to receive marketing communications, you may request the brochure by emailing info@luxsb.lu. We will provide the requested material and record your preference not to receive marketing communications.

7.5 Suppression lists

If you unsubscribe or object to marketing, we may keep a limited record of your details (e.g., email address) on a suppression list to ensure we respect your preference and do not send further marketing communications.

8. Cookies and Similar Technologies

We use cookies and similar technologies to ensure our website works properly and to understand how it is used.

Depending on your preferences and settings, cookies may include:

  • Strictly necessary cookies (required for core functionality)

  • Analytics cookies (to understand site usage and improve performance)

  • Marketing cookies (to measure and improve campaigns, where used)

Where required, we will ask for your preferences through a cookie banner or settings tool. You can also control cookies through your browser settings.

For more information, please see our Cookie Policy (if available) and/or the cookie preferences tool on our website.

9. How We Share Your Personal Data

We do not sell your personal data. We may share your personal data with trusted recipients only as necessary for the purposes described in this policy, including:

  • Service providers / processors that help us operate our website, manage forms, handle CRM and communications, and provide IT support.
    Examples may include CRM and email delivery providers such as Zoho (where used), website hosting providers, analytics providers, and technical support vendors.

  • Professional advisors (e.g., legal, audit, insurance) where necessary.

  • Authorities or third parties where required by law, or to protect our rights, safety, and systems.

All service providers are required to process personal data only on our instructions and to implement appropriate security measures.

10. International Transfers

Some of our service providers may process personal data outside the European Economic Area. Where we transfer personal data internationally, we will ensure appropriate safeguards are in place (for example, contractual safeguards and other measures required under applicable law).

11. Data Security

We implement appropriate organizational and technical measures to protect your personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction.

Access to your personal data is limited to personnel and service providers who need it for legitimate purposes and are subject to confidentiality obligations.

12. Data Retention

We keep your personal data only for as long as necessary to achieve the purposes described in this policy, including to meet legal, accounting, or reporting requirements.

Typical retention approach:

  • Enquiries and brochure requests: retained as needed to handle your request and maintain our admissions records.

  • Marketing communications: retained until you unsubscribe/withdraw consent, plus a limited period to maintain compliance records and suppression lists.

  • Technical/cookie data: retained according to cookie settings and technical necessity.

When retention is no longer necessary, we delete or anonymize data in accordance with our procedures.

13. Your Legal Rights

Subject to applicable law, you may have the right to:

  • request access to your personal data

  • request correction of inaccurate or incomplete data

  • request erasure (in certain cases)

  • request restriction of processing

  • object to processing (including direct marketing)

  • request data portability (where applicable)

  • withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact info@luxsb.lu.

You also have the right to lodge a complaint with the national supervisory authority in Luxembourg, the Commission nationale pour la protection des données (CNPD). We would appreciate the opportunity to address your concerns first, so please contact us initially.

14. Children

Our website and marketing communications are not intended for children. If you are under the age where parental consent is required under applicable law, you should not submit personal data without appropriate consent from a parent or legal guardian.

15. Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to third parties, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will publish updates on this page and revise the “Last updated” date above.

17. Contact Us

If you have questions about this Privacy Policy, or if you wish to exercise your rights, please contact us:

Email: info@luxsb.lu
Address: Luxembourg School of Business a.s.b.l., 46 Côté d’Eich, 1450 Luxembourg, Luxembourg