The most up-to-date information about our airline: Network developments, improvements to our services, fleet developments as well as many other useful or interesting aspects of our service.

Registration is free of charge and may be cancelled at any time.

Data Protection

Please scroll down to read the data protection notice for video-surveillance.

Website Data Protection Notice

Cargolux International Airlines S.A. Luxembourg Airport, Luxembourg (hereafter referred to as “Cargolux” or “we”) is committed to protecting the privacy of its website visitors. Depending on your usage of our website (the “Website”), some information about you (hereinafter referred to as “personal data”) will be collected.

This Data Protection Notice is directed to users or visitors of our Website, as well as to any individuals or organizations’ representatives who interact with us through the Website (e.g., by browsing the Website, or submitting information or applications online) (together “you”). It explains how we use your personal data, complying with the rules currently stated in the General Data Protection Regulation EU 2016/679 (“GDPR”) on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

This Data Protection Notice may be modified to reflect changes on the Website or on our processing activities, to comply with legal amendments, or to integrate best practices. Updates of the Data Protection Notice will be published on our Website once available.

Who is the controller of your personal data?

Cargolux is responsible for collecting and processing your personal data in relation to your use of the Website.

What personal data does Cargolux collect?

We may process various types of personal data about you, including electronic identification data (eg. information concerning the name of the domain and host from which you access the internet; the browser software and operating system of your computer; the internet protocol (“IP”) address of your computer; the internet address of the site from which you linked directly to the Website; and the time and date you accessed the Website).

Other categories of personal data may be processed when you volunteer to identify yourself and provide requested information in order for Cargolux to reply, follow-up and manage your requests.

What are the purposes and the legal basis for Cargolux's processing activities?

Cargolux uses your personal data for the following purposes:

as regards information provided by you through our online forms: to answer your questions; handle your requests and applications; provide the services you have requested; send you our newsletter and marketing materials if you have chosen to subscribe; manage our business relationship with you; and manage and/or improve our services and the Website,
as regards technical data collected by us when you use this Website: to generate or improve our services and the Website.

Cargolux’s processing activities are based on the following legal basis:

to perform a contract or for pre-contractual measures with you or an organization you represent,
to comply with our legal and regulatory obligations,
pursuing our legitimate interests (e.g., to manage and improve our services or the Website, to send newsletters to which you have subscribed),
in exceptional situations, your consent.

Who do we share your personal data with?

We may disclose your personal data:

to members of the Cargolux group for the purposes described in the terms of use.
to third parties providing services to us, namely, website hosting, IT services and other similar services to enable them to provide their services.
on comment boards of the newsletter to which you can post information and that will be seen by other users of the website. Please note that information posted on these boards will be available to the public.
to third parties outside the Cargolux group, if obliged by competent authorities as per the applicable laws. The user will be informed accordingly, to the extent permitted by the applicable law.

How do we protect your personal data?

We have implemented technical and organizational security measures to protect your personal data from unauthorized access, improper use, alteration, unlawful or accidental destruction and loss.

Nevertheless, no data transmission or storage over the internet can be guaranteed to be 100% secured. If you feel that the security of any account you might have with us has been compromised, please immediately notify us of the problem by contacting us in accordance with the "Contacting Us" section below.

Where do we transfer your personal data to?

Your personal data are processed by us within the European Union and no transfer of your personal data occurs outside of the European Union/European Economic Area (EU/EEA).

For how long do we keep your personal data?

Unless a longer retention period is required or permitted by law, your personal data will be stored during the necessary period, according to the specific purpose:

as regards information you provided on our online forms: for the time necessary to respond to your question or handle your request. The retention of such information will normally not exceed two years from registration, unless you have requested us to delete such information or application,
as regards technical data collected during your use of the Website: for a maximum period of six months from the date of collection.

After these retention periods the data will be completely deleted from Cargolux’s system, saved in case of dispute or legal claim (insofar as necessary to exercise or defend our rights) or if any legal obligations of retaining such data apply.

With regard to the Newsletter, you will be able to unsubscribe at any moment and your personal data will be deleted upon your request.

What are your rights?

In accordance with the applicable data protection law (and subject to conditions and restrictions set forth therein), you may exercise at any time the following rights in relation to your personal data:

right of access: which enables you to obtain from us confirmation of whether your personal data is being processed or not and, if so, obtain access to such data; considering that we process a large quantity of information; when exercising your right of access you should specify the transaction, information or processing activities to which your request relates;
right to rectification: which enables you to obtain from us the correction and/or integration of any of your personal data that are incorrect and/or incomplete;
right to erasure: which enables you, in specific cases provided for by art. 17 GDPR, to obtain from us the erasure of your personal data;
right to restriction of processing, which enables you, in the specific cases provided for by art. 18 of the GDPR, to restrict the processing of your personal data by us;
right to object: which enables you to object to the processing of your personal data when certain conditions are met;
right to data portability: which enables you, in certain cases (subject to particular to technical feasibility) and only with regard to the data you have provided, to request receipt of your personal data in a structured and commonly machine-readable format.
right to lodge a complaint: under which you are entitled to lodge a formal complaint with the Commission nationale pour la protection des données (CNPD).

If you have provided your consent to the processing of your personal data, you can withdraw such consent at any time.

