Privacy policy

How EDISYS SA collects, uses, and protects your personal data, in accordance with the GDPR and Luxembourg law.

Foreword

EDISYS SA attaches great importance to respecting and protecting your privacy and your data. With 16 years of activity in the Grand Duchy of Luxembourg, we commit to providing high-quality services, which requires rigorous protection of the personal data you entrust to us.

This policy explains how we collect, process, and protect your personal data when you consult our website lbogroup.lu, use our contact forms, or apply online for a position within our group.

This policy applies to our website lbogroup.lu as well as to our profiles on professional social networks. It complies with the General Data Protection Regulation (EU Regulation 2016/679 of 27 April 2016, known as "GDPR") and the Luxembourg law of 1 August 2018 on the protection of natural persons with regard to the processing of personal data.

Data controller

The controller of your personal data is:

EDISYS SA
Public limited company (Société Anonyme) under Luxembourg law
Registered office: 2 Rue Edmond Reuter, L-5326 Contern (Grand Duchy of Luxembourg)
RCS Luxembourg: B139924
Email: direction@lbo.lu
Phone: +352 661 754 747

Our commitment

We have set up an internal data protection programme that includes:

  • The purpose limitation principle: we never use your personal data in a context other than the one for which you entrusted it to us. In no case is your information sold or simply passed on to a third party for commercial purposes.
  • The designation of a data officer in charge of protecting the data of our clients, providers, and prospects, reachable at direction@lbo.lu.
  • The implementation of appropriate technical and organisational measures to concretely apply the principles of data protection (encryption, access control, backups, logging, awareness training of teams).

The lbogroup.lu website and the group's social networks are operated exclusively by EDISYS SA or one of the group companies acting on its behalf.

Data collected

Information you provide to us directly

When you fill in a contact form, apply for a position, or write to us by email, you directly provide us with certain information: name, first name, email, phone, company, message, and possibly attachments (CV, copy of ID, supporting documents).

Important note: mandatory fields are indicated by an asterisk in our forms. We thank you for not transmitting any content not expressly requested by the form or by our team (for example, do not send us identity documents of relatives not concerned by your request).

Information collected indirectly

When you consult our site, certain information is collected automatically for proper technical functioning, improvement of your experience, or production of statistical analyses:

  • Technical connection information (IP address, browser type, operating system, page visited, date and time of visit).
  • Country/city determined by approximate geolocation from the IP address.
  • Internal site navigation data (pages consulted, duration of consultation, navigation path).
  • Data from media platforms and social networks when you follow our official pages or interact with our publications (only personal information you have designated as public on these networks).

Note on minors

Our website does not particularly target minors. However, if we were to collect information relating to a minor inadvertently, the legal representative of the minor concerned may exercise the minor's rights on their behalf at any time by contacting us at direction@lbo.lu.

Why we collect your data

If you are an existing or potential client of our group, we may use your personal data to:

  • allow you to navigate on our website;
  • respond to your requests for information about our services (contact forms, quote requests, appointment bookings);
  • produce anonymised audience statistics to improve the quality of our site;
  • keep you informed of our latest achievements (new services, new registrations, legislative developments that may concern you) — only if you have consented to receive these communications;
  • better understand your professional interests and provide you with a relevant browsing experience;
  • process your spontaneous application or response to a job offer.

Legal basis for processing

The processing of your personal data is based on one of the following legal bases, depending on the case:

  • The performance of a contract entered into with you, or a contract with a group company acting on our behalf, or pre-contractual measures that you have requested (quote, request for information).
  • Compliance with the legal and regulatory obligations to which we are subject (in particular the fight against money laundering and the financing of terrorism, Luxembourg accounting and tax obligations).
  • Our legitimate interest in promoting our services, offering you quality long-term commercial follow-up, and improving the user experience of our site.
  • Your consent when required (in particular for commercial communications and certain non-essential cookies).

Who can have access to your data

Within the group

Your personal data is accessible only to the limited number of people who need to know it as part of their missions:

  • If you are a current client or prospect, only the employees of the commercial and operational teams concerned by your file have access to your information.
  • If you are a candidate for a position, your information remains strictly confidential and is destroyed if your profile does not match the position or if the position is not filled.

Outside the group

Your personal data is not communicated to external third parties, except:

  • To member companies of the LBO group acting on behalf of EDISYS SA, on the basis of your prior agreement given by signing a contract.
  • To providers and suppliers who carry out the execution of our services (for example: registration of your vehicle, creation of your company, subscription of an insurance contract, the notary in charge of a deed). These third parties act as sub-processors and are bound by confidentiality commitments.
  • To authorised authorities who would request it in accordance with current laws and regulations (tax, judicial, control authorities, CSSF, CNPD, etc.).
  • To our technical providers strictly as part of the execution of their services: hosting (OVH), professional messaging, data backup. These providers are subject to strict contractual obligations of confidentiality and security.

