Privacy Policy

1. An overview of data protection

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any information that can be used to personally identify you. For detailed information on data protection, please refer to the full Privacy Policy below.​

Data collection on this website

Who is responsible for data processing on this website?

Data on this website is processed by the website operator. You can find the operator’s contact details in the section “Information on the data controller” of this Privacy Policy.​

How do we collect your data?

On the one hand, your data is collected when you provide it to us, for example by entering data into a contact form. Other data is collected automatically or after your consent when you visit the website through our IT systems (e.g. browser type, operating system, time of page access). The collection of this data takes place automatically as soon as you enter this website.​

For what purposes do we use your data?

Part of the data is collected to ensure the error‑free provision of the website. Other data may be used to analyse your user behaviour.​

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. Furthermore, you have the right, under certain circumstances, to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding these rights and any other questions on the subject of data protection.

Analysis tools and third‑party tools

When you visit this website, your surfing behaviour may be statistically evaluated. This is carried out mainly with analysis programs. Detailed information about these analysis programs can be found in the following Privacy Policy.​

2. Hosting

We host the content of our website with the following provider:

WIX​

The use of WIX serves to fulfil contracts with our patients and interested parties and to ensure secure, fast and efficient provision of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR; where corresponding consent has been requested, processing is based additionally on Art. 6(1)(a) GDPR, which may be withdrawn at any time.

3. Controller and general information

Controller

The controller responsible for data processing on this website is:​

Prof. Dr. Reza Moussavian
Vascura Praxis / Vascura Klinik
Rue Emile Mayrisch
L‑4240 Esch‑sur‑Alzette, Luxembourg
Phone: +352 267126
E‑mail: info@vascura-praxis.lu​

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.​

Applicable data protection law

This Privacy Policy is based on the General Data Protection Regulation (GDPR) and the data protection provisions applicable in Luxembourg, in particular the “Loi du 1er août 2018 portant organisation de la Commission nationale pour la protection des données et du régime général sur la protection des données”.

Storage period

Unless a more specific storage period is stated in this Privacy Policy, personal data will remain with us until the purpose for the data processing no longer applies. If you make a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless there are other legally permissible reasons for the continued storage of your personal data (e.g. statutory retention periods); in such cases, deletion will take place after these reasons cease to apply.

Legal bases for data processing on this website

If you have given your consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR and, where special categories of personal data within the meaning of Art. 9(1) GDPR are processed, on the basis of Art. 9(2)(a) GDPR. In the event of explicit consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information in your end device (e.g. via device fingerprinting), the data processing additionally takes place on the basis of your consent under Art. 6(1)(a) GDPR in conjunction with the provisions applicable in Luxembourg implementing the ePrivacy Directive. You may withdraw your consent at any time. If your data is required for the performance of a contract or for pre‑contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. We also process data if this is necessary for compliance with a legal obligation (Art. 6(1)(c) GDPR) or on the basis of our legitimate interests (Art. 6(1)(f) GDPR).

Withdrawal of your consent

Many data processing operations are only possible with your explicit consent. You may withdraw consent that you have already given at any time; the lawfulness of the data processing carried out prior to the withdrawal remains unaffected.​

Right to object under Art. 21 GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions. Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing, including profiling to the extent that it is related to such direct marketing.

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

The competent supervisory authority in Luxembourg is:​

Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz
L‑4370 Belvaux
Luxembourg
Website: https://cnpd.public.lu
E‑mail: info@cnpd.lu

Right to data portability

You have the right to receive the data which we process on the basis of your consent or in performance of a contract, in a structured, commonly used and machine‑readable format, and to transmit those data to another controller. Where technically feasible, you may also request the direct transfer of the data to another controller.

Right of access, rectification and erasure

Within the scope of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, their origin and recipients and the purpose of data processing, and, where appropriate, a right to rectification or erasure of these data. You can contact us at any time for this purpose or for further questions regarding personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data where the legal requirements are met (e.g. where the accuracy of the data is contested, processing is unlawful, you need the data for the establishment, exercise or defence of legal claims, or you have objected under Art. 21 GDPR). In the event of restriction, these data – apart from storage – may only be processed in narrowly defined cases laid down by law.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser switching from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.​

Objection to unsolicited marketing e‑mails

We hereby object to the use of contact data published in the context of the legal notice obligation for the purpose of sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e‑mails.​

4. Data collection on this website

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide, will be stored by us for the purpose of processing the enquiry and in case of follow‑up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre‑contractual measures, or on our legitimate interest in the effective handling of enquiries (Art. 6(1)(f) GDPR) or on your consent pursuant to Art. 6(1)(a) GDPR. The data will be retained until the purpose of the storage no longer applies or you request erasure, unless statutory retention obligations apply.

Enquiries by e‑mail or phone

If you contact us by e‑mail or telephone, we will store and process your enquiry, including all personal data (e.g. name, contact details), for the purpose of handling your request. This data is processed on the basis of Art. 6(1)(b) GDPR if your request is related to the performance of a contract, otherwise on the basis of our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). The data will be deleted once the purpose of storage no longer applies or you request erasure, provided that no statutory retention periods prevent deletion.

5. Plugins and tools

OpenStreetMap

We use the OpenStreetMap (OSM) mapping service. The map material is provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The United Kingdom is considered a third country with an adequate level of data protection comparable to that of the EU. When you use the maps, a connection is established to the servers of the OpenStreetMap Foundation, and your IP address and information about your user behaviour may be transmitted. OpenStreetMap may use cookies or similar recognition technologies.

The use of OpenStreetMap is in the interest of an attractive presentation of our online services and of making it easy to find the locations indicated by us (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR, to the extent that consent covers the storage of cookies or access to information on the user’s device. Consent may be withdrawn at any time.

6. Our own services

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by e‑mail, post or via an online application form). Below we inform you about the scope, purpose and use of your personal data collected during the application process. Data is processed in accordance with the GDPR and the data protection provisions applicable in Luxembourg; your data will be treated confidentially.

Scope and purpose of data collection

When you send us an application, we process the associated personal data (e.g. contact and communication data, application documents, notes from interviews), insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis is Art. 6(1)(b) GDPR (pre‑contractual steps in view of an employment contract) and, where special categories of personal data under Art. 9(1) GDPR are concerned, Art. 9(2) GDPR. If you give your consent (e.g. to be included in an applicant pool), processing will additionally be based on Art. 6(1)(a) GDPR; consent may be withdrawn at any time. Within our organisation, your personal data will only be shared with persons involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing systems for the purpose of implementing the employment relationship on the basis of Art. 6(1)(b) GDPR.

Retention period of applicant data

If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months after the end of the application process. Thereafter, the data will be deleted and physical application documents destroyed, unless statutory retention obligations apply or a longer retention period is required for the establishment, exercise or defence of legal claims. Longer storage will only take place with your consent (Art. 6(1)(a) GDPR) or where statutory retention obligations prevent deletion.