Privacy policy

WHAT WE COLLECT AND WHY

​

• Contact and enquiries. When you reach out via our website form, email, post, or telephone, we collect the information you provide — your name, email address, and any details shared in that communication — in order to respond to your query and manage our correspondence with you.

• Client services. To deliver and tailor our services, manage your account, process payments, and issue certificates, we process relevant contact and service information you provide during the course of our work together. This may include advisory, board, governance, regulatory, compliance, sustainability, leadership development, and training services.

• Orders and transactions. When you purchase through our website, we use your name, email address, telephone number, and postal address to fulfil and deliver your order.

• Newsletters and updates. Where you have signed up, we send relevant updates to keep you informed about our services and any developments we think will be useful to you.

• Website usage. We collect technical data about how you use our website to monitor, analyse, and improve our services. We also moderate blog comments to prevent illegal, harmful, or spam content. Please see our cookies policy for full details.

​

OUR LEGAL BASIS FOR PROCESSING

​

Under data protection law, we must have a lawful basis for processing personal data. We rely on the following:

​

• Contract performance — Processing your data is necessary to provide and tailor our services to you, and to fulfil orders you place with us.

• Legitimate interests — For handling correspondence, sending updates to existing clients, monitoring and improving our website, and managing our business operations. We have balanced these interests against your rights and are satisfied they do not override them.

• Consent — For marketing emails to non-clients: we only send these where you have explicitly signed up to receive them. You may withdraw consent at any time by unsubscribing.

• Legal obligation — Certain records, such as VAT and invoicing data, must be retained for periods prescribed by law.

​

We may share personal data with trusted service providers who support the operation of our website, communications, payment processing, learning platforms, and business administration. These providers process personal data only on our instructions and under appropriate contractual safeguards.

​

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including European Commission Standard Contractual Clauses where required.

​

​

Cookies & Website Analytics

​

Our website uses essential cookies and similar technologies required for the secure operation and functionality of the website.

These cookies do not require consent under applicable law.

 

We do not currently use advertising or marketing cookies.

HOW LONG WE KEEP YOUR DATA & HOW WE PROTECT IT

​

Retention Periods:

​

• Client records: Duration of relationship + 6 years

• General enquiries: 6 years from last contact

• Newsletter subscribers: Until unsubscribed

• Financial and VAT records: As required by law

​

 

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

​

YOUR RIGHTS

​

You have the following rights under data protection law. To exercise any of them, contact us at info@linkvalue.lu.

 

We will respond within one month of receiving your request and any necessary proof of identity.

​

• Access: Request a copy of all personal data we hold about you.

• Portability: Receive your data in a common electronic format, or ask us to transfer it to a third party where technically feasible.

• Object: Challenge processing where we rely on legitimate interests. We may continue processing if we have compelling grounds to do so.

• Opt out: Unsubscribe from marketing at any time using the link in any email, or by contacting us directly.

• Rectification: Ask us to correct inaccurate data. We will update it as soon as we are satisfied the new data is accurate.

• Erasure: Request deletion of your data where we have processed it unlawfully or no longer need it.

• Restriction: Ask us to pause processing — for example, while we verify accuracy — without deleting your data.

 

You have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission Nationale pour la Protection des Données (CNPD) at www.cnpd.lu.