Privacy Notice

1. Introduction and Scope

This Privacy Notice explains how Jan Stig RASMUSSEN (“JSR”) processes your personal data in compliance with the General Data Protection Regulation and Luxembourg data protection laws.

JSR acts as the Data Controller for the personal data processed in the course of daily operations, services, and your use of JSR’s website. This information is provided in accordance with the transparency requirements of the law.

2. Contact Details

Data Controller:

Jan Stig RASMUSSEN
11, rue de Wecker
L-6795 Grevenmacher
Grand Duchy of Luxembourg

Email: mail@rasmussen.lu

Supervisory Authority:

Commission Nationale pour la Protection des Données (CNPD)
Service des plaintes (for complaints)
15, Boulevard du Jazz
L-4370 Belvaux
Grand Duchy of Luxembourg

Website: www.cnpd.lu

3. Categories of Personal Data JSR Collect

JSR collects and processes the following types of information:

  • Contact Details: Name, physical address, telephone number, and email address.
  • Personal Characteristics: Age, gender, nationality, marital status, date, and place of birth.
  • Identity Documents: Passports, ID cards, and driving licenses.
  • Professional Background: Curriculum vitae, education, qualifications, and profession.
  • Background Checks: Extracts of criminal records, where legally required.
  • Financial & Tax Data: Evidence of tax residency, bank references, and financial information.

When you browse JSR’s website, JSR collects:

  • Information you submit directly via email forms or correspondence.
  • Technical data, including IP addresses, browser type, operating system, date and time of visits, and pages viewed.
  • Email engagement data, such as email opens and link clicks.

 4. Purposes and Legal Bases for Processing

JSR processes your data using the following legal bases:

  • Legal Obligations: Complying with the amended Luxembourg law regarding Anti-Money Laundering and combatting the financing of terrorism, fulfilling statutory tax duties in Luxembourg, and managing regulatory investigations, complaints, or litigation.
  • Performance of a Contract: Delivering services and fulfilling obligations under contracts signed with you or the organisation you represent.
  • Legitimate Interests: Managing and administering client and business relationships, maintaining a client relationship management database to promote JSR’s services, and securing JSR’s IT infrastructure by logging corporate emails and correspondence.
  • Direct Marketing & Events: Providing customised information about JSR’s services and inviting you to professional events. You can opt out of marketing communications at any time.
  • Consent: Any other specific purpose for which you gave explicit consent. You can withdraw your consent at any time without affecting past lawful processing.

5. Recipients of Personal Data

JSR may share your data with:

  • Trusted IT, administrative, and data hosting service providers.
  • Professional advisors, including lawyers, accountants, auditors, and consultants.
  • Regulators and authorities, such as the CSSF, tax authorities, or law enforcement, must comply with binding legal requests.
  • Google Analytics: Google stores website usage data on servers in the United States to help JSR evaluate website traffic. IP address processing is handled securely and minimised to protect your identity.

6. International Data Transfers

If JSR transfer data outside the European Economic Area, JSR ensures safety by utilising:

  • Countries approved by the European Commission as having adequate protection.
  • European Commission Standard Contractual Clauses.
  • Your explicit consent for specific regulatory or verification requirements.

7. Data Retention

JSR stores your personal data only for as long as necessary to fulfil the outlined purposes or to comply with statutory retention periods under Luxembourg law, such as corporate and tax record obligations, which typically require retention for up to 10 years.

8. Your Data Protection Rights

Under the law, you have the following rights:

  • Access and copy your personal data.
  • Rectify inaccurate or incomplete data.
  • Erase your data.
  • Restrict or object to JSR’s data processing.
  • Data Portability to move your data to another controller.
  • Lodge a complaint with the national supervisory authority.

These rights are subject to statutory limitations and exceptions.

9. Third-Party Data Declarations

Before providing JSR with personal data about your employees, contractors, or other individuals, you must ensure that you have provided them with this privacy notice and that you process their data in strict accordance with data protection rules.

10. Document Information

JSR may update this text periodically to reflect regulatory changes in Luxembourg.

Jan Stig RASMUSSEN
Luxembourg, June 2026

Cookie & Web Beacon Notice

Cookies are small text files stored on your device to make web browsing easier. Web beacons track email openings or page views.

How to manage cookies: You can restrict, block, or delete cookies through your web browser settings. Please note that disabling cookies may limit website functionality.