1. Privacy Notice

The Luxembourg Society for Allergology and Immunology (L.S.A.I. a.s.b.l.) is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Luxembourg law.

Data Controller
Luxembourg Society for Allergology and Immunology (L.S.A.I. a.s.b.l.)
4 rue Barblé
L-1210 Luxembourg
Luxembourg
Email: info@lsai.lu

When you use this website, personal data may be collected depending on the services and features you use. Contact forms may collect your name, email address and the content of your message. Donation forms may collect your name, email address, billing or postal address where provided, donation amount and other information necessary to process and document the donation. Payment information is processed by the payment provider selected at checkout, such as PayPal or Stripe, and is not stored on LSAI servers.

Newsletter subscriptions may collect your email address and, where provided, your name. Website hosting and security services may process technical information such as IP addresses, access times, browser or device information, server logs and error reports. Where enabled and where you have provided the required consent, analytics services such as Google Analytics may collect information relating to your use of the website, including pages visited, device information and website usage data.

Personal data is used only for specified and legitimate purposes, including responding to inquiries, managing donations, issuing donation receipts, sending newsletters where you have subscribed, maintaining website security, and improving the website and its services. Analytics data is used for statistical and performance purposes where the applicable consent requirements have been fulfilled.

The legal basis for processing depends on the purpose of the processing. This may include your consent, where required; the performance of a contract or the steps necessary to enter into a contract; compliance with legal obligations, including applicable accounting and tax requirements; and the legitimate interests of the LSAI, where applicable, such as maintaining website security and ensuring the proper operation of its services.

Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by applicable law. Contact form messages are generally retained for up to 2 years unless a longer period is justified by the nature of the request or an ongoing relationship. Donation and accounting records are retained for the period required by applicable Luxembourg accounting and tax obligations. Newsletter data is retained until you withdraw your consent or unsubscribe. Analytics data is retained according to the applicable configuration and retention settings of the analytics service.

Personal data may be shared with service providers where necessary to operate the website or provide requested services. These may include IONOS for website hosting and infrastructure, Stripe and PayPal for payment processing, GiveWP for donation management within the WordPress website, and Google services where analytics or other Google services are enabled. Such providers process personal data only as necessary for the services they provide and subject to applicable data protection requirements.

Where personal data is transferred outside the European Economic Area, the LSAI takes appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law, including where applicable an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.

You have rights under the GDPR, subject to applicable conditions and limitations, including the right to access your personal data, request its correction or deletion, request restriction of processing, object to certain processing activities, request data portability where applicable, and withdraw consent at any time where processing is based on consent.

Requests relating to your personal data can be sent to info@lsai.lu. You also have the right to lodge a complaint with the National Commission for Data Protection (CNPD), the Luxembourg supervisory authority responsible for data protection.

The LSAI implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures may include HTTPS encryption, access restrictions, secure website administration and appropriate security measures provided by its hosting and payment service providers.

---

2. Donations

Donations to the LSAI are voluntary and are generally non-refundable, except where a refund is required by applicable law or otherwise expressly provided by the LSAI. Payment information is processed securely by the selected payment provider, such as Stripe or PayPal. LSAI does not store full credit card numbers or other sensitive payment credentials on its own servers.

Donation information, which may include your name, email address, donation amount, donation date and donation history, is managed through the LSAI’s WordPress website and the GiveWP donation management system. This information is used to process and administer donations, issue donation receipts where applicable, communicate with donors when necessary, and comply with applicable accounting and tax obligations.

Donation and accounting records are retained for the period required by applicable Luxembourg legal, accounting and tax obligations. Where a specific retention period applies, the LSAI will retain the relevant records for that period.

---

3. Cookies and Tracking

This website uses cookies and similar technologies. Some cookies are strictly necessary for the operation, security and basic functionality of the website. Other cookies or tracking technologies, including analytics technologies, may be used to understand website traffic and improve website performance.

Where consent is required, non-essential cookies and tracking technologies are activated only after you have provided your consent through the website’s cookie consent mechanism. You can accept, refuse or modify your cookie preferences and withdraw your consent at any time through the cookie settings available on the website.

For more information about the cookies used on this website, their purposes, providers and retention periods, please consult the website’s cookie settings and cookie information provided through the cookie consent tool.

---

4. Accessibility Statement

The LSAI aims to make its website accessible to all users. The website is not yet fully compliant with all applicable accessibility standards, including WCAG 2.1, but continuous efforts are being made to improve accessibility.

Users who encounter accessibility issues or require assistance can contact info@lsai.lu.

---

5. Updates

This privacy notice may be updated periodically to reflect changes in our processing activities, service providers, applicable legislation or website functionality. The latest version will be published on this page, and users are encouraged to review it periodically.

Last updated: September 2026