Data Protection Policy

This website is managed by the National Library of Luxembourg (Bibliothèque nationale du Luxembourg, BnL). This privacy policy explains how this website processes personal data we collect from you when you use our website. Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

What data do we collect?

We collect the following data:

  • Browsing data
  • IP address

If you are using the chatbot at chat.eluxemburgensia.lu, we additionally collect the following data:

  • Account Information:
    • Library card number when you log in through a-z.lu
    • Email address when you log in through Google
  • Service Data:
    • Questions asked
    • Answers received
    • Article references
  • Ratings on answers

How do we collect your data?

We collect and process data when you:

  • Use or view our website
  • Use our public API (Application Programming Interface)

How do we use your data?

We collect your data so that we can:

  • Present or block content that is subject to certain copyright conditions.
  • Analyse how you use this website.

If you are using the chatbot, we additionally collect data from the credential provider you are using, which can be:

  • The patron management system of the National Library of Luxembourg
  • Google

Who we share your data with?

When using the chatbot, we will share your questions anonymously with OpenAI L.L.C. (https://openai.com/policies/terms-of-use) through their API (Application Programming Interface). OpenAI does not use content that you provide to or receive from the API (“API Content”) to develop or improve their services.

It does however monitor questions for violations of the OpenAI usage policies. https://openai.com/policies/usage-policies

We therefore recommend that you do not enter sensitive or personal data as part of questions into the chatbot.

When logging in to the chatbot using “Sign in with Google”, Google servers will be notified of the fact that you are logging in and will see your IP address.

How do we store your data?

We securely store your data in a government’s owned datacenters in Luxembourg. We will keep your data for 6 months. Once this time period has expired, we will anonymize your data.

In the chatbot, your account information and service data are kept as long as you do not request the deletion of your account or have not been using the service anymore for more than 2 years. After the deletion of your account, the service data is kept anonymously and the ratings on answers are kept anonymously.

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. 

How do we use cookies?

We use cookies in a range of ways to improve your experience on our website, including:

  • Remembering your user preferences
  • Understanding how you use our website
  • Keeping you logged in to the chatbot

What types of cookies do we use?

There are a number of different types of cookies, however, our website uses:

  • Functionality – We use these cookies so that we remember your previously selected preferences.These could include what language you prefer.
  • Login information – When you log in to the chatbot, a cookie is set so that we remember your authorisation.

How to manage cookies?

You can set your browser not to accept cookies and you can remove cookies from your browser. However, some of our website features may not function as a result.

Privacy policies of other websites

This website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

We keep this privacy policy under regular review and place any updates on this web page. This privacy policy was last updated on 25 September 2023.

How to contact us

The Director of the BnL, under the authority of the Minister with Culture under their responsibilities, is the data controller under the EU’s GDPR Directive of 27 April 2016 (2016/679).

You have a right of access to and a right of rectification of your personal data.

You also have the option to lodge a complaint, in the event of failure(s) to respect the applicable rules with regard to protection of personal data, to a supervisory body such as the Luxembourg Data Protection Commission (Commission nationale pour la protection des données, CNPD).

In certain cases envisaged under Directive (EU) 2016/679, the BnL can contest these rights.

For further information on the contents or the manner of exercising rights, or of exercising the said rights, the user can contact the BnL via e-mail to dpo@bnl.etat.lu or by writing to the following postal address:

Bibliothèque nationale du Luxembourg

Données Personnelles / Délégué à la protection des données

37D, avenue John F. Kennedy

L-1855 Luxembourg