Data controller
International Investment Development S.A. (IID), 17 boulevard Royal, L-2449 Luxembourg, is responsible for personal data collected through this website.
Privacy contact: welcome@iid.lu · +352 621 17 29 90.
Information collected and purposes
The enquiry form collects your last name, first name, email address, subject and message. A telephone number is optional. Required fields allow us to identify and answer your enquiry; without them the form cannot be submitted. Please do not include identity documents, banking details or sensitive information.
We use this information to respond to questions and appointment requests. The legal basis is taking steps at your request before entering into a contract where relevant (GDPR Article 6(1)(b)), or IID’s legitimate interest in responding to other enquiries (Article 6(1)(f)).
The hosting service may process connection and error data to operate and secure the website. The legitimate interests are preventing abuse and protecting the service. This website does not carry out profiling or automated decisions with legal effects.
Recipients
Messages are sent to welcome@iid.lu and made available to IID personnel authorised to handle your enquiry. The website is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. Hosting, email and maintenance providers may access information needed for their tasks. Disclosure may also be required by law or by a competent authority.
The form does not subscribe you to advertising communications. It sends an email and does not create a contact database within the website.
Retention
Enquiries that do not lead to a contract are retained only for the time needed to handle them and provide relevant follow-up. This depends on the subject, ongoing exchanges and any need to retain evidence of our response. If a client relationship begins, relevant data becomes part of the client file and is subject to the requirements applicable to that relationship.
Separate retention may be necessary to meet a legal obligation or establish, exercise or defend legal claims. Technical data is retained according to hosting diagnostic and security needs. You may ask IID for the criteria applicable to your circumstances.
Google Maps and international transfers
The map is disabled by default. No Google Maps content loads until you choose “Allow Google Maps”. You may decline and use the written address. The enquiry form remains available in either case.
After you agree, Google receives your IP address and browser information. Google may use cookies or identifiers and associate information with your Google account if you are signed in. The service is provided by Google Ireland Limited for users in the European Economic Area; processing may involve other group companies and servers outside that area.
Loading this optional service relies on your consent. Google explains its transfer mechanisms, including applicable adequacy decisions and standard contractual clauses where relevant, in its Privacy Policy and transfer information.
The “Withdraw consent” button removes the map from the current page. Withdrawal does not affect prior processing and cannot remove cookies previously set by Google; you can delete those through your browser and manage your Google settings. “Directions” links open Google Maps directly under Google’s own policies.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure and restriction, and object to processing. Portability applies where its conditions are met. You may withdraw consent to consent-based processing at any time.
Email welcome@iid.lu with your request. Proportionate identity verification may be needed where there is reasonable doubt. A response must be provided within one month; this can be extended by two months for complex or numerous requests, with notification within the first month.
You may lodge a complaint with Luxembourg’s supervisory authority, the Commission nationale pour la protection des données (CNPD), without prejudice to other remedies.
Scope
This policy covers the public iid.lu website and its enquiry form. Advisory engagements and client relationships may require additional privacy information. This policy will be updated if the described features or processing change.