Privacy Notice

The purpose of this Privacy Notice is to inform You about how Your personal data (hereinafter "Your Data") is processed, as well as the reasons and conditions for processing this data in the specific context of Your relationship with the AI Factory Consortium via the website https://www.aifactory.lu/. This notice is addressed to all individuals - employees and/or legal representatives of companies, public research centres, specialized incubators, Luxembourg state and/or parastatal administrations, all applicants and/or partners of the Luxembourg AI Factory program - hereinafter referred to as "You" or the "User."
Contents: 
 a. Who is the data controller? 
 b. When is Your data collected? 
c. What personal data is collected? 
d. For what purposes is Your data processed and what is the legal basis for such processing? 
e. Who has access to Your personal data? 
           i. Members of the AI Factory Consortium 
           ii. Partners Members of the AI Factory Consortium 
f. How long is Your data kept? 
g. How is Your data protected? 
h. What are Your rights and how can You exercise them?  
a. Who is the data controller? 
AI Factory is a project initiated and co-funded by Euro HPC. In Luxembourg, it is overseen by a consortium of six Luxembourg stakeholders: 
  • LuxProvide S.A.: 3, Op der Poukewiss L-7795 BISSEN, registered B236534 with the RCSL; 
  • Luxinnovation GIE: 5, avenue des Hauts Fourneaux L-4362 Esch-sur-Alzette, registered C16 with the RCSL; 
  • Luxembourg Institute of Science and Technology (LIST): 5, avenue des Hauts Fourneaux L-4362 Esch-sur-Alzette, registered J53 with the RCSL;
  • PNED GIE (LNDS): 6, avenue des Hauts Fourneaux L-4362 Esch-sur-Alzette, registered C175 with the RCSL; 
  • University of Luxembourg: 2, place de l’Université L-4365 Esch-sur-Alzette registered J20 with the RCSL. 

 The members of the Consortium are jointly responsible for the processing of Your personal data, within the meaning of Article 26 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"). This means that they jointly determine the purposes and means of the processing. 

 Luxinnovation GIE is the publisher of the Ai Factory website and is responsible for its design, graphic charter, development, and technical evolution. Luxinnovation is also the data controller for all matters related to the management of Your personal data via the website https://www.aifactory.lu/. You can submit Your all questions and requests to the email address provided: gdpr@luxinnovation.lu  
b. When is Your personal data is collected? 
The website www.aifactory.lu does not require any prior registration by name for its visitors to view its content. Accepting cookies is recommended (please refer to the Cookie Management Policy), otherwise certain services may be unavailable (e.g., contact and/or information request forms). 
The Consortium collects Your Personal Data in several cases: 
  1. Direct collection: Direct collection: You fill out a contact or information request form; 
  2. Automated collection: Subject to having accepted cookies from the website www.aifactory.lu, the website may collect Your Data relating to Your browsing when You consult our online content (please refer to our Cookie Management Policy).

c. What personal data is collected? The Data Controller collects information that Users voluntarily provide on the website https://www.aifactory.lu/, particularly when they complete forms to contact the Consortium. These forms include the following identification and contact information: 
  • Identification data: surname(s), forename(s), gender; title, positions within the company, legal name of the company concerned; 
  • Contact data: o Landline/mobile phone (business or personal, depending on what is provided by the data subject), o Postal address (business or personal, depending on what is provided by the data subject), o Email address (business or personal, depending on what is provided by the data subject). 

 We undertake to collect only personal data that is necessary and relevant for the management of its support programs. The forms are designed to minimise the amount of data collected and processed, so that only information that is strictly necessary for the management of Your file is used. 

Additional information about the User may be collected automatically via cookies, depending on the user's preferences. Please see the Cookie Policy for more details. 

 d. For what purposes is Your data processed and what is the legal basis for such processing? 
In accordance with the GDPR, all processing is based on one of the six lawful bases it lists: 
  • the consent of the data subject, 
  • the necessity for the performance of a contract concluded with the data subject or for pre-contractual measures at the data subject's request, 
  • a legal obligation, 
  • the protection of the vital interests of a natural person, 
  • the fact that the processing is necessary to fulfil its public interest missions, or 
  • the legitimate interest of the data controllers. 

 The Data Controller collects Users' personal data only if it is essential to achieve the following purposes, on the legal bases specified as follows: 

e. Who has access to Your personal data? 
 I. Members of the AI Factory Consortium 
 Your Personal Data is processed only by duly authorized employees of the Consortium members, within the limits of their respective missions. 
 
II. Partners Members of the AI Factory Consortium 
 Your Data may also be processed by the recipients of the Consortium who, within the framework of the purposes, designate any third party supporting the activities of Luxembourg AI Factory: 
• European partners who initiate and oversee the Luxembourg AI Factory program, including Euro HPC and the European Commission. 
• Institutional partners (ministries, Luxembourg administrations, professional chambers, universities, public research organizations) and non-institutional partners (Luxembourg private research organizations, service providers), 
• Subcontractors who process data for Consortium members (particularly in the IT field). 

