Last updated: 24 May 2026

Women & Children Empowerment Luxembourg ("WCELUX", "we", "us" or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and share personal data when you visit wcelux.charity, contact us, or make a donation, and the rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Luxembourg Law of 1 August 2018 on the protection of individuals with regard to the processing of personal data.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

• Women & Children Empowerment Luxembourg
• 6, Rue des Vignes, 6650 Wasserbillig, Luxembourg
• Email: partnerships@wcelux.org
• Phone: +352 661 888 824

2. What personal data we collect

We only collect personal data that you choose to provide or that is necessary to operate our website. This may include:

• Contact data you submit through our contact form: name, email address, phone number, organisation and the content of your message.
• Donation data you submit when confirming a donation: name, email address, donation amount, the cryptocurrency/network used, transaction ID or hash, a screenshot of your transaction, and any message you include.
• Technical data automatically processed by our hosting provider for security and reliability, such as your IP address, browser type, device information and access timestamps.

We do not knowingly collect special categories of personal data, and we ask that you do not send us such data through the website.

3. How we use your data and our legal bases

We process your personal data on the following legal bases under Article 6(1) GDPR:

• Consent (Art. 6(1)(a)) — when you submit a contact or donation form, you consent to us using that information to respond to you and to acknowledge and record your donation.
• Legitimate interests (Art. 6(1)(f)) — to operate, secure and improve our website and to communicate with supporters, where these interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)) — to keep accounting and donation records where required by Luxembourg law.

4. Cookies and analytics

Our website uses only the strictly necessary technical cookies required for it to function and to be served securely. We do not use advertising cookies. If we introduce optional analytics in the future, we will request your consent first via a cookie banner. Our web fonts are loaded from Google Fonts, which may receive your IP address when fonts are served; see Google's privacy policy for details.

5. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers ("processors") who help us run the website, under contracts that require them to protect your data:

• Cloudflare, Inc. — website hosting, content delivery and security.
• Airtable, Inc. — secure storage of donation-confirmation form submissions, including any screenshot you upload.
• Google LLC — delivery of web fonts.

Some of these providers are based outside the European Economic Area (e.g. in the United States). Where data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above. Contact enquiries are kept for up to 24 months after our last interaction. Donation records are kept for the period required by applicable accounting and tax law (generally up to 10 years in Luxembourg). After these periods, data is securely deleted or anonymised.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict or object to our processing of your data;
• request portability of the data you provided to us;
• withdraw your consent at any time, without affecting prior processing.

To exercise any of these rights, please contact us at partnerships@wcelux.org. We will respond within one month.

8. Right to lodge a complaint

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Luxembourg supervisory authority:

• Commission nationale pour la protection des données (CNPD)
• 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg
• Website: cnpd.public.lu

9. Data security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including encrypted (HTTPS) connections and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your data at all times.

10. Children's privacy

Our website is intended for adults. We do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated "Last updated" date.

12. Contact us

For any question about this Privacy Policy or your personal data, contact us at partnerships@wcelux.org, by phone on +352 661 888 824, or by post at 6, Rue des Vignes, 6650 Wasserbillig, Luxembourg.