top of page

Privacy Policy

Last updated: 2 October 2026


Label R Corp S.A. respects your privacy and is committed to protecting personal data in accordance with applicable European Union and Luxembourg data-protection law.

​

This Privacy Notice explains how Label R Corp S.A. (“Label R”, “we”, “us” or “our”) collects and processes personal data when you visit our website, contact us, or interact with us in connection with our professional activities.

​

1. Who we are

 

Label R Corp S.A. is the controller of the personal data described in this Privacy Notice where we determine how and why that personal data is processed.

​

Label R Corp S.A.
91, rue Jean-François Boch
L-1244 Luxembourg
Grand Duchy of Luxembourg
RCS Luxembourg: B229817

​

For questions concerning this Privacy Notice or the processing of your personal data, please contact:

 

Attention: Administrator
Email: oriane@label-r.com

​

Our processing of personal data is subject, where applicable, to Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), the Luxembourg Act of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework, and other applicable Luxembourg and European Union data-protection legislation.

 

This Privacy Notice applies where Label R acts as a controller. Where we process personal data solely on the documented instructions of another organisation as its processor, that processing is governed by the relevant contractual arrangements and the controller’s applicable privacy information.

​

2. Who this Privacy Notice applies to

 

This Privacy Notice may apply to:

​

  • visitors to our website;

  • people who contact us or request information from us;

  • current and prospective clients and their representatives;

  • representatives, employees and other contacts of organisations with which we work;

  • project and consortium partners, subcontractors and suppliers;

  • professional advisers and service providers;

  • representatives of public authorities, public bodies and other institutional organisations; and

  • other professional contacts with whom we interact in the course of our business.

​

3. Personal data we process

 

The personal data we process depends on the nature of our relationship with you and may include:

​

  • your name and professional contact details, including email address, telephone number and business address;

  • your employer or organisation, job title, professional role and areas of responsibility;

  • correspondence and other communications between you and Label R;

  • information provided during meetings, interviews, workshops or other professional interactions;

  • information relating to projects, engagements, proposals or contracts in which you or your organisation are involved;

  • administrative, contractual, invoicing or payment information where relevant;

  • information contained in professional documents or materials provided to us;

  • publicly available professional information relevant to our work; and

  • technical information generated when you use our website, such as IP address, browser or device information, security logs and cookie information.

​

We do not seek to collect special categories of personal data through our website. Where such information is exceptionally required in connection with a professional engagement, we process it only where there is an appropriate legal basis under applicable data-protection law.

​

4. How we obtain personal data

 

We may obtain personal data directly from you, for example when you contact us, correspond with us, participate in a meeting or workshop, or work with us on a professional engagement.

 

We may also receive personal data from other sources where relevant to our work, including:

​

  • the organisation you represent;

  • clients, prospective clients or other organisations involved in an engagement;

  • project, consortium or delivery partners;

  • subcontractors and professional advisers;

  • public bodies or institutional counterparties;

  • service providers; and

  • publicly available professional sources, registers and websites.

​

Where personal data has not been obtained directly from you, we provide the information required by applicable data-protection law within a reasonable period and, in any event, no later than one month after obtaining the personal data. If we use the personal data to communicate with you, we provide the information no later than the time of the first communication. If we disclose the personal data to another recipient, we provide the information no later than the time of the first disclosure. These requirements do not apply where an exemption under applicable law applies or where you already have the relevant information.

 

5. Why we process personal data and our legal bases

​

We process personal data only where we have a lawful basis for doing so.

 

Professional relationships and services

​

We process personal data to establish, manage and carry out professional relationships and engagements, including to:

​

  • respond to enquiries and requests;

  • prepare proposals and take steps towards entering into engagements;

  • provide consulting, advisory, research, evaluation, design, project-management and related professional services;

  • organise and conduct meetings, interviews, workshops and other project activities;

  • communicate with clients, partners, suppliers, institutional counterparts and other people involved in our work;

  • prepare analyses, reports, recommendations and other agreed deliverables;

  • administer contracts, projects and professional relationships; and

  • coordinate work with project partners and subcontractors.

 

Depending on the circumstances, this processing is necessary for the performance of a contract or to take steps before entering into a contract, or is based on our legitimate interests in conducting our business, providing our services and managing our professional relationships.

 

Where the person whose data we process is acting on behalf of an organisation rather than being personally party to a contract with Label R, we will generally rely on our legitimate interests and those of the relevant organisation in managing and performing the professional relationship.

 

Legal, regulatory and administrative obligations

​

We may process personal data where necessary to comply with legal, regulatory, tax, accounting, audit, contractual or other obligations applicable to Label R.

​

The legal basis for this processing is compliance with our legal obligations or, where appropriate, our legitimate interests in demonstrating compliance with contractual and professional requirements.

​

Protection of our business and legal rights

​

We may process personal data to protect our systems, information, business and legal interests, including information security, fraud prevention, record keeping, dispute management and the establishment, exercise or defence of legal claims.

 

This processing is based on our legitimate interests in protecting our business, systems, information and legal rights, and where applicable on compliance with legal obligations.

 

Professional communications

​

We may use professional contact information to communicate individually with people with whom we have, or reasonably expect to have, a professional relationship.

​

Label R does not use professional contact data for mass consumer marketing or behavioural profiling. Where consent is required for a particular communication, we will obtain it before sending that communication.

 

Website operation

​

We process limited technical information as necessary to operate, secure and maintain our website and to understand and resolve technical problems.

​

Strictly necessary processing is carried out for our legitimate interests in operating and protecting the website. Non-essential cookies or similar technologies are used only where the consent required by applicable law has been obtained.

