• Home
  • Social Media privacy notice

Social Media privacy notice

Last revised: December 2024

1. An overview of data protection

The Luxembourg Institute of Science and Technology (hereafter “LIST”, “We”) is committed to ensure the highest standards of data protection in compliance with the applicable legislation, notably with reference to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter “GDPR”).

The present document aims at illustrating what personal data we collect about you when you access any of our social media channels (hereafter “Social Media Pages”), the reason why LIST uses your data and, as the case may be, share your data and the applicable retention periods. Additionally, the notice also provides you with information regarding your rights, how to exercise them and whom you can contact in case of any query.

Social media refers to a variety of online internet applications that enable users to create their own content and interact with other users. Examples of social media providers are Facebook, Instagram, LinkedIn, YouTube and X.

2. Scope of the notice

The present notice is directed to the social media users and visitors of LIST's Social Media Pages (hereafter "You").

3. Identity of the data controller

The data controller is LIST, having its registered office at 5, Avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette, Luxembourg. LIST maintains publicly accessible profiles in several social media platforms. If you visit one of our Social Media Pages, your personal data is processed by both the social media operator and by LIST. However, despite both LIST and the social media operator being independent Data Controllers, we have no influence on the data processing activities conducted by the social media operator. For such details, you can refer to the Terms of Use and Privacy Policy of the respective social media operator.

4. Social Media Pages that we operate

LIST operates on several Social Media Pages including but not limited to the following social media operators:

5. Why and how your personal data is processed

LIST collects and uses your personal data for the following purposes:

Purpose Details
To reach, monitor and assess LIST social media objectives We may monitor and delete (if We deem necessary and to the extent we are allowed to so, as this is usually controlled by the social media operator) comments, questions, and other postings you make on our Social Media Pages to protect our interests, our employees, clients, partners and others against any prohibited activities or behaviour by users of these pages which could be damaging to LIST’s reputation and confidential information.
To disseminate LIST's activities on LIST's Social Media Pages This includes posts and publications necessary for the dissemination of an event, a research project, an achievement, the start of a collaboration between LIST and other organisations, or for any other announcements regarding LIST"s strategy, administration and personnel. LIST may process your user profile data which is publicly available through the social media platforms to mention You properly in a post concerning You (e.g. partnership, fundings, researcher visitor). LIST ensures that all content uploaded on LIST’s Social Media Pages is created lawfully and is limited to what is strictly necessary for the dissemination of LIST’s activities.
To communicate with You In this case we will process your personal data at our discretion to inform you about our new activities on social media if you are subscribed to our page/channel and to reply to you when you get in touch with us directly, for example, by leaving a comment or by sending us a message via the social media channel.

6. How we obtain the personal data of Participants

We obtain the personal data directly from You and from social media platforms.

7. Categories of personal data we process

The categories of personal data that we collect about you may vary depending on the type of Event. Those include:

  • Personal data derived from the users’ profile (such as name and surname, username, geographical area, age, gender and other personal characteristics, such as marital status, nationality, occupation or academic record);
  • Information you enter on the social media networks (such as comments, photos, videos, reactions, public messages, professional information and updates as published by the respective social media network),
  • Cookies: For information about the cookies that LIST use, we suggest that you read our Cookies Notice available on our website. The external social media platforms may also be using cookies which will be subject to their own terms and conditions.

For statistical, analytical and monitoring purposes, We only use aggregated data, such as numbers of followers, number of interactions (likes, comments, shares). We do not collect or store any other data. The individual social media channels may also be permitted to share certain information with us in accordance with your personalised privacy settings on each of those channels.

8. Legal basis for processing

Below you can find the list of legal basis on whose grounds LIST collects and processes Participants’ personal data:

Purpose Legal basis
To reach, monitor and assess LIST social media objectives LIST's legitimate interest to understand LIST's impact on society, how LIST is discussed and perceived in social media so that we can take into account the needs of the general public and our targeted audiences in our communications. The conclusions drawn from this processing help shape LIST's reputation, communication strategy and a more effective and efficient public communication
To disseminate LIST's activities on LIST's Social Media Pages LIST's legitimate interest to reach the public by communicating/disseminating LIST activities, having in mind that as a public RTO we have the mission to transfer technology. This activity allows us not only to comply with the legal requirement of transferring knowledge to the public but also to attract new partners and researchers, hence grow our research activities and strengthen our position in the domain of research.
To communicate with You LIST’s legitimate interest to manage its public relations and communication.

 

9. Share of your personal data with third parties

The data you enter on our Social Media Pages, such as comments, videos, pictures, likes, public messages, etc., are published by the social media platform and as such an unlimited number of users has access to this data depending on your privacy settings on each social media network. LIST may share your personal data with:

  • LIST’s internal departments on a strict need-to-know basis, such as Communication, legal, IT.
  • External service providers that perform services on LIST behalf, such as IT service providers.,

10. Ensuring personal data security and integrity

In compliance with the applicable data protection legislation, LIST has put in place appropriate technical and organisational measures in order to prevent or act upon any unauthorised and unlawful processing or disclosure, accidental loss, modification or destruction of personal data. These measures are implemented based on the current state of art, an evaluation of the risks derived by the processing activity and the need to protect personal data. Such technical and organisation measures are regularly updated and/or adjusted to new technical developments or any organisational change that may affect LIST.

In particular, access on a need-to-know basis has been implemented to ensure only staff with appropriate need for the purpose has access to your personal data. Additionally, we have data processing agreements in place with our processors.

11. Data retention periods

Any Personal Data acquired by us via Social Media Pages is processed in accordance with our Data Retention Schedule. LIST will only retain your personal for a period of time that is strictly necessary for the purposes for which we collect your data, without prejudice to LIST to keep them for a longer duration for legal and/or regulatory obligations applying to LIST or due to exceptional situations that would justify them being kept longer (judicial procedure, etc.).

Please note that LIST has no oversight over the duration for which your personal data is held by social network operators, and should you wish to exercise any of your rights under the applicable data protection laws, you need to contact the respective social media provider directly.

12. Your rights and how to exercise them

With regards to your personal data collected and processed by LIST, you may exercise at any time the following rights:

  • Right to access: You have the right to receive confirmation about whether or not your personal data is being processed by LIST. If that is the case, you have the right to know what data is being collected and processed and to obtain of copy of it;
  • Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request to have it rectified;
  • Right to erasure: Subject to certain conditions specified in art. 17 of the GDPR, you have the right to have your personal data deleted by LIST;
  • Right to restriction of processing: Subject to certain conditions specified in art. 18 of the GDPR, you have the right to obtain restriction of the processing of your personal data performed by LIST;
  • Right to data portability: Subject to certain conditions specified in art. 20 of the GDPR, you have the right to obtain a copy of the personal data you provided to LIST in in a structured, commonly used and machine-readable format and to request the transfer of these data to another data controller;
  • Right to object: You have the right to object the processing of your personal data when the conditions set out in art. 21 of the GDPR apply;
  • Right to withdraw consent: If LIST is processing your personal data based on your consent, you have the right to withdraw that consent at any time. The withdrawal of such consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD). More information on how to lodge a complaint are available on CNPD’s website: https://cnpd.public.lu.

You may exercise any of these rights by contacting our Data Protection Officer (DPO) via our online form available at: https://www.list.lu/en/support/dpo-contact-form/

13. Changes to this notice

LIST may make changes to this privacy notice from time to time, to reflect our current privacy practices or to comply with changes in the applicable data protection legislation. LIST encourages you to regularly visit this page in order to remain informed on our data protection policies.

Share this page: