This is the privacy policy of Excellium Securities S.A., a Luxembourg public limited liability company (société anonyme) and a securitisation company (société de titrisation) under the Luxembourg law on securitisation dated 22 March 2004, as amended, with registered office at 412 Rte d’Esch, 1471 Cessange Luxembourg, and registered with the Luxembourg Register of Commerce and Companies (R.C.S. Luxembourg) under number B290294.
This Policy explains how personal information is collected, shared, used and protected when accessing or using this website and/or related services. Excellium Securities S.A. is committed to protecting personal information and being compliant with all data protection laws, including Regulation EU 2016/679 (GDPR).
Who We Are
Excellium Securities S.A. is the Data Controller of personal information. As a Data Controller, it determines why and how personal information is processed. Personal information is any information relating to an identified or identifiable natural person.
Why Personal Data Is Collected
Personal information is collected, used and disclosed to meet the needs of users and the business relationship, including:
- Daily management, operation and maintenance of the website and related services
- Understanding user needs and providing relevant products or services
- Administering and processing requests for information
- Compliance with regulatory and legal obligations, including tax and reporting requirements
- Responding to inquiries, providing information about services, or investigating suspicious activities
- Protecting the rights and property of Excellium Securities S.A.
Purpose and Legal Basis for Processing
| Purpose | Legal Basis |
|---|
| Providing and operating the website | Legitimate interest in providing online content |
| Improving user experience | Legitimate interest in providing a well-functioning site |
| Promoting security of the site | Legitimate interest in safety and protecting rights |
| Sending communications | Legitimate interest with prior consent |
| Handling contact and support requests | Performance of a contract / legitimate interest |
| Providing and administering services | Performance of a contract |
| Managing payments | Performance of a contract |
| Complying with legal obligations | Legal obligation / legitimate interest |
| Financial reporting | Legitimate interest in meeting reporting obligations |
| Maintaining security | Legitimate interest in fraud prevention |
Personal Information Collected
For actual or potential users, the following may be collected:
- Name, address and contact details
- Date of birth and gender
- Profession and employment details
- Information about income and wealth, including assets and liabilities
- Information about balances, trading statements and financial statements
- Any information required for Know Your Customer or Anti-Money Laundering purposes
Disclosure of Information
- Other companies within the group or regulated partners providing back office services
- Service providers and advisers providing administrative, IT, financial, regulatory, compliance or other services
- Credit providers, courts, tribunals and applicable regulatory authorities
- Anyone authorised by the data subject
All organisations handling personal information are required to acknowledge its confidentiality and comply with all relevant data protection laws.
Consent
Where the use of personal information requires consent, such consent will be provided using a consent form or any contract entered into. Data subjects have the right to withdraw consent at any time by contacting Excellium Securities S.A.
Storage of Personal Information
Personal information is held in secure computer storage facilities, cloud servers and paper-based files. Steps are taken to protect personal information from misuse, loss, unauthorised access, modification or disclosure. Subject to Anti-Money Laundering laws, records may be retained for at least five years after the business relationship has ended, and contracts for up to 10 years.
Transfers Outside the European Economic Area
Personal information may be transferred outside the EEA to processors engaged on behalf of Excellium Securities S.A. Any such transfer is ensured to be lawful with appropriate security arrangements, including standard contractual clauses adopted by the European Commission.
Rights Under GDPR
In accordance with the GDPR, data subjects have the right to:
- Request access to personal information
- Request correction of incomplete or inaccurate information
- Request erasure of personal information
- Object to processing based on legitimate interest
- Request restriction of processing
- Withdraw prior consent to processing
- Object to decisions based solely on automated processing
Cookies
Cookies are used to provide a more relevant and effective experience. Cookies are text files saved by the browser that allow servers and webpages to be identified with a particular browser.
Complaints
For any concern about privacy practices, a complaint can be made which will be acted upon promptly. If not satisfied with the response, data subjects have the right to lodge a complaint with the National Commission for Data Protection (CNPD) at cnpd.public.lu or by calling (+352) 26 10 60-1.
Contact
For any questions about this Privacy Policy or to exercise data protection rights, contact Excellium Securities S.A. by email at support@excellium-securities.com or by writing to: 412 Rte d’Esch, 1471 Cessange Luxembourg.
Last updated: 09 January 2025