Johanne Mersch

Johanne Mersch is a senior associate in Stibbe’s corporate and finance team.

She assists clients in business transactions and corporate law matters, including mergers and acquisitions, liquidations, migrations, restructurings, and joint ventures. She advises international clients on their international restructurings and corporate transactions.

In parallel thereto, Johanne has expertise in technology, media, and telecommunications law (TMT) matters, with a focus on data protection and e-commerce.

She graduated in European business law from the University of Nancy (2007-2008). Johanne also obtained a degree in Magistère de juriste d’affaires européen from the University of Nancy (2005-2008). She joined the Luxembourg office of Stibbe in 2011.

Johanne is a member of the Luxembourg Data Protection Association (Association pour la protection des données au Luxembourg) and the International Association of Lawyers (Union Internationale des Avocats).

Languages: French, English, German
Admitted to the Luxembourg Bar: 2012

Related news

27.01.2017 EU law

GDPR, What's in it for you?

Articles - The GDPR is the single most important change in the data protection landscape since the 1995 Privacy Directive. It will have a profound impact on the way processing of personal data will be organized and how companies will prioritize the item of data processing on their corporate agenda. Companies involved in the processing of personal data having a connection with the EU will have no choice but to comply and respect the requirements.

30.04.2015

Bill submitted to increase penalty powers of the Dutch Data Protection Authority

Articles - On 24 November 2014 State Secretary Teeven (from the VVD, a conservative-liberal party) submitted a second memorandum of amendment concerning the legislative proposal adjusting the Dutch Data Protection Act (“DDPA”). The amendment, to be introduced through an adjustment of article 66 DDPA, is intended to give the Dutch Data Protection Authority (“DPA”) the authority to impose higher administrative fines and to be able to do so in more cases.

12.11.2015 BE law

Brussels Court orders Facebook to stop collecting personal data of non-members

Articles - Facebook uses “datr-cookies” to collect personal data of non-members. These datr-cookies are automatically installed on the browsers of non-members when they visit a Facebook.com webpage. Facebook also makes use of so-called “social plugins” on third-party websites, which allows internet users to use some of the functionalities offered by Facebook, such as “like”, “share”, or commenting on a webpage.

30.04.2015 BE law

Bhaalu case: Flemish Media Regulator rules in favor of broadcasters Medialaan, SBS Belgium, and VRT in their suit against Right Brain Interface

Articles - Right Brain Interface NV is a young technology company that has created a remote DVR (digital video recording) storage service called Bhaalu. In essence, this service allows its subscribers to record the television shows, which they can watch according to their TV channels’ subscription and store them on servers owned by the unincorporated association of Bhaalu users (“in the cloud”). This way, Bhaalu users can watch TV shows on demand up to 3 months after they have been aired.

07.10.2015 NL law

Data transfers to the US: the European Court of Justice declares that the EU Commission’s Safe Harbour Decision is invalid

Articles - The Data Protection Directive (95/46/EC) provides that European companies may transfer personal data to countries outside the European Economic Area if such a country ensures an adequate level of personal data protection.

30.04.2015 NL law

The Dutch House of Representatives requests Privacy Impact Assessment for new legislation

Articles - On 11 November 2014, the motion Segers/Oosenbrug on Privacy Impact Assessments was adopted by the House of Representatives [“the House”]. The motion was proposed in connection with a legislative proposal, namely 34000 VII Budget Memorandum of Interior and Kingdom Relations 2015. The House expects a so-called Privacy Impact Assessment [“PIA”] to be performed by the government when proposed legislation may have an impact on the processing of personal data. If the PIA is not performed, it will be up to the government to explain why the PIA is missing.