← Back to home

Privacy Policy

Last updated: 12 January 2026
In line with the EU General Data Protection Regulation (GDPR)

1. Identity of the Data Controller

2. Personal Data Collected

We only collect personal data that is strictly necessary to provide our services and process your requests.

2.1 Via the contact form

When you contact us through the website form, we collect:

• Full name – to identify you and personalise our response
• Company – to understand the professional context of your request
• Email address – to respond to you
• Phone number – to contact you where appropriate
• Subject – to route your request to the right contact person
• Message – to understand your needs

2.2 Technical data collected automatically

When you visit the site, the following technical data may be collected automatically:

• IP address – for security and anti‑spam purposes (via Cloudflare Turnstile)
• Browser type – to optimise display
• Operating system – to improve compatibility
• Date and time of connection – for security logs
• Pages visited – to improve user experience

3. Purposes and Legal Bases

Your data is processed for the following purposes and on the following legal bases (GDPR):

• Processing contact requests – legitimate interest / pre‑contractual measures (Art. 6(1)(f) and 6(1)(b))
• Responding to your questions – pre‑contractual measures (Art. 6(1)(b))
• Spam protection (Turnstile) – legitimate interest in securing the site (Art. 6(1)(f))
• Site security and improvement – legitimate interest (Art. 6(1)(f))
• Compliance with legal obligations – legal obligation (Art. 6(1)(c))

4. Data Recipients

Your personal data is only processed by:

• Authorised staff members of idassociates Sàrl in charge of processing contact requests
• Senior management for commercial follow‑up and client relationships

We may also use technical providers such as:

• Cloudflare (USA) for hosting, CDN, DDoS protection and Turnstile anti‑spam
• Email service providers for secure delivery of contact form messages

5. Data Retention

Your personal data is retained only for as long as necessary for the purposes for which it was collected:

• Unanswered contact requests: up to 3 years
• Active business relationships: term of the relationship + 5 years (limitation period)
• Accounting and tax obligations: 10 years
• Security logs: up to 12 months

6. Your GDPR Rights

In accordance with the GDPR, you have the following rights with respect to your personal data:

• Right of access – obtain a copy of your data
• Right to rectification – correct inaccurate or incomplete data
• Right to erasure – in certain situations (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object – notably to processing based on legitimate interest
• Right to withdraw consent – where processing is based on consent

You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg.

7. Security

idassociates Sàrl implements appropriate technical and organisational measures to ensure the security of your data:

• HTTPS encryption (SSL/TLS)
• Cloudflare WAF and DDoS protection
• Cloudflare Turnstile anti‑bot solution on forms
• Access restricted to authorised persons only
• Staff awareness and confidentiality commitments

8. Cookies

The LuxFundLiquidation website only uses strictly necessary and security cookies (for Cloudflare protection and Turnstile). No advertising tracking cookies are used.

9. Changes to this Policy

This privacy policy may be updated to reflect changes in legislation or our data processing practices. Any material change will be announced on the website. The date of the latest update is shown at the top of this page.

10. Contact – Data Protection

For any question relating to the protection of your personal data or this privacy policy, you can contact:

← Back to home