Privacy Policy

Shine a light is aware that the protection of personal data is at the heart of your concerns. This personal data protection policy describes the types of personal data of people we collect on the website, how we can use it, to whom we can communicate it and the choices available regarding our use of data. This Data Protection Policy also describes the measures we take to protect personal data, how long we keep it and how people can contact us to learn about our data protection practices and exercise their rights.

This privacy statement aims to inform you of the processing of your personal data (as defined by Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of this data) as well as your rights in this regard.

We process your personal data in accordance with any data protection law applicable in Luxembourg, in particular the law of August 2nd 2002 as amended and any subsequent law as well as, since 25 May 2018, the regulations.


What personal data are likely to be processed ?

As a user of the website, you have the option of providing us with personal data in various ways. This data is collected and processed in order to provide you with personalized service and to improve it.

Your email address and other personal data is collected when you complete the online form, send an email to our contact email address or any other contact email address belonging to Shine a light.

In addition, Shine a light may collect personal data when you register for our newsletter, but also when you apply for a job offer or through social networks, such as Instagram, LinkedIn, Facebook, in as part of the management of a user request.

Whenever possible, when sending a request to our contact email address via the website or via our online form, please ensure that no personal data is mentioned there which is superfluous in the context of its management or its treatment. Be especially careful not to include sensitive data about an associated third party or yourself in the body of your request or its attachments. When information relating to another natural person appears in a message that a user sends to us, we assume that the latter is lawfully processing the personal data in question, that he has informed the data subject that he would share their personal data with Shine a light, that they have obtained the permission of said person to do so and that they have provided them with a copy of this privacy statement.

If you intentionally mention such sensitive data or other personal data which are superfluous in the context of the management of your request in the body of your email or in its attachments, you admit and accept without reservation that Shine a light may need to process them when reviewing or processing your request and may keep them.

The data collected is transferred by email to the relevant services of Shine a light and is reserved for the sole use of these services. We do not share the personal data we collect about you.

How is the data collected ?

Shine a light collects, processes and protects your personal data when:

  • you visit our website
  • you subscribe to our newsletter
  • you are applying for a job offer
  • you use our contact form

The legal grounds for processing your personal data depend on the nature of each request.

The processing of your personal data is required if it is (together or separately, depending on the circumstances):

  • necessary for the execution of pre-contractual measures when opening discussions with any user;
  • necessary to meet the legitimate interests of Shine a light, such as the search for maximum efficiency (particularly in terms of administration, in-house analysis, organisational and technical measures or even safety and efficiency information technology) for the continued operation of the website.
As long as you provide personal data directly in your email, we consider that you consent (or that the concerned person has allowed you) to provide us information for the purposes of managing and monitoring your request.


Are cookies installed to optimize the user experience?

Definition: a cookie is a small file linked to a domain (i.e. in most cases to all the pages from the same site) and stored by a server in user’s computer or device.

This file is systematically sent during repeated contacts with the same domain.

Shine a light uses cookies for statistical purposes, to measure and analyse the effectiveness of our communications, to manage and improve the website, to monitor and understand your browsing habits. You can block the installation of certain types of cookies on your computer by making the appropriate settings in your browser.


Google analytics technical cookies

This website uses Google Analytics, a web analysis service provided by Google Inc. The information generated by the cookie on your use of the website (including your IP address) will be transmitted and saved on a server from Google. Google uses this information for the purpose of evaluating your use of the site, compiling reports on site activities for its operator and providing other services related to the site activity and internet use.
Google may communicate this information to third parties in the event of a legal obligation or when these third parties process the data in question on behalf of Google. Google does not link your IP address to other Google data in any way. You can disable the installation of cookies by changing settings in your browser. However, such deactivation could prevent the use of certain features of the website. By using this website, you expressly consent to the processing of your data being collected by Google under the conditions and for the purposes described above.


Third-party application cookies

The site may contain applications that allow the user to promote or share content with other people, in particular on social networks, such as Facebook, LinkedIn, Twitter, Pinterest, etc. Even if the user has not used these sharing buttons or applications, social networks may follow their browsing activity if their account or session is activated on their computer or device at that time. Shine a light advises the user to learn about the data protection terms and policies of the sites of these social networks.

What measures are taken to protect your data?

Shine a light implements the appropriate technical and organisational measures concerning the processing of personal data in order to guarantee a level of security adapted to the risk.


How long is the data kept ?

Personal data is not kept longer than necessary to respond to the aforementioned requests, subject to the statutory limitation period and cases where applicable law allows or requires that said personal data be kept for a given period after the end of relationship.

What are your rights regarding your personal data ?

To the fullest extent permitted by the regulations in force and in application of the GDPR, you have various rights:

  • A right of access and information;
  • A right of rectification;
  • A right to erasure;
  • A right to be forgotten;
  • A right to limit processing;
  • A right to data portability;
  • A right to object to data processing.

You can also unsubscribe from our newsletter at any time by clicking on the link “unsubscribe from this list” at the bottom of each of our newsletters or by using our contact form by specifying in your message the nature of your request as well as the email address to delete.

What to do in the event of a question or dispute ?

To update your preferences, update or correct your information, make a request, ask us questions about this Data Protection Policy, or exercise your data protection rights, you can contact us by email at: 

In the event of a violation of the GDPR regulations, you are free to lodge a complaint with the CNIL supervisory authority (the National Commission for Data Protection, Luxembourg).

Address: CNIL – 1, Avenue du Rock’n’Roll – L-4361 Esch-sur-Alzette

Complaint Form:

Updates to our Data Protection Policy

This Data Protection Policy may be updated from time to time, without notice, in order to take into account changes in our personal data practices. We will indicate at the top of the page the date of the last update. In the event of substantial changes, we will notify you by any appropriate means.