If you no longer want to receive our newsletter and related marketing materials, please use the Unsubscribe option in the mailings.

To exercise any of these rights, you may contact us by email dataprotection@cargolux.com or by postal mail:

Cargolux Airlines International S.A.
Compliance Department
Luxembourg Airport
L-2990 Luxembourg
Luxembourg

DATA PROTECTION NOTICE FOR VIDEO-SURVEILLANCE

Cargolux International Airlines S.A., Luxembourg Airport, Luxembourg (hereafter referred to as “Cargolux” or “we”) is committed to the protection of your personal data in accordance with data protection legislation, especially the General Data Protection Regulation EU 2016/679 (the “GDPR”).

This Data Protection Notice is intended to inform Cargolux employees, visitors of its buildings, infrastructure and site (“you”) on the use of a video-surveillance system (the “video-surveillance system”), how long we keep data, what rights you have and how you can exercise them.

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

Cargolux is responsible, as a data controller, for collecting and processing your personal data under the video-surveillance system, determining the purposes and means of such processing.

2. WHAT PERSONAL DATA DO WE PROCESS?

We collect and use your image when you enter or circulate in buildings or locations covered by our video-surveillance system (the “premises”). Pictograms are displayed at the entrance of, and around the premises. The data we collect include the following categories of data:

images caught on cameras installed in monitored premises indicated by pictograms (no sound is recorded),
dates and hours of recordings.

3. WHY DO WE PROCESS YOUR PERSONAL DATA (PURPOSE AND LEGAL BASIS)?

We collect and use your personal data for the following purposes:

to control access to and to ensure the security of the premises, the safety of Cargolux staff and visitors, as well as property, assets and information located or stored in the premises;
to prevent, deter, and if necessary, investigate unauthorized access, including unauthorised access to secure premises and protected rooms, IT infrastructure, or operational information;
to prevent, detect and investigate unauthorised or unacceptable behaviours, including potential criminal offences, such as theft of equipment or assets owned by Cargolux, its customers, visitors or staff or threats to the safety of persons present in the premises (in case of, e.g. fire, accident or physical assault).

The video-surveillance system is not used for purposes that are incompatible with those detailed above.

Where allowed by law, the video-surveillance system may be used as an investigative tool or to obtain evidence in internal investigations or disciplinary procedures, including in case of a security incident.

We collect your personal data to pursue Cargolux’s legitimate interests (art. 6, 1 (f) GDPR), including access control, security of premises, safety of staff and visitors, protection of our interest and rights in the event of investigated, suspected or actual violations or criminal offences.

Where applied to Cargolux’s staff, video-surveillance systems comply with article L. 261-1 of the Luxembourg Labour Code.

4. WHO CAN ACCESS YOUR PERSONAL DATA?

In order to fulfil the aforementioned purposes, your personal data can only be accessed by a limited number of staff from the Corporate Security Department.

We may communicate your personal data to:

service providers/vendors (such as a contracted security company) that perform services on our behalf,
the Police, law enforcement or other government and regulatory bodies or agencies, upon request and to the extent permitted by law.

5. WHERE DO WE TRANSFER YOUR PERSONAL DATA?

Your personal data are processed by us within the European Union and no transfer of your personal data occurs outside of the European Union/European Economic Area (EU/EEA).

6. SECURITY OF YOUR PERSONAL DATA

The processing of your personal data is carried out through IT, electronic and manual tools, with logics strictly related to the aforementioned purposes and, in any event, in compliance with the appropriate technical and organisational measures required by law to ensure a level of security that is adequate to the risk, in order to avoid unauthorised loss of or access to your data.

7. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will retain your personal data for 21 days from their recording, except in the event of an incident, investigation or legal proceedings. At the end of that period your personal data will be deleted or destroyed.

8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

In accordance with applicable data protection law (and subject to conditions and restrictions set forth therein), you may exercise at any time your right to access, which enables you to obtain from us confirmation on whether your personal data are being processed or not and, if so, obtain access to such data; we process a large quantity of information, and can thus request, in accordance with GDPR, that before the information is provided, you specify the transaction, information or processing activities to which your request relates.

In certain limited cases (in which case we will analyse whether the conditions for the exercise of such rights are fulfilled, in line with the GDPR), you may exercise the following rights in relation to your personal data:

right to erasure: which enables you, in specific cases provided for by art. 17 GDPR, to obtain from us the erasure of your personal data;
right to restriction of processing: which enables you, in the specific cases provided for by art. 18 of the GDPR, to restrict the processing of your personal data by us;
right to object: which enables you to object to the processing of your personal data when certain conditions are met.

To exercise any of these rights, you may contact us by email dataprotection@cargolux.com or by postal mail:

Cargolux Airlines International S.A.
Compliance Department
Luxembourg Airport
L-2990 Luxembourg
Luxembourg

You have the right to lodge a formal complaint with the Commission nationale pour la protection des données.

9. CHANGES TO THIS DATA PROTECTION NOTICE FOR VIDEO-SURVEILLANCE

Changes may occur in the way we process personal data. In case these changes oblige us to update this Data Protection Notice for Video-surveillance, we will clearly communicate it to you, either via our website or via other appropriate means. The latest applicable version will always be available on our website.