Privacy Policy

01Data Controller

Company

AD VALOREM S.À R.L.

Registered office

25A Boulevard Royal, L-2449 Luxembourg

RCS Luxembourg

B178095

VAT / TVA

LU26224349

Email

info@advalorem.lu

Telephone

+352 621 186 048

Website

advalorem.lu

02Introduction

This Privacy Policy explains how AD VALOREM collects, uses, stores and protects personal data in accordance with the GDPR and Luxembourg law. AD VALOREM is not a regulated financial entity; it is not authorised or supervised by the Commission de Surveillance du Secteur Financier (CSSF) (see our Legal Notice, Section 2).

03Personal Data We Collect

Depending on the nature of the interaction, we may process the following categories of personal data:

• Identification data: full name, date of birth
• Contact details: email address, telephone number, postal address
• Professional information: company name, role, industry
• Communication data: content of messages, enquiries and correspondence
• AML/KYC data: identity documents, beneficial ownership information, source-of-funds documentation (where legally required)
• Website usage data: IP address, browser type, pages visited, session duration
• Cookie data: strictly necessary session data (see Section 9)

04Purposes of Processing and Legal Bases

• Responding to enquiries and initial contact — Art. 6(1)(b) GDPR (pre-contractual measures)
• Client onboarding and contract preparation — Art. 6(1)(b) GDPR
• Client relationship management — Art. 6(1)(b) GDPR
• Compliance with AML/KYC obligations, where applicable — Art. 6(1)(c) GDPR in conjunction with the Luxembourg AML Law
• Website security and operation — Art. 6(1)(f) GDPR (legitimate interest)
• Marketing communications, with explicit consent only — Art. 6(1)(a) GDPR

05AML / KYC Notice

Where required by applicable anti-money laundering legislation, AD VALOREM collects and verifies identity documents and beneficial ownership information in accordance with the Luxembourg Law of 12 November 2004 on combating money laundering and terrorist financing, as amended.

06Retention Periods

• AML/KYC records: 5 years after the end of the business relationship — extendable to 10 years upon regulatory order (Art. 4 Luxembourg AML Law)
• Commercial and accounting records: 10 years (Luxembourg commercial law)
• Contractual documents: 10 years from the end of the contract
• General correspondence without a resulting contract: 3 years
• Website usage data and technical logs: 12 months

07Recipients of Personal Data

Personal data is shared only to the extent necessary for the processing purposes described above. Potential recipients include:

• IT and hosting providers
• Messaging service provider WhatsApp (Meta), if you contact us via WhatsApp
• Legal advisers, tax consultants and auditors
• Competent authorities (e.g. tax administration, judicial authorities), where legally required
• Professional service providers engaged in the performance of contracts

08International Transfers

Where personal data is transferred outside the European Economic Area (EEA), such transfers are made exclusively on the basis of an adequacy decision by the European Commission, Standard Contractual Clauses (SCCs), or other safeguards recognised under the GDPR.

09Cookies

advalorem.lu uses strictly necessary cookies only. No analytics, marketing or third-party cookies are set.

• Strictly necessary cookies: session cookies required for secure website operation
• Functional cookies: none
• Analytics / performance cookies: none
• Marketing / advertising cookies: none

As only strictly necessary cookies are used, no separate consent banner is required under the ePrivacy Directive or the GDPR.

10Contact via WhatsApp

You can also contact us via WhatsApp. The WhatsApp button on our website is a simple link: no data is sent to WhatsApp until you click it and start a chat.

If you write to us on WhatsApp, we receive your telephone number, your profile name and the content of your messages, and we use them to answer your enquiry (Art. 6(1)(b) GDPR for pre-contractual requests, otherwise Art. 6(1)(f) GDPR). WhatsApp Ireland Limited (Meta group) processes the message data and technical metadata as a separate controller under its own terms; see the WhatsApp Privacy Policy. Message content is end-to-end encrypted in transit. WhatsApp may transfer data outside the EEA on the safeguards described in its policy.

Please do not send identity documents or other sensitive documents via WhatsApp. If you prefer not to use WhatsApp, contact us by email or telephone instead.

11Your Rights

Data subjects have the following rights with respect to personal data processed by AD VALOREM:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise any of these rights, write to info@advalorem.lu.

12Right to Lodge a Complaint

Data subjects may lodge a complaint with the Luxembourg data protection authority, the CNPD (Commission Nationale pour la Protection des Données): cnpd.public.lu.

13Data Security

AD VALOREM implements appropriate technical and organisational measures to protect personal data, including:

• Encrypted data transmission (TLS/HTTPS) on advalorem.lu
• Access restrictions based on the principle of least privilege
• Regular review of systems and service providers
• Confidentiality obligations for all persons with access to personal data

14Privacy Contact

AD VALOREM — Data Protection
25A Boulevard Royal, L-2449 Luxembourg
info@advalorem.lu