Data retention period

In accordance with our Luxembourg legal obligations, in particular as part of the fight against money laundering and the financing of terrorism (amended law of 12 November 2004 and transposition of successive European directives), we retain the personal data of our clients for a period of 10 years from the end of the contractual relationship.

The cookies deposited by EDISYS SA are kept for up to thirteen months maximum from their deposit, except for cookies strictly necessary for the operation of the site.

For other processing, we respect the retention periods imposed by current laws and regulations. If your data is no longer necessary to provide our services or if you ask to no longer receive our communications, your data will be deleted or irreversibly anonymised in accordance with our internal policy and regulations.

Your rights

In accordance with the GDPR and the Luxembourg law of 1 August 2018, you have the following rights over your personal data:

  • Right of access and information: you have the right to be informed in a concise, transparent, and understandable manner of how your data is processed, to obtain confirmation that data concerning you is processed (or not), to access it, and to obtain a copy.
  • Right of rectification: you have the right to obtain the rectification of your inaccurate data, and to request that your incomplete data be completed.
  • Right to erasure ("right to be forgotten"): in certain cases, you have the right to obtain the erasure of your data.
  • Right to restriction of processing: in certain cases, you have the right to obtain a restriction of the processing of your data.
  • Right to portability: you have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another controller. This right applies only to processing based on your consent or on the performance of a contract, and carried out by automated means.
  • Right of opposition: you have the right to oppose the processing of your data when it is based on our legitimate interest. We may, however, invoke compelling and legitimate grounds requiring the continuation of the processing. You also have the right, at any time and without having to justify it, to oppose the processing of your data for direct marketing purposes.

How to exercise these rights

To exercise the rights mentioned above, contact us:

  • by email at direction@lbo.lu;
  • by post to: EDISYS SA, 2 Rue Edmond Reuter, L-5326 Contern.

Please provide the information necessary to process your request: name, first name, email address concerned, and any information allowing confirmation of your identity (to avoid a third party exercising your rights in your place). We commit to responding within a period of one month from receipt of your request, except in cases of particular complexity.

Unsubscribing from commercial communications

You can unsubscribe from our commercial communications at any time:

  • by clicking on the "Unsubscribe" link at the bottom of each newsletter;
  • by writing to direction@lbo.lu with "Unsubscribe" as the subject.

Right to lodge a complaint with the CNPD

If you believe that your rights are not respected, you have the right to lodge a complaint with the competent supervisory authority:

Commission nationale pour la protection des données (CNPD)
15, boulevard du Jazz
L-4370 Belvaux, Grand Duchy of Luxembourg
cnpd.public.lu

Use of cookies

Cookies are small information files that a website may deposit on your device (computer, tablet, smartphone) via your browser. They are then stored and may be re-read during your subsequent visits.

We may use cookies for the following purposes:

  • Strictly necessary cookies: essential for the operation of the site (memorisation of your language choice, securing your navigation). They do not require your consent.
  • Audience measurement cookies: allow the production of anonymised audience statistics and improvement of the relevance of the site. They require your prior consent when deposited by third parties.
  • Personalisation cookies: allow the site to be adapted to your preferences (user interface, suggested content).

We may also collect your IP address in a shortened and non-identifying form for audience measurement purposes.

You can refuse or disable non-essential cookies at any time by configuring the privacy settings of your browser. Note, however, that restricting cookies may impact your user experience and prevent you from fully using certain features of the site.

Managing cookies by browser

To configure your browser to manage or disable cookies, follow the corresponding instructions:

  • Mozilla Firefox: Menu ☰ → "Settings" → "Privacy & Security" → "Cookies and Site Data" section. Official documentation: support.mozilla.org
  • Google Chrome: Menu ⋮ → "Settings" → "Privacy and Security" → "Third-party cookies". Official documentation: support.google.com/chrome
  • Microsoft Edge: Menu ··· → "Settings" → "Cookies and site permissions" → "Manage and delete cookies and site data".
  • Safari (macOS / iOS): "Settings" → "Safari" → "Privacy & Security". Official documentation: support.apple.com
  • Brave / Opera / other Chromium-based browsers: the procedure is similar to that of Chrome (settings menu → Privacy).

Changes to this policy

EDISYS SA reserves the right to modify this privacy policy at any time, in particular to take into account legislative, regulatory, or technical developments. Changes are published by their being placed online on this page. We invite you to consult this policy regularly to be aware of any developments.

Contact us

For any question relating to this privacy policy or to exercise your rights, contact us:

EDISYS SA
2 Rue Edmond Reuter, L-5326 Contern
Email: direction@lbo.lu
Phone: +352 661 754 747

Last updated: 29/05/2026 — site v0.2.6.2.