Last updated: 13.02.2026
This Privacy Policy explains how Luxembourg School of Business (LSB) (“LSB”, “we”, “us”) collects, uses, shares, and protects your personal data when you visit our website, interact with our online forms (including brochure downloads, event registrations, and contact requests), or otherwise communicate with us through the website.
We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) and relevant rules on electronic marketing communications.
If you cannot, or will not, provide personal data we reasonably require, we may be unable to provide you with the information or services you requested (for example, access to a brochure or response to an enquiry).
LSB is the data controller responsible for your personal data.
Our details
Legal name: Luxembourg School of Business a.s.b.l. (association sans but lucratif)
Address: 46 Côté d’Eich, 1450 Luxembourg, Luxembourg
VAT: LU27398543
Contact: info@luxsb.lu
“Personal data” means any information that relates to an identified or identifiable individual.
Depending on how you use our website, we may collect the following categories of personal data:
First name, last name
Email address
Phone number
Country of residence (if provided)
Program of interest and related information you submit via forms
Information you provide in messages or forms (e.g., questions, preferences, comments)
Records of your requests (e.g., brochure requests, event signups)
IP address
Device and browser information (e.g., browser type/version, operating system)
Time zone and approximate location derived from IP
Pages visited, time spent, clicks and navigation patterns
Referring/exit pages and similar browsing information
We may collect information through cookies and similar technologies (see Section 8).
We do not intentionally collect special category data (e.g., health data) through our website forms. Please do not submit sensitive information unless we explicitly request it for a specific purpose.
We collect personal data in the following ways:
Directly from you: when you fill out forms (brochure downloads, contact forms, event registrations), request information, or contact us.
Automatically: through cookies and similar technologies when you browse our website.
From third parties (where applicable): for example, where you interact with us via social media or where we use service providers for analytics, form handling, CRM, and email delivery (see Section 9).
We only use your personal data when we have a lawful basis to do so. Depending on the context, we may rely on:
Consent (e.g., for marketing communications where required)
Steps prior to entering a contract / contract necessity (e.g., responding to your admissions-related request)
Legitimate interests (e.g., improving our website, ensuring security, handling enquiries efficiently)
Legal obligation (e.g., compliance and record-keeping where required)
Legal claims (e.g., establishing, exercising, or defending legal claims)
We may process your personal data to:
Provide what you requested
Provide access to brochures and requested materials
Respond to enquiries and communicate with you about your request
Admissions and programme communications
Support your information journey (e.g., programme details, application steps, deadlines, events relevant to your enquiry)
Marketing communications (where applicable)
Send updates about programmes, events, deadlines, and related opportunities (see Section 7)
Operate and improve our website
Monitor performance and improve user experience
Understand which pages and content are most helpful
Security and fraud prevention
Protect our website, systems, and users
Detect and prevent misuse or security incidents
Compliance and record-keeping
Maintain records of requests, consent logs, and opt-out preferences
Meet applicable legal, regulatory, or reporting requirements
If you choose not to provide required data (e.g., email address), we may not be able to:
send you requested materials (such as a brochure),
register you for an event, or
respond to your enquiry
If you request a brochure, register for an event, or submit an enquiry, we may contact you to:
provide the material you requested and
follow up with relevant information about the programme(s) you expressed interest in.
In addition, where you have provided consent (for example via a checkbox on our forms), we may send you marketing communications about:
programmes, events, deadlines, scholarships, webinars, open days, and related opportunities.
Consent: where required for marketing communications, we rely on your consent given at the point you sign up or request materials.
Legitimate interests / steps prior to entering a contract: we may process limited data to respond to your request and provide admissions-related information connected to your enquiry.
You can stop receiving marketing communications at any time by:
clicking the unsubscribe link in any marketing email we send, or
contacting us at info@luxsb.lu.
Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew it.
If you prefer not to receive marketing communications, you may request the brochure by emailing info@luxsb.lu. We will provide the requested material and record your preference not to receive marketing communications.
If you unsubscribe or object to marketing, we may keep a limited record of your details (e.g., email address) on a suppression list to ensure we respect your preference and do not send further marketing communications.
We use cookies and similar technologies to ensure our website works properly and to understand how it is used.
Depending on your preferences and settings, cookies may include:
Strictly necessary cookies (required for core functionality)
Analytics cookies (to understand site usage and improve performance)
Marketing cookies (to measure and improve campaigns, where used)
Where required, we will ask for your preferences through a cookie banner or settings tool. You can also control cookies through your browser settings.
For more information, please see our Cookie Policy (if available) and/or the cookie preferences tool on our website.
We do not sell your personal data. We may share your personal data with trusted recipients only as necessary for the purposes described in this policy, including:
Service providers / processors that help us operate our website, manage forms, handle CRM and communications, and provide IT support.
Examples may include CRM and email delivery providers such as Zoho (where used), website hosting providers, analytics providers, and technical support vendors.
Professional advisors (e.g., legal, audit, insurance) where necessary.
Authorities or third parties where required by law, or to protect our rights, safety, and systems.
All service providers are required to process personal data only on our instructions and to implement appropriate security measures.
Some of our service providers may process personal data outside the European Economic Area. Where we transfer personal data internationally, we will ensure appropriate safeguards are in place (for example, contractual safeguards and other measures required under applicable law).
We implement appropriate organizational and technical measures to protect your personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction.
Access to your personal data is limited to personnel and service providers who need it for legitimate purposes and are subject to confidentiality obligations.
We keep your personal data only for as long as necessary to achieve the purposes described in this policy, including to meet legal, accounting, or reporting requirements.
Typical retention approach:
Enquiries and brochure requests: retained as needed to handle your request and maintain our admissions records.
Marketing communications: retained until you unsubscribe/withdraw consent, plus a limited period to maintain compliance records and suppression lists.
Technical/cookie data: retained according to cookie settings and technical necessity.
When retention is no longer necessary, we delete or anonymize data in accordance with our procedures.
Subject to applicable law, you may have the right to:
request access to your personal data
request correction of inaccurate or incomplete data
request erasure (in certain cases)
request restriction of processing
object to processing (including direct marketing)
request data portability (where applicable)
withdraw consent at any time (where processing is based on consent)
To exercise your rights, contact info@luxsb.lu.
You also have the right to lodge a complaint with the national supervisory authority in Luxembourg, the Commission nationale pour la protection des données (CNPD). We would appreciate the opportunity to address your concerns first, so please contact us initially.
Our website and marketing communications are not intended for children. If you are under the age where parental consent is required under applicable law, you should not submit personal data without appropriate consent from a parent or legal guardian.
Our website may contain links to third-party websites or services. This Privacy Policy does not apply to third parties, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will publish updates on this page and revise the “Last updated” date above.
If you have questions about this Privacy Policy, or if you wish to exercise your rights, please contact us:
Email: info@luxsb.lu
Address: Luxembourg School of Business a.s.b.l., 46 Côté d’Eich, 1450 Luxembourg, Luxembourg