Privacy policy.

Last updated: 12 June 2026 · Applies to this website and the LABEL community platform

1. Who we are

LABEL (Lux Afro-Black Excellence Leaders) is a non-profit community organisation in Luxembourg dedicated to connecting, celebrating and empowering African, Caribbean and Black communities. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Luxembourg data protection law.

• Data controller: Label – Lux Afro-Black Excellence Leaders a.s.b.l., registered in Luxembourg under R.C.S. Luxembourg F14269
• Email: info@label-konect.com
• Phone: +352 691 437 658
• Website: label-konect.com

2. What data we collect

We only collect what you choose to give us. Depending on how you interact with LABEL, this may include:

• Membership information: name, email address, and the interests or details you share when you join the community
• Profile information: job title, industry, LinkedIn profile, short bio — if you choose to provide them
• Business listing data: business name, description, contact details, images and social media links you submit for the directory
• Event submissions: event details and organiser contact information
• Photo wall uploads: photos you choose to share on the live photo wall at certain events — see section 6
• Event reminder subscriptions: a push subscription token (a pseudonymous device identifier) if you turn on event reminders — see section 7
• Device location: never — the "near me" sorting works entirely on your device, and your coordinates are never sent to us or anyone else (see section 7)
• Communications: messages you send through our forms, by email or via WhatsApp
• Newsletter data: your email address, with your consent
• Payment data: we do not store payment details — tickets and payments are processed by third-party providers such as Eventbrite

3. How we use your data

• Welcome you into the community and manage your participation
• Display the business and event listings you ask us to publish
• Send updates, newsletters and event invitations — only with your consent
• Process event registrations
• Send event reminders to this device — only if you turn them on
• Respond to your enquiries, partnership and press requests
• Improve our platform and programming
• Comply with our legal obligations as a Luxembourg a.s.b.l.

We never sell your personal data. Ever.

4. Legal basis for processing

Under Article 6 of the GDPR, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): to provide the services you request — membership, listings, event registration
• Consent (Art. 6(1)(a)): for newsletters and marketing communications, event reminders (web push) and the event photo wall — you can withdraw consent at any time
• Legitimate interests (Art. 6(1)(f)): to operate, secure and improve our platform and community activities
• Legal obligation (Art. 6(1)(c)): where Luxembourg or EU law requires us to process or retain data

Special-category data (Article 9 GDPR)

Because LABEL is an association serving the Afro-Black community in Luxembourg, your membership may indirectly reveal your racial or ethnic origin, which is special-category data under Article 9 GDPR. We process it solely for the legitimate activities of our not-for-profit association, with appropriate safeguards, in relation to our members and regular contacts (Art. 9(2)(d) GDPR). We never disclose it outside the association without your explicit consent. Listings in our public directory are published only with your explicit consent (Art. 9(2)(a)), which you may withdraw at any time.

5. Who we share data with

Your data is not sold or rented. It is shared only with the service providers we need to run the platform, and only to the extent necessary:

• Cloudflare, Inc. — hosts this entire website and the small content system behind it (the latest events, directory entries and stories, the event photo wall, reminder subscriptions and our AI features). Like any host, Cloudflare technically sees your IP address when your browser requests a page. Cloudflare acts as our processor under its Data Processing Addendum, which includes the EU Standard Contractual Clauses
• Formsubmit (formsubmit.co) — delivers the messages you send through our website forms to our inbox. Business listing applications may also be delivered to our admin system hosted on Cloudflare (see section 9 for how long we keep them)
• Eventbrite — processes ticket registrations for certain events, such as the BLOCCS Summer Party, under its own privacy policy
• WhatsApp / Meta — if you choose to join our WhatsApp community, your participation is governed by WhatsApp's terms and privacy policy
• CARTO / OpenStreetMap — provide the street-map tiles for our interactive map, and only after you tap "Load the map" (see section 7)
• Fonts — fonts are served from our own website (self-hosted); no font requests go to third parties
• Community members — information you ask us to publish (business listings, event details, stories) is visible to visitors of the platform
• Legal authorities — only when we are legally required to do so

International transfers. Formsubmit is operated from the United States. When you send us a message through a website form, the transfer of your data to Formsubmit relies on Article 49(1)(b) GDPR — it is necessary to perform the service you request (delivering your message to us) — and on Standard Contractual Clauses where available. The provider states that submissions are relayed to our inbox and not stored on its servers. We plan to move to an EU-based form processor. Cloudflare and CARTO are US companies; both process data under the European Commission's Standard Contractual Clauses (Cloudflare under its Data Processing Addendum). Other providers (Eventbrite, WhatsApp/Meta) may also process data outside the EU/EEA under their own safeguards, such as the European Commission's Standard Contractual Clauses.

