Privacy policy
LAR PRIVACY Notice (web)
1. Website
1
Legal owner. This website is the property of and is operated by LUXEMBOURG AIR RESCUE ASBL, Luxembourg Airport Gate E-13, L-1110 Findel GRAND-DUCHY OF LUXEMBOURG (LAR).
2
Contact details. LAR can be contacted at this address:
2. Privacy
- DATA PROCESSING. LAR collects and processes personal data on this website’s users, as well as on those who use our site to become a member, apply for a job with LAR or purchase items in our online shop. LAR is the controller in respect of the processing of such data. LAR is committed to respecting your privacy and protecting your personal data in accordance with the law, in particular the EU General Data Protection Regulation 2016/679.
- DATA PROTECTION OFFICER. LAR has appointed a data protection officer, who can be contacted at [].
- PROCESSING PURPOSES. The processing of your data is based on the following grounds:
• processing is necessary for us to take steps at your request prior to entering into a contract (where your apply for becoming a member, subscribe to services or apply for a job with LAR),
• processing is necessary for the performance of a contract with you (where you are a member and we deliver the services you have requested, or where you order items in our online shop),
• processing is necessary for compliance with legal obligation to which we are subject (for instance, if you are a member and use our services, for the processing related to invoicing, accounting and other mandatory operations), and
• processing is necessary for the purposes of our legitimate interests (such as, manage our operations and service delivery conditions, manage members’ and donators’ relations and donations, promote our services and organisation, manage subscriptions to our newsletter and other publications or events, improve our website and services, collect metrics and statistics on your use of our website). - DATA RECIPIENTS. LAR may share your data with other entities of our group, third-party partners/providers as necessary to perform our operations and deliver services to you and, where required by law, competent local authorities.
- DATA TRANSFERS OUTSIDE THE EU/EEA. We do not transfer your personal data outside the EU/EEA for our own internal purposes. However, if you use our services for medical transportation or flight operations from, to or flying over locations that are outside of the EU/EEA, we may have to transfer your data to concerned countries as required under applicable local law and as necessary to perform our service contract with you or a contract concluded in your interest with a third party, or as necessary to protect your vital interest or otherwise for the establishment, exercise or defence of legal claims. If appropriate, we may also use alternate safeguards, such as entering into EC approved standard contractual clauses.
- DATA RETENTION. We will retain your personal data for as long as required to manage your membership, deliver the services you have requested, and then for the mandatory retention duration set forth by applicable law.
- YOUR STATUTORY RIGHTS. You have certain rights concerning your personal data under the law as mentioned below, and can exercise them by contacting our Data Protection Officer at [].
• Access right. You have the right to access your personal data. We process a large quantity of information, and can thus request, in accordance with the law, that before the information is delivered, you specify the information or processing activities to which your request relates.
• Right to rectification. You can ask us to rectify, correct or update inaccurate and/or incorrect data.
• Other rights. In certain limited cases (in which case we will analyse whether the conditions for the exercise of such rights are fulfilled, in line with the law), you may object to, or request the limitation of, the processing of your personal data, or request the erasure or portability of your personal data. You should note that the law authorizes us to retain and continue processing certain personal data, even where you have exercised your rights to object or erasure, for legitimate and compelling reasons such as compliance with applicable law. Finally, you can contact the Luxembourg data protection authority [CP1] (Commission nationale pour la protection des données) to introduce a claim.