MSCA S.à r.l.-s (hereinafter referred to as “we” or “MSCA”) attaches great importance to the respect of your privacy and is aware of the importance you grant it.

We therefore make every effort to ensure that you can use the services offered by this web-site with confidence, including processing your data in a fully confidential manner, in strict compliance with applicable laws and regulations on the protection of personal data, as well as in accordance with your own preferences.

This privacy policy sets out our personal information collection and sharing practices for our website, and that apply to personal information collected during our relationships with our counterparties (either via this website, in person or over the phone). Please read this privacy policy carefully before accessing or using our website.

Please read this privacy policy carefully before accessing or using our website.

1. Responsible for the processing of your personal data

The personal data concerning you collected from this website are subject to automated pro-cessing for which the person in charge (the “data controller”) is:

MSCA Management System Consulting and Auditing s.à.rl.-s, a Luxembourg Société à responsabilité limitée simplifiée incorporated under the laws of the Grand Duchy of Luxembourg

Registered office: 3, rue Jean Simon L - 3568 Dudelange, Grand Duchy of Luxem-bourg

Registered with the Luxembourg Trade an Companies’ Register under the number B242940

We will process your personal data in accordance with any data protection laws and regula-tions applicable in Luxembourg from time to time (including but not limited to the Regulation n°2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the Luxembourg law of 1st Au-gust 2018 on the organization of the National Commission for Data Protection and the general regime on data protection, as may be amended or replaced, collectively the “Data Protection Laws”).

2. Personal information we may collect about you

We may collect and process the following personal information about you:

Information you provide to us ► personal information that you provide to us, for example contact details;
Our correspondence ► information about any correspondence that we may have with you, including when you contact us via the “contact us” links on the websites;
[Website and communication usage ► details of your visits to the websites and in-formation collected through cookies etc. including, but not limited to, your IP ad-dress and domain name, your browser version and operating system, traffic data, location data, web logs and other communication data, and the resources that you access].

3. How we use your personal information

Under the Data Protection Laws, we must establish and inform you of the legal basis or “ground” for our use of your personal information.

Use of personal information under the Data Protection Laws must be based on one of a num-ber of legal « grounds ».

The principal legal grounds that may apply to our use of your personal data are:

To provide our services and conduct our business ► to provide our ser-vices, and to carry out obligations arising from any agreements entered into between you and us;
Use basis: contract performance, legitimate interests (to enable us to per-form our obligations and provide our services to you)
Use basis: contract performance, legitimate interests (to enable us to per-form our obligations and provide our services to you) [To ensure website content is relevant ► to ensure that content from our websites is presented in the most effective manner for you and for your device;
Use basis: consent, contract performance, legitimate interests]
In connection with legal or regulatory obligations ► We may process your personal information to comply with our regulatory requirements or in con-nection with dialogue with our regulators, as applicable.
Use basis: legal obligations, legal claims, legitimate interests (to cooperate with law enforcement and regulatory authorities)

4. Passing on data

[We shall only pass on your personal data to third parties (“Recipients”) if we are entitled to do so under the provisions of data protection law and if the processing is necessary for the performance of a contract to which you are a party.

The Recipients may, under their own responsibility, disclose personal data to their agents and/or delegates (the “Sub-Recipients”), which shall process the personal data for the sole purposes of assisting the recipients in providing their services to the controller and/or assist-ing the Recipients in fulfilling their own legal obligations.

The Recipients and Sub-Recipients may, as the case may be, process the personal data as data processors (when processing the personal data on behalf and upon instructions of the controller and/or the Recipients), or as distinct controllers (when processing the personal data for their own purposes, namely fulfilling their own legal obligations).

We shall not transfer your personal data outside of the European Economic Area.

5. Protection

No data transmission over the Internet or website can be guaranteed to be secure from intrusion.

However, we maintain commercially reasonable physical, electronic and procedural safe-guards to protect your personal information in accordance with data protection legislative re-quirements.

6. Duration of retention of your personal data

We restrict access to your personal information to those persons who need to use it for the relevant purpose(s).

Your personal data collected and processed by MSCA will only be kept for as long as is strict-ly necessary for the purpose of the intended processing or to comply with a legal obligation imposed by applicable law, but never beyond applicable statutory limitation periods.

7. Your Rights

As we process your personal data, you have the following rights at any time and within the limits set by law:

to access your personal data (to know which data has been collected and processed and to obtain a copy of it), to request their correction if they are inaccurate or incom-plete, their deletion if they are obsolete;
to oppose the processing of your data on legitimate grounds (in particular for commer-cial prospecting purposes);
if the preconditions are met, request that the processing of your data be limited or de-finitively deleted (right to oblivion);
request to receive a copy of the personal data you have provided to us in a structured format (portability), unless this right infringes the rights and freedoms of third parties;
request not to be subject to a decision based exclusively on automated processing, including profiling, where this decision produces legal effects concerning you or signifi-cantly affecting you in a similar way. You may also request information on the logic be-hind such processing, challenge it and request that it be reviewed by a natural person;
withdraw your consent at any time for processing operations based on it.

You may exercise any of these rights free of charge by contacting us by e-mail at the follow-ing address: info@msca.lu. In order for us to satisfy your request and to avoid any identity theft, a copy of both sided of a valid identity document must be attached to your mail.

You can also lodge a complaint with the National Commission for Data Protection (CNPD), via their website: www.cnpd.lu.

8. Changes to our privacy policy

We may change the content of our website and how we use cookies without notice, and con-sequently our Privacy Policy may change from time to time in the future.

We therefore encourage you to review them when you visit the website from time to time to stay informed of how we are using personal information.

9. Cookie policy

For more information about how we use cookies, please refer to our [cookie policy].

10. Contact details

If you would like to get in touch with us with regards to your personal data and exercise any of the rights listed above, please contact us at: info@msca.lu.