6. Images & event photography

We photograph and film our events to document and promote the life of the association. We handle images as follows:

• Portraits and close-ups: images in which you are the main subject (portraits, close-up or clearly identifiable individual shots) are published only with your consent
• Ambient event scenes: general crowd and atmosphere shots, where no individual is the focus, are processed on the basis of our legitimate interest in documenting and promoting our events (Art. 6(1)(f) GDPR), after on-site notice — signage at the venue and/or a notice on tickets and registration pages informs you that photography is taking place
• Objection and withdrawal: you can object to appearing in our images, or withdraw consent you previously gave, at any time by emailing info@label-konect.com — we will then remove the image or blur you in it

The event photo wall

At certain events you can upload your own photos to a shared live photo wall. This is entirely optional, and it works as follows:

• Explicit consent: uploading requires ticking a consent box first (Art. 6(1)(a) GDPR) — and we never tag, identify or analyse the people in the photos
• Public visibility: photos on the wall are visible to anyone viewing the wall page
• Storage & deletion: photos are stored with Cloudflare (R2 storage, under Cloudflare's Data Processing Addendum) and are deleted automatically after 90 days. You can have a photo removed at any time — ask an administrator at the event for immediate removal, or email info@label-konect.com
• No location data: location metadata (EXIF/GPS) is stripped from photos on your device, before upload

7. Website features & your device

This website includes a few optional features. Each is designed so that as little data as possible leaves your device — here is exactly what each one does:

Live content

The latest events, directory entries and stories are published by our administrators and fetched by your browser from our content system hosted on Cloudflare. Only site content is involved — no visitor data — although, as with every page on this site, your browser's request exposes your IP address to Cloudflare, our hosting provider.

"Ask LABEL" assistant

The optional "Ask LABEL" chat answers questions using only this website's own content. Your messages are processed transiently by Cloudflare Workers AI: they exist only for the seconds needed to generate a reply and are not stored, not logged and never used to train AI models. Please do not include personal details in your messages. We offer this on the basis of our legitimate interest in informing visitors (Art. 6(1)(f) GDPR) — and using it is entirely optional.

Event reminders (web push)

You can opt in to event reminders through your browser's own permission dialog. If you do, we store your push subscription token — a pseudonymous device identifier, which counts as personal data — on Cloudflare (D1) solely to send you event reminders, on the basis of your consent (Art. 6(1)(a) GDPR). You can switch reminders off with one tap on the site, or in your browser settings; the token is deleted when you unsubscribe or when delivery permanently fails.

"Near me" and the map

Distance sorting ("near me") uses your device's location entirely on your device — your coordinates never leave your browser and are never transmitted or stored. The interactive map loads street-map tiles from CARTO (Carto DB Inc.) / OpenStreetMap only after you tap "Load the map"; loading the tiles discloses your IP address to the tile provider. Your choice is remembered locally on your device and can be cleared by clearing this site's data.

The Golden Guestbook

Anyone can leave a short public note on our guestbook wall. Your first name and town are entirely optional — leave them blank and your note is shown as coming from "someone from the community". Notes are public, are stored on Cloudflare (D1, under its Data Processing Addendum), cannot contain links, and are deleted automatically after 2 years. We do not store your IP address with your note. You can have a note removed at any time by writing to info@label-konect.com — an administrator can also remove any note immediately. Legal basis: your consent through the act of signing (Art. 6(1)(a) GDPR).

AI-assisted translation

Behind the scenes, our editors may machine-translate editorial content (never member data) via Cloudflare Workers AI before reviewing it by hand.

8. Cookies & local storage

We use only functional browser storage (localStorage) to remember things like your saved favourites, your display preferences, your choice to load the map, whether you snoozed the "install the app" suggestion, a simple visit counter used only to decide when to show that suggestion, and whether event reminders are switched on. None of this is tracking: this information stays on your device, is never transmitted to us or to third parties, and you can clear it at any time through your browser settings. Third-party services linked from this site (Eventbrite, WhatsApp, social networks) may set their own cookies on their own domains.

9. Data retention

We keep your personal data only for as long as you participate in the community or as long as the service you requested requires. You can request deletion at any time by writing to info@label-konect.com. Business listings and event records may be retained in anonymised form for historical record-keeping. Where the law imposes retention periods (for example accounting obligations), we retain data for the legally required duration.

Some specific periods: photos on the event photo wall are deleted automatically after 90 days (or earlier on request); business listing applications delivered to our Cloudflare-hosted admin system are kept for at most 12 months and then deleted — you can request earlier deletion at any time; push subscription tokens are deleted as soon as you unsubscribe or delivery permanently fails; guestbook notes are deleted automatically after 2 years (or earlier on request).

10. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict processing in certain circumstances
• Receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting prior processing

To exercise any of these rights, email info@label-konect.com, or use this ready-made link: Make a privacy request (opens an email with the subject "Privacy request — access / erasure"). We respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with Luxembourg's supervisory authority: the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg — www.cnpd.lu.

11. Data security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. All data transmitted through this website is encrypted via HTTPS, and access to personal data within LABEL is limited to the board members who need it to run the organisation.

12. Third-party links

Our website links to external sites — event platforms, social media, members' business websites. We are not responsible for the privacy practices of those sites and encourage you to read their own policies.

13. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated to members by email, and the latest version will always be available on this page.

14. Contact us

For any question about this policy or your personal data:

• Label – Lux Afro-Black Excellence Leaders a.s.b.l. · R.C.S. Luxembourg F14269
• Email: info@label-konect.com
• Phone: +352 691 437 658