 

6. Who we may share personal data with

​

We disclose personal data only where necessary for a legitimate purpose and subject to appropriate confidentiality and data-protection safeguards.

​

Depending on the circumstances, recipients may include:

​

  • Label R personnel who require access for their work;

  • clients and prospective clients where necessary for an engagement;

  • project, consortium and delivery partners;

  • subcontractors and specialist service providers;

  • public bodies, programme authorities and institutional counterparties involved in the relevant engagement;

  • lawyers, accountants, auditors, insurers and other professional advisers;

  • providers of information technology, website hosting, communications, file storage, administrative and other business services; and

  • courts, regulators, law-enforcement bodies or other competent authorities where disclosure is required or permitted by law.

 

We require third parties processing personal data on our behalf to provide appropriate contractual, technical and organisational protections.

 

Where a professional engagement is subject to specific confidentiality, information-security or data-protection requirements, those requirements apply in addition to this Privacy Notice.

 

Where another organisation independently determines the purposes and means of its processing of personal data, that organisation acts as a separate controller and is responsible for its own processing in accordance with applicable data-protection law.

 

We do not sell personal data.

 

7. International transfers

​

Some of the service providers we use may process personal data outside Luxembourg or the European Economic Area (“EEA”).

 

Where personal data is transferred outside the EEA, we ensure that an appropriate transfer mechanism is used as required by the GDPR. This may include:

​

  • a European Commission adequacy decision; or

  • the European Commission’s Standard Contractual Clauses, together with supplementary contractual, organisational or technical safeguards where required.

​

Our website is hosted using the Wix platform. Wix.com Ltd. is established in Israel, a country recognised by the European Commission as providing an adequate level of protection for personal data. Wix and its service providers may also process data in other countries. Where an adequacy decision does not apply, appropriate transfer safeguards are used in accordance with applicable data-protection law.

​

You may contact us if you would like further information about the safeguards applicable to a particular transfer.

 

8. How long we keep personal data

​

We retain personal data only for as long as it is reasonably necessary for the purpose for which it was collected, taking into account the nature of the information, the professional relationship concerned, applicable contractual requirements and relevant legal limitation and retention periods.

 

In particular:

​

  • information relating to an active professional engagement is generally retained for the duration of the engagement and for an appropriate period afterwards where needed for contractual, audit, legal or professional purposes;

  • records forming part of Label R’s accounting and commercial documentation may be retained for the period required by Luxembourg law, which may be up to ten years;

  • contact information and correspondence that do not form part of an ongoing or legally required business record are periodically reviewed and deleted when they are no longer reasonably required; and

  • information subject to specific contractual retention, return or deletion obligations is handled in accordance with those obligations.

​

Where exact retention periods cannot be determined in advance, we use the criteria above to determine how long the information should be retained.

​

9. Cookies and similar technologies

​

Our website uses cookies and similar technologies.

 

Cookies that are strictly necessary for the operation of the website may be used without prior consent where permitted by applicable law.

 

Non-essential cookies, including analytics, personalisation or marketing cookies where used, are placed or accessed only after the visitor has provided the consent required by applicable law.

 

You can accept, reject or change your choices using the cookie controls provided on the website. Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn.

 

Further information about individual cookies, their purposes and their duration may be provided through the website’s cookie settings or cookie notice.

 

10. Security

​

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

 

Access to personal data is limited to people who require it for a legitimate professional purpose and is subject, where appropriate, to confidentiality and access-control requirements.

 

No electronic system can guarantee absolute security, and our safeguards are reviewed having regard to the nature and sensitivity of the information we process and the risks associated with that processing.

 

11. Automated decision-making and profiling

​

Label R does not use the personal data covered by this Privacy Notice to make decisions based solely on automated processing that produce legal effects concerning an individual or similarly significantly affect an individual.

​

We do not use professional contact data for behavioural profiling.

​

12. Your rights

 

Subject to the conditions and limitations provided by the GDPR, you may have the right to:

​

  • obtain confirmation as to whether we process personal data about you and request access to that data;

  • request correction of inaccurate or incomplete personal data;

  • request erasure of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • receive certain personal data in a structured, commonly used and machine-readable format and have it transmitted to another controller, where the right to data portability applies; and

  • withdraw consent at any time where processing is based on consent.

 

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

 

If personal data is used for direct marketing, you have the right to object to that processing at any time.

 

To exercise your rights, please contact oriane@label-r.com.

 

We may request information reasonably necessary to confirm your identity before acting on a request. We will respond within the periods required by applicable law.

 

13. Complaints

​

If you have a concern about the way we process your personal data, we encourage you to contact us so that we can address it.

 

You also have the right to lodge a complaint with the competent supervisory authority. In Luxembourg, this is the:

 

Commission nationale pour la protection des données (CNPD)

Grand Duchy of Luxembourg

 

Further information about your rights and how to submit a complaint is available on the CNPD website.

 

14. Changes to this Privacy Notice

​

We may update this Privacy Notice from time to time to reflect changes in our activities, service providers, legal requirements or data-protection practices.

​

The current version will be published on this page and identified by the “Last updated” date at the top.

 

Where a change materially affects how we process personal data, we will take appropriate steps to bring that change to the attention of affected individuals where required.

 

15. Contact

​

For any question about this Privacy Notice, our processing of personal data, or the exercise of your data-protection rights, please contact:

​

Label R Corp S.A.
Attention: Administrator
91, rue Jean-François Boch
L-1244 Luxembourg
Grand Duchy of Luxembourg
Email: oriane@label-r.com

bottom of page