These Recipients may, under their own responsibility, disclose the Personal Data to their agents and/or delegates (the "Sub-Recipients"), who will process the Personal Data for the sole purpose of assisting the Recipients in providing their services to the AI Factory Consortium. 

 f. How long is Your data kept? 
 The Consortium retains Your personal data only retains Your personal data for the retention period strictly necessary for the purposes for which they are collected (listed in point d. above), including the legal limitation period applicable to its relationship with the User – and to comply with its own legal and regulatory obligations. All Your personal data contained in the contact and/or information request form is collected and shared via protected channels between the members of the Consortium who store it in their respective databases. Their retention periods then apply. In the specific context of support projects, contractual and legal obligations imply the retention of data for up to 10 years from the closure of the file or the decision of ineligibility. This data is also retained to demonstrate compliance with internal and legal procedures by Consortium members. 

 g. How is Your personal data protected? 
 In accordance with GDPR requirements, Consortium members are committed to developing and implementing the necessary technical and organizational security measures on a daily basis to ensure the highest standards of respect for and protection of Your personal data. Their staff are trained for this purpose and are equipped with high-performance IT systems that ensure a high level of data security.

h. What are Your rights and how can You exercise them? 
As a data subject, You have various rights. Below is a brief description of these rights and how You can exercise them, via the e-mail address gdpr@luxinnovation.lu. Luxinnovation will be responsible for informing the members of the Consortium in order to provide You with the most relevant and comprehensive response possible.  
  • Right to information: You can send us any questions regarding the recording and processing of Your data. 
  • Right of access: You may, at any time, by way of a simple written request, obtain confirmation as to whether or not personal data concerning You is being processed and, if that is the case, obtain access to such data and a free copy of the same. 
  •  Right of rectification: You may, at any time, by way of a simple written request, insist on the rectification of any inaccurate personal data concerning You. You can also make a request for incomplete data to be rendered complete in the same way. 
  • Right to erasure: You may, at any time, by way of a simple written request, have Your data deleted, provided that one of the following reasons applies: 
                - the data is no longer necessary for the purposes for which it was collected and processed; 
                - You have withdrawn Your consent on which the processing was based and there is no other legal basis for this; 
                - You object to the processing and there is no compelling legitimate reason for such processing; 
                - the data has been processed unlawfully; - data must be deleted to comply with a legal obligation. 
  • Right to restriction of processing: You may request, by writing, that processing be restricted for one of the following reasons: 
               - You dispute the accuracy of the personal data (processing will be restricted to the time necessary to verify the accuracy of the data); 
               - in the event of unlawful processing, You object to the erasure of Your data and request that its use be restricted; 
               - We no longer need Your data for processing purposes, but it is still necessary to establish, exercise or defend legal rights; 
               - You have objected to the processing (the processing will be restricted for the period of time necessary to verify the existence of legitimate grounds which override Yours). 
Where processing restrictions are granted, personal data may – with the exception of storage – only be processed with the consent of the data subject for the establishment, exercise or defence of legal rights, or for the protection of the rights of another natural or legal person, or for important reasons relating to the public interest.
  • Right to object: You have the right, on grounds relating to Your particular situation, to object at any time to the processing of Your data based on the execution of a public mandate or this being necessary for the legitimate interests pursued by us, simply by sending us a request in writing. We will no longer process such personal data unless it can be shown that there are compelling legitimate grounds for processing which override Your interests and rights and freedoms, or for the establishment, exercise or defence of legal claims. When Your personal data is processed for marketing purposes, You have the right to object to this processing at any time. 
  • Right to data portability: You have the right, by sending us a written request, to receive Your personal data provided to us by You in a structured, commonly used and machine-readable format, and to transmit this data to another controller, when: 
                 - processing is based on Your consent or on a contract; and 
                 - the processing is carried out using automated processes. 
  • Right to withdraw Your consent: Where processing is based on Your consent, You have the right to withdraw this at any time by sending us a written request. The withdrawal of Your consent will not affect the lawfulness of the processing based on the consent given prior to such withdrawal. 
  • Right to lodge a complaint: We make every effort to ensure that our legal obligations concerning data protection are respected and respond to any complaint addressed to us in this respect as quickly as possible. 
We draw Your attention to the fact that the Consortium reserves the right to verify Your identity before granting Your request to exercise the rights provided for under the GDPR. As a reminder, the exercise of Your rights does not outweigh the prior validity of the processing applied to Your personal data. 

 If processing Your request requires the mobilization of human and technical resources from the partners of the joint call projects over a given period, We reserve the right to invoice You for our services. 
 All requests to exercise Your rights will be kept for 5 years from the date Your request is sent. 

 For any questions regarding the processing of Your personal data via the Site www.aifactory.lu and for any questions relating to the exercise of Your rights, please contact the following email address: gdpr@luxinnovation.lu

If You are not satisfied with the response You receive, You have the option of filing a complaint with the Luxembourg supervisory authority. 
Commission Nationale pour la Protection des Données (National Data Protection Commission) ("CNPD"). 
15, Boulevard du Jazz 
L-4370 Belvaux 
Grand Duchy of Luxembourg 

 You also have the option of contacting the supervisory authority in Your own country. You can find contact details for all the supervisory authorities by clicking on the following link: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en 

 Last modification: June 2025 

inwink's privacy policy Terms of use



inwink is an event-management tool which processes participants’ authentication when registering to an event.

Collection of personal data by the inwink’s authentication system is required for the user to register for an event, to access the event website, and to access practical and logistic information related to the event.

Personal data collected by inwink are: last name, first name, contact information, log in and password, in addition to all the fields placed by the event organizer in the event registration form.

These personal data are confidential and hosted by inwink. They can be shared with partners and external service providers exclusively for registration management and user participation purposes.

In accordance with the French Data Protection Act ( « Loi « Informatiques et Libertés » n°78-17 du 6 janvier 1978 telle que modifiée par la loi n°2004-801 du 6 août 2004 »), upon justifying their identity, the user has a right to access and modify the data that concern them, and to refuse altogether the processing of their personal data. @@event.name@@ {{event.name}}