Privacy notice
This notice explains how the China Cultural Center Luxembourg (CCCL) handles personal information collected through this website. We aim to keep that handling minimal, transparent, and in line with the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is the China Cultural Center Luxembourg, 3, Boulevard Joseph II, L-1840 Luxembourg. For any privacy-related question or request, write to Info@ccclux.lu.
2. What we collect, and why
Newsletter form
When you use the form on /newsletter to subscribe or unsubscribe, we receive your email address, the topic you selected, and any free-text note you choose to add. These details are sent by email to a member of our team, who adds or removes you from our mailing list by hand. We rely on your active submission of the form as the legal basis for this processing (GDPR Art. 6 §1 a — consent).
Server access logs
Like nearly every website, our hosting layer keeps short-lived access logs that record each visit: the requesting IP address, the date and time, the URL requested, and a status code. We use these logs strictly to operate the site safely (detecting attacks, debugging errors). The legal basis is our legitimate interest in keeping the service available and secure (GDPR Art. 6 §1 f). Logs are rotated automatically and kept for no longer than 30 days.
Editorial cookie
A small number of CCCL staff members can sign in to a private
editorial area to update event listings and other content. When
they do, a session cookie named ccc_session is
placed on their device. This cookie is not used to track
ordinary visitors — it is only set after a successful sign-in
from /admin/login, is marked HttpOnly, and expires
after seven days.
What we don't collect
We do not use any third-party analytics, advertising trackers, social-media pixels, or behaviour-profiling tools. No data is sold or shared for marketing purposes.
3. How long we keep it
- Newsletter address: until you ask to be removed (the unsubscribe option on the same form).
- Server logs: 30 days.
- Editorial session cookie: 7 days.
4. Who has access
Personal information stays inside the CCCL. We use a hosting provider in the European Union to run the website server; that provider can technically access the server filesystem as part of normal operations, but not the content we hold there. We do not transfer personal data outside the European Economic Area.
5. Your rights
Under the GDPR you may, at any time:
- ask what data we hold about you (access);
- ask us to correct anything that is wrong (rectification);
- ask us to delete your data (erasure);
- object to a specific use;
- withdraw a consent you previously gave (e.g. unsubscribe).
Send the request to Info@ccclux.lu. We will respond within thirty days. If you believe we have not handled your request properly, you may lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (cnpd.public.lu).
6. Updates to this notice
If we make a material change — for instance, if we start using a new tool that processes personal data — we will update this page and refresh the date at the top. The previous wording remains available on request.