Personal data processing policy

This notice sets out how ILRES S.A. processes the personal data it collects from people who visit its websites and/or use the means of contact provided therein, whether they write to ILRES S.A. by post or using the contact form, or whether they contact ILRES S.A. or one of its employees by telephone or e-mail.

If you would like to know more about how ILRES S.A. processes personal data in its telephone or online surveys, please consult the relevant notices available at https://ilres.lu/.

The ILRES S.A. websites contain a registration form for people who wish to participate regularly in the surveys and polls it carries out by becoming a MyPanel Member. Details of the data processing carried out in this context are given during the registration process.

In this notice, the term ‘personal data’ means any information relating to an identified or identifiable natural person; an ‘identifiable natural person’ is deemed to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity; ‘Regulation 2016/679’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

ILRES S.A. is responsible for processing the personal data that it collects from people who visit its websites and/or use the means of contact provided therein. If you have any questions or requests in this regard, you may contact its Data Protection Officer either by post addressed to ILRES S.A., 41, rue du puits Romain L-8070 Bertrange, or by e-mail sent to DPO@ilres.com, or by telephone on +352 499291.

Nevertheless, ILRES S.A. websites contain several useful links to other websites. ILRES S.A. is in no way responsible for the way in which your personal data may be processed when you follow these links, even if they lead to the websites of companies or organisations that are partners of ILRES S.A. You should therefore carefully examine the privacy policy of the administrators/publishers of these sites, or contact them directly to find out how your personal data is processed in such cases.

Personal data processed during your visit to the ILRES S.A. website.

A simple visit to the ILRES S.A. website does not entail the processing of personal data.

Data processed when you contact ILRES S.A.

1. ILRES S.A. uses the data you provide when you write to it by post, using the contact form, or when you contact it or one of its employees by telephone or e-mail, for the purposes of dealing with your request. This processing takes place on different legal bases depending on the type of request: When your request concerns an offer that you are requesting or an ongoing contract with ILRES S.A., the processing of your personal data will take place because it is necessary for the performance of said contract or pre-contractual measures taken at your request (paragraph 1, point b) of Article 6 of Regulation 2016/679).

   ILRES S.A. also reserves the right to use the contact details of its Clients and those provided by their employees in order to communicate information relating to the services it offers. In this case, the legal basis for the processing is ILRES S.A.'s legitimate interest in publicising its products and services in order to develop its business activity. In return, ILRES S.A. undertakes to indicate in such ‘marketing’ communications how data subjects may object to this use of their data.

   Finally, ILRES S.A. will use the contact details of its Customers and those provided by their employees to invite them to participate in surveys regarding its services (satisfaction surveys, product tests). The legal basis for such processing is ILRES S.A.'s legitimate interest in having the information necessary to improve its products and services and to adapt them to the needs of its Customers. Here again, ILRES S.A. will always give the persons concerned the opportunity to object to this use of their professional contact details.

2. Where your request concerns your personal data and the rights attached thereto (Chapter III of Regulation 2016/679), ILRES S.A. will process your data in order to comply with its legal obligation to respond to such a request (paragraph 1, point c) of Article 6 of Regulation 2016/679). It will process the information communicated in this context on the basis of its legitimate interest in keeping evidence of the handling of your request, such evidence being necessary for the establishment, exercise or defence of its legal rights.
3. Where your request concerns any other matter, ILRES S.A. will process your data in order to reply to you, this processing being carried out as part of its legitimate interest in managing the requests it receives (paragraph 1, point f) of Article 6 of Regulation 2016/679).

Recipients of your personal data :

The data processed when you contact ILRES S.A. may be transferred to its service providers, i.e. those whose intervention is useful for the performance of a contract that you or your company have concluded with it, or other service providers such as its auditors, cloud space providers, accountants or legal advisors. These recipients of personal data are required to comply with legal and/or contractual obligations regarding data protection, including professional secrecy and applicable confidentiality obligations.

ILRES S.A. may also transfer personal data where it is required to do so either by virtue of a legal or regulatory obligation or by virtue of a constraint emanating from a public authority within the legal limits.

Transfer to third countries:

ILRES S.A. will not transfer the personal data it processes to a country outside the European Union without first informing you.

Data retention period:

The data processed when you contact ILRES S.A. is kept for no longer than is necessary for the purposes for which it is used and in accordance with its legal obligations.

For example:

• If your data is processed as part of the performance of a contract that you have requested, your data will be kept at least until the end of the said contract, and, in the case of data that must be kept for accounting purposes, at least ten years after full payment of the services and costs agreed in the said contract.
• The contact details processed by ILRES S.A. to communicate information regarding the services it offers or to carry out surveys regarding these services will only be used for as long as the persons concerned are part of its clientele (two years after the last service provided by ILRES S.A.).
• When ILRES S.A. responds to a request concerning your personal data, the data relating to the management of this request will be archived for the time necessary to establish, exercise or defend ILRES S.A.'s rights.
• If you provide your data as part of a job application, and your profile corresponds to the type of job that ILRES S.A. offers or to the type of job that ILRES S.A. is looking for, ILRES S.A. will keep this data securely for no longer than one year after receiving it, unless you object to this, or if the relationship leads to an employment contract.

Your rights when your personal data is processed:

You have the right to request access to your personal data processed by ILRES S.A. and, if incomplete or incorrect, to request that they be corrected. You also have the right to request the limitation of the processing of your personal data, the right to object to their use and the right to request that your personal data be deleted from the files held by ILRES S.A. You also have the right to the portability of your personal data, i.e. the right to request their communication to another data controller in a structured, commonly used and machine-readable format. You may withdraw your consent at any time in cases where ILRES S.A. has previously required such consent for the processing of your personal data, in which case the lawfulness of the processing based on the consent granted prior to its withdrawal shall not be affected.

You may submit a request to exercise the above rights by sending a request to ILRES S.A., 41, rue du puits Romain L-8070 Bertrange or by e-mail to DPO@ilres.com. If you are not satisfied with the way in which ILRES S.A. processes your personal data, you have the right to lodge a complaint with the competent supervisory body, which for the Grand Duchy of Luxembourg is Commission nationale pour la protection des données. (https://cnpd.public.lu/fr/index.html).