Privacy policy and cookies

The site www.arcad.lu is published by ARCAD S.A., an anonymous company under Luxembourg law, established in 109-115, Avenue de Luxembourg, L-4940 Bascharage, registered in the Commercial and Companies Register of Luxembourg under the number B131647.

ARCAD S.A. is responsible for the processing of personal data described in this notice.

The site does not offer an online contact form. You can view it without directly disclosing your identity to us and without accepting the statistical cookies. However, certain technical data necessary for the display and security of the site may still be processed.

When you contact us directly

If you write to us by email or letter, or call us, we use the information you choose to provide to us: identity, company, contact details, the content of your request and, if applicable, any attachments. These are used to process and respond to the request.

The legal basis depends on the situation: the execution of pre-contractual measures requested by you (Article 6, paragraph 1, point b of the GDPR) or our legitimate interest in managing business exchanges and relationships (Article 6, paragraph 1, point f).

For the operation and security of the site

Our hosting infrastructure can process technical data such as the IP address, the date and time of connection, the pages or resources requested, technical errors and the characteristics of the browser. These data are used to provide the site, detect incidents and ensure its security, based on our legitimate interest (Article 6, paragraph 1, point f).

For attendance statistics

With your consent only, Google Analytics 4 (GA4) measures visits and interactions on the site. It can process page views, session information, the origin of visits, data related to the browser and device, an approximate location, and online identifiers. This information is not necessarily anonymous.

This treatment is based on your consent (Article 6, paragraph 1, point a, of the GDPR). The ARCAD Consent plugin is designed to load GA4 only after you have accepted the statistics and not to enable the advertising customization features in this integration.

If you sign up for our communications through another channel

When you request to receive newsletters or invitations, we may use your email address and company name to send you these communications, based on your consent. You can unsubscribe at any time via the link included in our emails or by writing to privacy@arcad.lu. This agreement is independent of the one given for cookies.

Cookies are small files stored in the browser. The plugin ARCAD Consent distinguishes the necessary memorization of your choice from optional cookies for audience measurement.

During your first visit, the bandeau offers you accept everything, of refuse everything or of customize Your choice. The statistics are optional. Refusing them does not limit access to the site.

You can change your preferences at any time using the «Manage my cookies» button on the site or the button below:

Manage my cookies

If you withdraw your consent, the plugin stops the GA4 tracking it manages, deletes the Analytics cookies it has access to, and reloads the page when necessary. The withdrawal does not automatically delete the information already transmitted to Google and does not affect the processing previously carried out based on a valid consent.

Your choice is linked to your browser. It is requested again after the expiry of 180 days, after cookies are deleted or when a significant change to the information makes a new consent necessary.

Your information is accessible to the persons authorized by ARCAD and, as needed, to the providers involved in hosting, site maintenance, messaging, work tools, and the sending of communications. The providers acting on our behalf are subject to the applicable data protection commitments.

When you accept the statistics, measurement data is transmitted to Google Ireland Limited, Google Analytics provider, as well as the entities involved in providing the service.

Some treatments may take place outside the European Economic Area, notably in the United States. Depending on the transfer in question, Google describes different guarantee mechanisms, including the EU-US data protection framework for covered transfers and standard contractual clauses when necessary. You can consult them here. Google information on international transfers.

We do not sell or rent your personal data. It may also be disclosed to an authority when required by law. For any clarification regarding the recipients or applicable guarantees, please contact privacy@arcad.lu.

• Requests addressed to ARCAD: the time necessary for their processing, then for a maximum of 12 months after the last exchange, unless a business relationship, a legal obligation, or a dispute justifies a longer period.
• Communications regarding registration: until you unsubscribe. The minimum information necessary to manage your objection may be kept separately when justified.
• Cookies: The choice registered by ARCAD Consent expires after 180 days. The GA4 cookies managed by the plugin have a requested duration that does not exceed the remaining duration of the consent.
• Technical operating data: Technical logs are retained for operational, security, and incident resolution purposes, then deleted or anonymized in accordance with the hosting provider's retention policies. Data related to an incident may be retained longer if necessary for its management or a dispute.
• Google Analytics data: Detailed data is retained according to the GA4 property retention settings and Google’s deletion cycles. This time period does not correspond to the duration of cookies and does not necessarily cover standard aggregated reports. See Google documentation on conservation.

Under the conditions provided for by the GDPR, you can request'access to your data, theirs rectification or erasure, as well as the limitation of their treatment. You can oppose to treatments based on our legitimate interest and to benefit, in the cases provided for by law, from the right to portability.

For treatments based on your consent, you may withdraw it at any time, without affecting the legality of the treatments carried out before that withdrawal.

You can also file a claim with the National Commission for the Protection of Data (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg: cnpd.public.lu.

This policy may change as treatments, tools used, or regulations change. Its version and the date of revision are at the top of the page. When a change requires a new agreement, one is requested before the relevant treatments are activated.