Privacy Policy

This policy explains how EBMC GROUP processes the personal data collected on www.ebmcgroup.eu: which data, for what purpose, on what legal basis, for how long, who it is shared with and how to exercise your rights.

It applies Regulation (EU) 2016/679 (GDPR), the Luxembourg law of 1 August 2018 on the organisation of the National Commission for Data Protection, and the amended Luxembourg law of 30 May 2005 on data protection in the electronic communications sector. It does not cover third-party sites we link to, such as LinkedIn, which apply their own rules.

The data controller is:

• EBMC GROUP
• 20 Op Zaemer, L-4959 Bascharage, Luxembourg
• E-mail: contact@ebmcgroup.eu
• Phone: +352 26 50 61

For any question about your data or to exercise your rights, write to contact@ebmcgroup.eu with “Personal data” in the subject line.

The site involves the processing operations below. For each one you will find its purpose, the data concerned, its legal basis, how long the data is kept and whether the information requested is mandatory.

Within EBMC GROUP, your data is only accessible to the people who need it: the sales team for company requests, the recruitment team for applications.

We also use the following service providers. They act as processors, on our instructions and under data protection commitments (Art. 28 GDPR).

We do not sell or rent your data. It is only disclosed to authorities where the law requires it.

Some providers process data outside the European Economic Area. Transfers to the United States rely on the European Commission's adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework, for certified companies, supplemented where appropriate by the Commission's standard contractual clauses.

Transfers to countries without an adequacy decision, such as Saudi Arabia for our sales management software, are covered by appropriate safeguards within the meaning of Article 46 GDPR. You can obtain information about these safeguards by writing to contact@ebmcgroup.eu.

A cookie or tracker is information stored on or read from your device. Only strictly necessary trackers work without your consent. Google Analytics is only enabled if you click “Accept”: continuing to browse without making a choice is not consent.

Vercel Web Analytics audience measurement sets no cookie and does not use your browser's storage.

You can change your choice at any time from the “Cookie settings” link at the bottom of every page, as easily as you gave it. If you withdraw your consent, Google Analytics is disabled and its cookies are deleted. Whether you accepted or refused, you are asked again after 6 months.

You can also block or delete cookies in your browser settings.

You have the following rights over your data:

• Access: find out whether we process data about you and obtain a copy (Art. 15 GDPR).
• Rectification: have inaccurate or incomplete data corrected (Art. 16).
• Erasure: have your data deleted in the cases provided for by the GDPR (Art. 17).
• Restriction: have the use of your data suspended, for example while a dispute is checked (Art. 18).
• Portability: receive the data you provided to us in a structured, commonly used format, or have it sent to another organisation, where processing is based on your consent or on pre-contractual steps (Art. 20).
• Objection: object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest, and without giving reasons to any use of your data for direct marketing (Art. 21).
• Withdrawal of consent: withdraw your consent to Google Analytics at any time, without affecting processing carried out before (Art. 7(3)).

To exercise these rights, write to contact@ebmcgroup.eu or to EBMC GROUP, 20 Op Zaemer, L-4959 Bascharage, Luxembourg. We reply within one month, which may be extended by two months for a complex request; we will let you know if so. If we have reasonable doubts about your identity, we may ask you for proof.

If you believe your rights are not respected, you can lodge a complaint with the National Commission for Data Protection (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg, cnpd.public.lu, or with the supervisory authority of the EU country where you live or work, for example the Agencia Española de Protección de Datos (AEPD) in Spain.

We do not take any decision based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

Exchanges with the site are encrypted (HTTPS). CVs sent through the site are not stored on its servers: they are passed directly, server to server, to our recruitment software. Form content is not recorded in the site's technical logs. Access to data is restricted to the people who need it, and our providers are bound by security and confidentiality obligations.

We may update this policy, in particular when we add a processing operation or a provider. The date of the last update appears at the top of this page. If a change concerns the trackers that require your consent, you will be asked for your choice again.