Marketing··4 min
Choosing a marketing agency in Luxembourg: funding and GDPR clauses
Before signing with an agency, secure two things: the SME Packages Digital grant, which can cover up to €17,500 of the budget, and the GDPR processor agreement required as soon as the agency handles your customer data.
Translated from French · Lire l'original en français
Before signing with a marketing agency, two matters deserve your attention: the SME Packages Digital grant, which can fund up to €17,500 of your agency budget, provided you follow a precise administrative timeline, and the GDPR clauses the contract must contain. This guide is for executives and marketing managers at Luxembourg SMEs who are preparing to consult agencies.
Before comparing offers, a useful starting point: our directory of marketing agencies in Luxembourg lists them, ranked by rating and genuine Google reviews, and filterable by specialism and municipality.
Up to €17,500 in grants to fund your marketing project
The SME Packages Digital scheme, run by the Ministère de l'Économie (Ministry of the Economy) and processed by the House of Entrepreneurship, funds 70% of the eligible costs of a digital marketing project worth between €3,000 and €25,000 excl. VAT, according to Guichet.lu. The grant is capped at €17,500, which corresponds to a project capped at €25,000 excl. VAT financed three quarters by the State. This 70% rate came into force with the reform of 11 March 2025, which replaced the former flat-rate aid of around €5,000, according to the news item published on Guichet.lu.
| Item | Before the reform | Since 11 March 2025 |
|---|---|---|
| Type of aid | Fixed flat rate | Rate proportional to the project |
| Amount | Around €5,000 | 70% of eligible costs |
| Cap | Around €5,000 | €17,500 |
The official site publishes no mandatory list of approved providers for this Digital strand: you remain free to choose the agency you want, provided you follow the scheme's validation timeline.
The pre-analysis: the step not to skip before signing
To qualify for the aid, the company must go through a free pre-analysis before confirming the project with the chosen provider. It is carried out by the House of Entrepreneurship (Chambre de Commerce) for most companies, or by eHandwierk (Chambre des Métiers) for craft businesses, according to Guichet.lu. Reimbursement only takes place after approval by the Ministère de l'Économie and actual payment of the agency's invoice. Signing with an agency before the project has been validated in pre-analysis risks losing eligibility for the grant, as the order of the steps matters. If your digital strategy is not yet formalised, the Fit 4 Digital diagnostic, 100% funded up to €5,000, can be a useful preliminary step to frame the project before requesting agency quotes.
GDPR: the processor agreement to demand as soon as the agency handles your customer data
As soon as an agency processes customer or prospect data on your behalf, whether through a CRM, email campaigns or targeted advertising, the relationship must be governed by a processor agreement compliant with Article 28 of the GDPR, according to the CNPD. This contract must provide sufficient guarantees as well as security and confidentiality clauses, with the agency acting as a processor and not as an independent controller. The CNPD, the competent supervisory authority in Luxembourg, offers the European Commission's standard contractual clauses as a template on its website. If your company has not yet decided whether it needs to appoint a data protection officer, the question often arises at the same time as choosing the agency: our guide to the DPO obligation sets out the criteria.
Ad accounts, data and KPIs: the clauses that prevent unpleasant surprises
Beyond GDPR, several practical clauses are worth negotiating before signing, to avoid becoming dependent on an agency if the contract ends:
- Ownership of ad accounts (Google Ads, Meta, LinkedIn) must remain in the company's name, with the agency holding only revocable delegated access.
- The contract must provide for the return or export of campaign and performance data at the end of the collaboration, in a usable format.
- Quantified, dated key performance indicators (KPIs) must be set down in black and white, rather than vaguely worded objectives.
- An exit clause must specify the notice period and the arrangements for transitioning to another provider.
These clauses are not an administrative detail: they determine your ability to change agency without losing your campaign history or control of your ad accounts. GDPR, however, is not an area where improvisation is acceptable, and this article does not constitute legal advice: have the final version of the contract, in particular the processor clauses, reviewed by a lawyer before signing.
