Privacy notice

Controller

RIZ-ON, 19 rue Edmond Reuter, L-5326 Contern, Luxembourg. Contact for data protection matters: info@act-on.lu.

What we collect

• Contact form: name, company, work email, topics of interest and your optional message.
• Job applications: the information you choose to send.
• Website use: technical data and, with your consent, analytics data. See the cookie policy.

Why and on which legal basis

• Replying to your request: legitimate interest or pre-contractual steps (Art. 6(1)(b) and (f) GDPR).
• Recruitment: pre-contractual steps and legitimate interest.
• Analytics and marketing cookies: your consent (Art. 6(1)(a) GDPR).

Recipients

Your data is processed by RIZ-ON and, where necessary, by InfiniteMind Group companies and our service providers (hosting, CRM and email), under contract and data processing agreements.

International transfers

We favour providers that process data within the European Economic Area. Where a provider processes data outside the EEA, the transfer is covered by appropriate safeguards, such as the European Commission’s standard contractual clauses.

Retention

Contact requests: up to 3 years after our last exchange. Applications: up to 2 years, unless you ask us to delete them sooner. Consent records: for the duration of your consent, up to 13 months.

Your rights

You can request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time, by writing to info@act-on.lu. You may also lodge a complaint with the Commission nationale pour la protection des données (CNPD), Luxembourg.