Salaire Santé Luxembourg

Privacy Policy (GDPR)

Last updated : August 4, 2026

Last updated: 4 August 2026

The website https://salairesanteluxembourg.com is published by BENAMMAR Mehdi, trading under the business name Opefitoo.
The publisher attaches great importance to the protection of personal data in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

Data controller:
BENAMMAR Mehdi
📧 contact@salairesanteluxembourg.com

2. Data collected

Depending on how you use the Site, we collect:

  • Use of the calculator (without an account) — no data is sent to our servers. Your entries stay in your browser; see section 5.
  • User account — if you create an account (sign-in via Google or via a sign-in link sent by e-mail), we receive and store your e-mail address — and, when signing in with Google, your name and profile picture — as well as your display language, in order to manage your account and your export credits and to write to you in your language.
  • PDF export — each PDF report generated is recorded on our servers and linked to your account: the calculation parameters (sector, occupation, periods of employment or length of service, hours worked, and where applicable date of birth, contract start date and supplement hours) together with the result obtained (estimated salary). This data is used to display your export history and to operate the credit system.
  • Payment — credit purchases are handled by our payment provider Stripe. We never receive or store your bank details (card number, CVV, etc.): these are entered directly on Stripe's secure pages. We retain only the payment session identifier, the amount, the number of credits purchased and the transaction status.
  • Contact form — if you write to us, we receive the information you voluntarily provide (name, email, message).
  • Browsing data — standard technical server logs (IP address, device type, pages visited), for the security and proper operation of the Site.
  • Audience measurement — we count visits using an analytics tool that we host ourselves, without any cookie and without any data that could identify you. Details in section 4 bis.

No sensitive data within the meaning of Article 9 GDPR (health, origin, opinions, etc.) is collected. Date of birth and estimated salary, although personal, do not fall within that category; they are used solely to operate the calculator.

3. Purposes

The data is used to:

  • Create and manage your user account;
  • Generate your PDF reports and let you consult your export history;
  • Process your credit purchases and manage your balance;
  • Reply to requests sent through the contact form;
  • Ensure the operation, security and fraud prevention of the Site;
  • Measure traffic to the Site anonymously, in order to improve its content and usability.

The Site displays partner placements (job offers and services from the healthcare sector), which we manage ourselves. They use no advertising tracker, set no cookies and rely on no ad network and no third-party analytics tool such as Google Analytics or AdSense: the number of impressions and clicks is simply totalled per day, in aggregate, with no link whatsoever to you or to your browsing, and no data concerning you is passed to the advertiser. Traffic measurement on the Site, likewise internal, without cookies and without identifying data, is described in detail in section 4 bis.

4. Cookies

The Site uses only a session cookie that is strictly necessary for authentication (keeping you signed in). This cookie is essential to the operation of the account and is exempt from consent under Article 5(3) of the "ePrivacy" Directive (2002/58/EC) and its transposition into Luxembourg law.

The Site uses no analytics or advertising cookie, and therefore displays no cookie banner.

4 bis. Cookieless audience measurement

To understand traffic to the Site, we use Umami, an analytics solution that we host on our own infrastructure. The measurements are therefore sent to no third-party analytics provider and are neither sold nor combined with other sources.

This tool sets no cookie and writes no identifier to your device. It retains no data that could identify you, enables no tracking from one site to another, and serves no profiling or advertising targeting. The only information recorded, in aggregate form, is:

  • the page viewed and the page you came from (referrer);
  • the browser type, operating system and device type;
  • the country of connection.

To this are added a few anonymous usage events, whose sole purpose is to show which stages of the journey are reached: a calculation produced a result, a PDF export was requested, a preview of the document was displayed, the export was refused for lack of credits, a PDF was downloaded, a payment was started, the diploma-recognition assistant was started or completed. These events carry only general labels drawn from closed lists: the sector chosen (SAS or FHL), the profession selected, a band of seniority spanning several years (for example “3 to 5 years”), whether the work is full time or part time, the credit package concerned or, for the diploma-recognition assistant, the answers picked from the options offered (profession, country where the diploma was obtained, etc.) — never free text. Each of these labels describes thousands of people and cannot single you out from anyone else.

