Privacy policy
We collect little data, within a defined framework, and for a limited time. This page explains which data, why, for how long, and how to take back control of it.
Who processes your data
- Data controller
- Privalux Management S.A.45, allée Scheffer, L-2520 Luxembourg
- Data Protection Officer
- dpo (at) privalux.luYour contact for any question or request
- Supervisory authority
- CNPDCommission nationale pour la protection des données, Luxembourg
- Applicable framework
- Regulation (EU) 2016/679General Data Protection Regulation
What we collect, and why
The data we receive comes from you, through your messages, by subscribing to our publications or in the course of our services. We neither buy it nor gather it elsewhere.
Answering your enquiry
Name, email address, telephone number and the content of your message, sent by email or through the contact form. This data is used to reply to you and, where applicable, to prepare a first meeting.
Delivering our services
The data required for the contractual relationship and for compliance with our regulatory obligations, in particular know-your-client and anti-money-laundering requirements.
Sending you our publications
Email address, if you have asked to receive our analyses. You may unsubscribe at any time; every mailing carries an unsubscribe link.
Serving pages securely
IP address, date and time, page requested and browser type, recorded by our hosting provider in its technical logs. They are used to deliver pages and protect the site against abuse, then deleted after seven days.
Locating our offices
If you accept external content, the map on the Contact page is loaded from OpenStreetMap, which then receives your IP address and technical information about your browser. Without that consent, the map is not loaded.
Remembering your choice
Your privacy choice and its date, kept for six months in your browser. This information is never sent to us.
The site places no cookies and uses no audience measurement tool. What it keeps in your browser and what it loads from other sites is set out in our cookie policy.
Retention, recipients and security
Retention period
Data collected through this website is retained for one year at most, and the host's technical logs for seven days. Data linked to a contractual relationship follows the longer retention periods imposed by Luxembourg financial regulation, and is deleted once those periods end.
Recipients
Your data is neither sold, nor rented, nor passed to third parties for commercial purposes. It is accessible only to those people within the company who need it in order to handle your request, and to the technical providers who host the website, Hostinger International Ltd., and our email, Microsoft 365. These providers act on our instructions, under a contract that complies with Article 28 of the GDPR.
Location
Our providers are established within the European Union. A single transfer takes place outside the Union, and only if you accept it: displaying the map sends your IP address to the OpenStreetMap Foundation, based in the United Kingdom, which the European Commission recognises as offering adequate protection.
Security
Data is encrypted and access to it is restricted to authorised staff. For your part, we ask you not to send bank details or identity documents through the contact form, as the internet does not guarantee the confidentiality of exchanges.
Send your request to the Data Protection Officer. We reply within one month.
For the attention of the Data Protection Officer
45, allée Scheffer
L-2520 Luxembourg
Access, rectification, erasure, restriction, portability and objection, and withdrawal of your consent at any time. You may also lodge a complaint with the CNPD.