1 · Who is responsible
Hercinia S.à r.l., 99, Grand-Rue, L-1661 Luxembourg, is the controller of the personal data processed through this site. For data protection questions, write to info@hercinia.eu.
2 · What we collect
- Contact form: your name, organisation, email address, the kind of enquiry, your message, the page you wrote from and the time.
- Journal by email: your email address, your consent and the time you signed up.
- Server logs: IP address, time and page requested.
- Settings in your browser: see the cookie policy.
The forms send nothing themselves: they open your email app with your message, and you send it to us as an email.
3 · Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| To answer your request | Art. 6(1)(b), pre-contractual steps, or Art. 6(1)(f), legitimate interest |
| To send the journal | Art. 6(1)(a), consent |
| To run and secure the site | Art. 6(1)(f), legitimate interest |
4 · Who receives your data
Our email provider handles the emails you send us, and only Hercinia reads them. Our hosting provider serves this site and keeps its server logs. Both act as our processors under data processing agreements (Article 28 GDPR). We do not sell personal data.
Pages with maps load two code libraries, D3 and TopoJSON, from cdnjs, a public content delivery network run by Cloudflare. The press kit page loads a third, JSZip, from there when you download several files at once. To fetch them, your browser sends your IP address to Cloudflare.
5 · Transfers outside the EEA
Where a provider processes personal data outside the European Economic Area, we rely on an adequacy decision of the European Commission or on appropriate safeguards such as the Commission’s standard contractual clauses (Articles 45 and 46 GDPR). You can ask us for a copy of the safeguards.
6 · How long we keep it
We keep contact messages for as long as we need them to deal with your request, journal sign-ups until you leave the list, and server logs for a short period.
7 · Your rights
You have the right to access your personal data, to have it rectified or erased, to restrict its processing, to receive it in a portable format and to object to processing based on legitimate interest (Articles 15 to 18, 20 and 21 GDPR). Where we rely on your consent, you can withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal (Article 7(3) GDPR). To leave the journal list or exercise any of these rights, write to info@hercinia.eu.
8 · Complaints
You have the right to lodge a complaint with a supervisory authority, in particular in the member state where you live or work or where you believe the infringement took place (Article 77 GDPR). In Luxembourg, this is the Commission nationale pour la protection des données (CNPD): cnpd.public.lu.
9 · Changes
We update this policy when our processing changes. The date at the top shows the latest version.