Privacy and Protection of Personal Data

Who are we ?

The services, websites, and applications are made available to you by Securex Luxembourg SA, whose registered office is located at 2, Avenue du Blues – L-4368 Belvaux, VAT LU19009176. The company can be reached by telephone at +352 26 38 46 1 or via the contact details listed on this page: https://securex.lu/contact.

Securex is an international actor in social administration and HR services for private individuals, startups, self-employed professionals, SMEs, and major corporations. As a full-service HR partner, we focus on the well-being and talent of employees, collaborators, clients, and independent workers. Sustainable employability is essential for everyone. That is why we develop various solutions aimed at providing preventive and proactive support to those concerned.

Securex also develops and manages HR management solutions at this level, helping companies and their employees harmonize their key HR processes.

Often, through the services we provide, the applications we offer, and the underlying processes, we act as the data controller for your personal data. In this case, you are required to contact us if you have any questions or comments. When companies and/or their employees use our solutions and applications—for example, in the context of payroll—and upload or process personal data within these solutions, we may also act as a data processor on behalf of our clients. In this case, your employer is your primary point of contact for any questions or concerns regarding these data.

When processing your personal data, Securex may therefore act both as a data controller and as a data processor on behalf of your employer. Regardless of the designation, we always place great importance on protecting your privacy, safeguarding your personal data, and valuing your feedback.

This privacy statement applies to the processing of personal data in activities where we act as the data controller.

Purposes of Processing

Your personal data is processed by Securex Luxembourg SA in accordance with European Regulation (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter GDPR). This processing occurs in the execution of a requested or provided service, in response to a request for information, documents, or contact, as well as during the use of an application or the website. Securex Luxembourg SA processes the personal data you provide to its services, websites, and applications for the following purposes :

1. To successfully respond to your requests when you contact or visit the website or use an application;
2. Carry out administrative and organizational tasks related to service delivery, website management, and Securex Luxembourg SA’s commercial and administrative contacts, both with clients and suppliers. The goal is also to reduce administrative burdens and optimize operational and data management;
3. Improve and assess the quality of services offered to users and clients, as well as the performance of websites and applications;
4. Conduct market research and analyze traffic statistics;
5. Regularly inform you, particularly by email, about Securex Luxembourg SA’s activities, new services, and products, or to gather your feedback on existing or newly offered services and products;
6. Share your personal data with all legal entities within the economic entity known as the Securex Group, particularly to enable them to send you promotional offers by email;
7. The organization and implementation of a range of services requested by and/or agreed upon with you and/or your employer.

Regarding the first four purposes, Securex Luxembourg SA relies on its legitimate interest in managing its services, websites, and applications, understanding how its websites and applications are used, and responding correctly and appropriately to visitor requests. Since these processes involve the use of cookies, our cookie policy also applies.

Regarding the fifth objective, Securex Luxembourg SA relies on:

• Its legitimate interest in informing existing clients about its services and products and contacting them to assess their expectations and experiences with these products and services,
• Your individual consent to be contacted for this purpose.
  
  

For the sixth objective, Securex Luxembourg SA processes your data only with your consent. You have the right to withdraw your consent at any time, without prejudice to the legitimacy of the processing carried out before its withdrawal.

Regarding the last objective, the processing of your personal data by Securex Luxembourg SA depends on the type of service provided: 

• Processing may be based on your consent and/or your registration for the requested service, such as training sessions, webinars, or downloading a white paper…
• Processing may be necessary for the execution of a contractual obligation with you or, for example, your employer, such as payroll management or consultancy activities.

Regarding the first six purposes, Securex Luxembourg SA processes your data as the data controller and is therefore responsible and the primary point of contact for exercising your rights.

Regarding the last purpose, Securex Luxembourg may process your personal data as a data controller but also as a data processor, for example, on behalf of the client or the relevant employer (e.g., payroll management). In this case, our client or your employer is responsible for this processing and therefore serves as the primary point of contact for exercising your rights.

Categories of Data Subjects

Securex Luxembourg SA processes your personal data as a user of its websites and applications, as an employer, a representative, or an employee of a client company. Securex Luxembourg SA may also process your personal data as a contact person for a supplier, partner, or other entities with whom we collaborate.

Categories of Processed Data

Personal data can be defined as any information relating to an identified or identifiable natural person (data subject).

Securex Luxembourg processes or may process the following data:

– identification data,

– personal characteristics,

– financial and salary data,

– contact data,

– family data,

– employment, job position, and career-related data,

– data related to services, training courses attended, or other activities…

– where applicable, data related to certain beliefs or opinions (e.g., leave requests), memberships, or other relevant data that fall under special categories.

Some data will only be processed on behalf of your employer, for example, to grant you a benefit.

Personal data may be provided either by you, by your employer, or through your employer. Your employer may provide us with personal data directly or through integration with other HR partners or service providers.

Your rights

You can review the data processed by Securex Luxembourg SA and, if necessary, request corrections by sending a dated and signed request, along with a copy of your identity card (front and back), via email to securex@privacy.eu or by postal mail to Groupe Securex, Data Protection Officer, Avenue de Tervueren 43, 1040 Brussels. Additionally, under the same conditions and within the limits set by the GDPR, you may object to the processing of your data or request that the processing be restricted. You also have the right to request the deletion or transfer of your personal data. Further information can be obtained at the same address.

If necessary, you can submit a complaint to the National Commission for Data Protection.

Retention Period

Securex Luxembourg SA retains your personal data only for as long as necessary for processing purposes, unless the law requires a longer retention period.

Confidentiality

To minimize unauthorized access to the personal data you provide, Securex Luxembourg SA follows strict security procedures.

To access certain services, you may need to register beforehand. You must commit to providing accurate and complete information to Securex Luxembourg SA and informing them of any changes to this data. The access credentials you receive from Securex Luxembourg SA are strictly personal and must be kept confidential. If you suspect that your access credentials have been misused, you must notify Securex Luxembourg SA without delay.

Securex Luxembourg SA may take the necessary measures to ensure the proper management of its websites and IT system. Securex Luxembourg SA may, for this purpose, access any information, communication, or other elements stored within the website or system at any time. In this context, Securex Luxembourg SA may also temporarily or permanently block your access, particularly in cases of (suspected) fraud, abuse, or violation of the confidentiality of your access credentials.

Data Disclosure

Securex Luxembourg SA may engage other providers to carry out specific processing activities. These providers, whether subcontractors or sub-subcontractors, must also comply with all obligations and regulations and provide sufficient protections and guarantees to ensure that processing activities always remain in compliance with GDPR requirements.

Securex Luxembourg SA may also share some of your personal data with an employer or another relevant client, with intermediaries to whom you or your employer have given authorization (e.g., an accountant), or with another party in execution of the agreement between the concerned parties.

Securex Luxembourg SA may also need to disclose your personal data to a third party at the request of any legally authorized authority or even on its own initiative if the company, in good faith, considers such disclosure necessary to comply with laws and regulations, to protect and/or defend the rights or property of Securex Luxembourg SA, the legal entities of the Securex Group, or the users of its websites and applications. In certain circumstances, Securex Luxembourg SA may also disclose data to protect the security of Securex Luxembourg SA, the legal entities of the Securex Group, its clients, and/or the users of its websites and applications.

Data Transfer to Third Countries

Securex Luxembourg SA does not transfer personal data outside the EEA.

However, if a data transfer to a country outside the EEA becomes necessary to ensure service continuity, Securex Luxembourg SA will implement appropriate measures in accordance with data protection legislation and ensure that data subjects have enforceable rights and effective remedies.