Without the use of the session cookies especially, several functions could not be offered on our website.
The legal basis for processing personal data by using session cookies is Art. 6 para. 1 point f) GDPR (legitimate interest) as the legitimate interest of the University is to offer a website adapted to users’ needs
The information on this page lists the cookies that this website uses and describes their purpose. You will also find some more detail here about cookies relating to our social media channels and Matomo, the service we use for our statistics.
Social media cookies
The University is active on social media platforms. For instance, the University is present on five key social media platforms – Facebook, Twitter, LinkedIn, Instagram and YouTube. These communities strengthen our online presence and visibility.
- The University website does not set cookies with the display of links to our social media channels when you are browsing our website;
- You can watch University videos, which we upload on our YouTube page. You can also follow links from our website to Facebook, Twitter, LinkedIn, Instagram and YouTube;
- In order to watch some University videos, a message will alert you that you need to accept YouTube cookies to do so. YouTube has its own cookie and privacy policies over which we have no control. There is no installation of cookies from YouTube until you consent to YouTube cookies;
- Similarly, by clicking on the Facebook, Twitter, LinkedIn, Instagram or YouTube button on our website, you will be re-directed to those websites, which have their own cookie and privacy policies over which we have no control.
The University is using session cookies to ensure the correct running of the website. Cookies used by the University of Luxembourg are deleted after the session.
Persistent cookies are saved on your computer and are not deleted automatically when you close your browser, unlike a session cookie, which is deleted when you close your browser.
Matomo is an open source web analytics platform. A web analytics platform is used by a website owner in order to measure, collect, analyse and report visitors data for purposes of understanding and optimising their website.
Purpose of the processing
Matomo is used to analyse the behaviour of the website visitors to identify potential pitfalls; not found pages, search engine indexing issues, which contents are the most appreciated etc. Once the data is processed (number of visitors reaching a not found page, viewing only one page for example), Matomo is generating reports for website owners to take action, for example changing the layout of the pages or publishing some fresh content to deliver the information in the best way possible.
Neither Matomo, nor the University is doing any profiling based on user preferences.
Matomo is processing the following personal data:
- IP address
- User ID
- Location of the user
- Date and time
- Title of the page being viewed
- URL of the page being viewed
- URL of the page that was viewed prior to the current page
- Screen resolution
- Time in local timezone
- Files that were clicked and downloaded
- Link clicks to an outside domain
- Pages generation time
- Country, region, city
- Main Language of the browser
- User Agent of the browser
The processing of personal data with Matomo is based on explicit consent. Your privacy is our highest concern. That’s why we will not process any personal data with Matomo unless you give us clear explicit consent.
Recipient of the personal data
The personal data received through Matomo are sent to:
- Our institution (the University of Luxembourg).
Transfers to third country and safeguards
Matomo data is hosted in Germany and a backup in Ireland.
We are keeping the personal data captured within Matomo for a period of 13 months. Anonymised and aggregated data are stored for an indefinite period by the University for analysis purposes.
Your data subject’s rights
As Matomo is processing personal data on explicit consent, you can exercise the following rights:
- Right of access: you can ask us at any time to access your personal data.
- Right to erasure: you can ask us at any time to delete all the personal data we are processing about you.
- Right to portability: you can ask us at any time for a copy of all the personal data we are processing about you in Matomo.
- Right to withdraw consent: you can withdraw your consent at any time by clicking on the following button.
If you wish us to not process any personal data with Matomo, you can opt-out from it at any time. There will be no consequences at all regarding the use of our website.
If you choose to opt-out, you will receive an opt-out cookie so that your decision is remembered. If you regularly delete your cookies, you will need to opt-out each time you delete them.
Do not track preferences
Do not track is a function that allows visitors to opt out from being tracked by websites for any purpose including the use of analytics services, advertising networks and social platforms. Do not track options are available in a number of browsers including:
- Internet Explorer
If you enable do not track in your web browser, Matomo will respect your choice;
If you have enabled the do not track function, you will not be tracked. This is in addition to your opting-out of the aggregation and analysis of data for our website statistics;
If you have disabled all cookies from your browser, we will still collect some general data about your browsing (e.g. a record of a visitor to our website) but they will be less accurate and your visit will not be tracked.
Restricted access to information
All analytics data communication is encrypted via HTTPS protocol. The analytical reports generated can only be accessed by authorised University staff dealing with Matomo or by duly authorised external sub-contractors, who may be required to analyse, develop and/or regularly maintain certain websites.
Masking of IP addresses
Institution, city and country origin are determined from the full IP, then stored and aggregated before a mask is applied. Matomo uses an IP de-identification mechanism that automatically masks a portion of each visitor’s IP (Internet Protocol), effectively making it impossible to identify a particular visitor via the sole IP address.
More information and contact
You can find more detailed information about the overall processing of your data by the University of Luxembourg when you use our site in our General information notice.