INTRODUCTION

 

Sartafe Finance S.à r.l. places great importance on the responsible handling and protection of personal information. This Privacy Policy sets out the principles governing the collection, use, processing, retention, and protection of personal data obtained through this website.

 

By visiting or using this website, you confirm that you have read and understood the practices described in this Privacy Policy.

 

DATA CONTROLLER

 

Under applicable data protection laws, including Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), Sartafe Finance S.à r.l. acts as the controller of personal data processed in connection with this website.

Additional information concerning the company and its legal status can be found in our Legal Notice.

 

PERSONAL DATA WE COLLECT

 

Personal information may be obtained when you choose to communicate with us through this website, by email, or through other available communication channels.

 

Depending on the nature of your interaction with us, the information provided may include:

 

• Full name

• Email address

• Telephone or mobile number

• Company or organisation name

• Professional or business-related information

• Any information included in your enquiry or correspondence

 

In addition, certain technical information may be collected automatically when you visit the website. This may include your IP address, browser and device details, and information relating to how the website is accessed and used.

PURPOSE OF PROCESSING

 

Personal information collected through this website may be used where necessary for legitimate and relevant business purposes. Depending on the circumstances, such processing may include:

 

• Handling and responding to questions, enquiries, or requests

• Providing information about our activities and services

• Establishing and maintaining professional or business relationships

• Maintaining, developing, and improving the website and its functionality

• Meeting applicable legal, regulatory, and compliance requirements

• Safeguarding our legitimate interests, rights, and business operations

LEGAL BASIS FOR PROCESSING

 

Depending on the nature and purpose of the processing, personal data may be handled on one or more of the following legal grounds permitted under applicable data protection legislation:

 

• Consent — where you have expressly agreed to the processing of your personal information for a specific purpose.

• Contractual or pre-contractual necessity — where processing is required to take steps at your request or to perform an agreement.

• Legal and regulatory requirements — where processing is necessary to comply with an obligation imposed by applicable law.

• Legitimate interests — where processing is necessary to protect and pursue the legitimate interests of Sartafe Finance S.à r.l. SPF, provided that these interests do not override the rights and freedoms of the individuals concerned.

DATA RETENTION

 

Personal information is kept only for as long as reasonably necessary to achieve the purposes for which it was obtained. Retention periods may also be determined by applicable legal, regulatory, accounting, or operational requirements, after which the relevant data will be securely deleted, anonymised, or otherwise handled in accordance with applicable law.

DATA SHARING

 

Where appropriate and in accordance with applicable law, personal information may be disclosed to selected third parties where this is necessary to support our activities, provide requested services, meet professional requirements, or comply with legal and regulatory obligations. Such recipients may include service providers, external professional advisers, and competent public or regulatory authorities.

 

Sartafe Finance S.à r.l. does not sell, lease, or otherwise make personal information available to third parties for commercial purposes unrelated to our legitimate business activities.

DATA SECURITY

 

Sartafe Finance S.à r.l. applies appropriate technical and organisational safeguards designed to protect personal information from unauthorized access, misuse, loss, alteration, disclosure, or destruction.

 

Although reasonable measures are taken to maintain the confidentiality and security of personal data, no online transmission or electronic storage system can be considered completely secure. Accordingly, absolute security cannot be guaranteed.

YOUR RIGHTS

 

Subject to the conditions and limitations established by applicable data protection laws, individuals may have the following rights in relation to their personal information:

 

• Right of access — to obtain information about the personal data we hold and how it is processed.

• Right to rectification — to request the correction or updating of inaccurate or incomplete information.

• Right to erasure — to request the deletion of personal data where the applicable legal requirements are met.

• Right to restriction — to request that the processing of personal information be limited in certain circumstances.

• Right to object — to object to specific types of processing where permitted by law.

• Right to data portability — to receive personal information in a structured, commonly used, and machine-readable format where applicable.

• Right to withdraw consent — where processing is based on consent, this consent may be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.

 

Requests relating to these rights may be submitted using the contact details made available on this website.

COOKIES

 

Our website may make use of cookies and comparable technologies to support essential website functions, improve overall performance, and better understand how visitors interact with our online services.

 

You can manage, restrict, or remove cookies through the settings available in your web browser. Please note that disabling certain cookies may affect the availability or proper functioning of some website features.

 

Where relevant, further details regarding the use and management of cookies may be provided in a separate Cookie Policy.

THIRD-PARTY LINKS

 

Our website may provide links to websites, platforms, or online resources operated independently by third parties. These links are provided for convenience and informational purposes only.

Sartafe Finance S.à r.l. does not operate or control these external websites and is not responsible for their content, privacy policies, security measures, or data processing practices. We recommend reviewing the privacy terms applicable to any third-party website you choose to visit.

CHANGES TO THIS PRIVACY POLICY

 

This Privacy Policy may be revised from time to time to reflect changes in applicable legislation, regulatory requirements, our business activities, or the way in which personal information is handled.

 

Any updated version will be made available on this page. We encourage visitors to review this section periodically to remain informed about any changes to our privacy practices.

CONTACT

 

If you have any questions, concerns, or requests concerning this Privacy Policy or the handling of your personal information, you may contact Sartafe Finance S.à r.l. using the contact details provided on this website.

RIGHT TO LODGE A COMPLAINT

 

If you consider that the processing of your personal information may not comply with applicable data protection requirements, you may submit a complaint to the relevant data protection supervisory authority in Luxembourg, in accordance with your rights under applicable legislation.