Your rights regarding your personal data
The Ministry of Environment, Climate and Sustainable Development (MECSD) respects your rights while processing your personal data.
This data is processed in accordance to the EU General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which took effect on 25 May 2018.
Your rights can be summarized as follows:
The right to be informed and the right of access
You have the right to be informed and obtain access to the personal data held about you.
The right to rectification
You have the right to ask the MECSD to rectify incorrect, inaccurate or incomplete personal data. If the MECSD has transmitted this data to a third party, it will inform said party of the rectification.
The right to object
In certain cases, you can object to the processing of your personal data by MECSD, which will then determine whether the processing prejudices you and if so will end the processing.
However, you cannot object to the processing of your personal data if MECSD is obliged to it by law or if the data is necessary for the performance of its duties.
The right to restrict processing
You have the right to request the restriction of the processing of your personal data, which will be subject to the conditions of article 18 of the GDPR.
The right to data portability
You have the right to ask the MECSD to transfer your personal data to you, or to another natural or legal private or public person.
If technically possible, the MECSD will transfer your data in a machine-readable format.
The right to erasure or « the right to be forgotten »
You have the right to ask the MECSD to erase your personal data if keeping it is no longer justified by a legitimate reason.
The right to complain
If you have a complaint regarding the processing of your personal data, or if you suspect a violation of the safety of your personal data, you can contact the MECSD by addressing your request to its Data Protection Service either by letter to B.P. 27, L-2010 Luxembourg or by mail: email@example.com. Please do not forget to attach a copy of your identity card or passport in order to confirm your identity
You also have the possibility lodge a complaint with the national authority in this matter, which is the National Commission for Data Protection (NCDP). You can send it to the following address:
Commission Nationale pour la Protection des Données (CNPD)
1, avenue du Rock'n'Roll,
For more information about the NCDP, please visit: www.cnpd.public.lu
You can also seek judicial remedy.
Notification to the supervisory authority and communication to the person concerned by a violation of their personal data (data subject)
The supervisory authority is to be informed by the MECSD of any violation of personal data without undue delay and not later than 72 hours after having become aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.
If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall communicate the personal data breach to the data subject without undue delay, unless said communication is not necessary according to the conditions of article 34, paragraph 3 of the GDPR.
Exercise your rights
To exercise your rights you should contact the MECSD by letter or by mail (firstname.lastname@example.org). Please do not forget to attach a copy of your identity card or passport in order to confirm your identity.
The MECSD will respond to your request without undue delay and no later than one month after receiving the request. If the MECSD needs more time to reply to your request, it will inform you of the reasons for this delay.
In certain cases, the MECSD will not intend to comply with your request and in this case it will let you know the reason why.
You can contact us wither by letter or by e-mail: email@example.com or visit our homepage on www.emwelt.lu
Confirming your identity
In accordance with article 12, paragraph 6 of the GDPR, the MECSD has the right to ask you to confirm your identity if he has reasonable doubts concerning your identity.
You will be asked to confirm your identity by joining a copy of your identity card or passport to your letter or mail.
Storage limitation of personal data
The MECSD has the right to store your personal data only as long as it is necessary to the purpose that has allowed its collection.
These storage limitations can for instance be imposed by law.