No precise data entered into the calculator is sent to these statistics: neither your date of birth, nor your contract dates, nor your employers' names, nor the calculated salary. Seniority is only ever sent as a band spanning several years, never as a date. That information stays in your browser (see section 5).

Why you are not asked for consent. Article 5(3) of the "ePrivacy" Directive (2002/58/EC) makes consent a requirement for storing or reading information on your terminal equipment. As this audience measurement does neither — no cookie, no local identifier — it falls outside the scope of that article. The processing rests on our legitimate interest (Article 6(1)(f) GDPR) in knowing the traffic to our site in order to improve it, an interest that remains proportionate given that no identifying data is retained.

Your right to object. As this processing rests on legitimate interest, you may object to it at any time (Article 21 GDPR). The Site honours your browser's "Do Not Track" signal: if you enable it in your browser's privacy settings, no traffic measurement is carried out for your visit. You may also write to us at the address given in section 10.

5. Local storage of calculator data (localStorage)

The salary calculator offers a "Remember my data in this browser" option that is disabled by default. You must explicitly tick the corresponding box to enable it.

When this option is enabled, the following entries are saved in your browser's localStorage:

  • Sector, occupation and hourly rate;
  • Periods of employment (dates, employer, contract within scope, certificate) or length of service entered directly;
  • Date of birth and contract start date (used to calculate annual leave and the next seniority step);
  • Night, Sunday and public holiday hours.

This data stays exclusively on your device. It is never transmitted to our servers or to any third party, is not linked to any advertising identifier, and is not used for profiling.

Erasing your data: you can delete it at any time by unticking the "Remember my data in this browser" box, by clicking "Erase my saved data" which appears beneath it, or by clearing your browser's local storage.

Legal basis: explicit consent of the data subject (Art. 6(1)(a) GDPR; Art. 5(3) of Directive 2002/58/EC "ePrivacy").

6. Processors and data recipients

We rely on the following providers, which process data on our behalf under their own GDPR compliance guarantees:

  • Google (Google Ireland Ltd) — sign-in provider (authentication via your Google account);
  • Stripe (Stripe Payments Europe Ltd / Stripe Inc.) — card payment processing; Stripe is PCI-DSS Level 1 certified, and no card data passes through our servers;
  • Resend (Resend, Inc.) — sending of our transactional e-mails (sign-in links, notifications); this provider processes the recipient's e-mail address and the content of the message sent;
  • Site host — see the "Host" section of the Legal Notice.

The audience measurement described in section 4 bis involves no processor: the tool is hosted on our own infrastructure and the data never leaves it.

7. Transfers outside the EU

Some data may be processed outside the European Union (in particular in the United States) by Google, Stripe and Resend, on the basis of the European Commission's standard contractual clauses or an equivalent mechanism recognised by the GDPR.

8. Legal basis

  • User consent (cookies)
  • Legitimate interest (security of the Site, anonymous traffic measurement — see section 4 bis)
  • Legal obligations

9. Retention period

Account data and PDF export history are kept for as long as your account exists, and deleted on request (see section 10). Payment data (amount, status) is kept for as long as necessary to meet our accounting and tax obligations. Messages sent through the contact form are deleted once the request has been handled. Traffic statistics, which contain no identifying data, are kept in aggregate form.

10. Your rights

You have rights of access, rectification, erasure, objection, portability and restriction over your data. You can delete your account yourself at any time from your dashboard ("Danger zone"): your profile and export history are erased immediately. Your past purchases are kept in anonymised form (see section 9). For any other right (access, rectification, portability), write to us at the address below stating your request; we will reply within the legal time limit of one month (Article 12(3) GDPR).

📧 contact@salairesanteluxembourg.com

You may also lodge a complaint with the data protection authority of your country — in Luxembourg, the Commission nationale pour la protection des données (CNPD).

11. Security

Technical and organisational measures protect your data.

12. Changes

This policy may be amended at any time in order to remain compliant with legal or technical developments. The update date is shown at the top of the page.