What data do we collect?
Estating may collect the following data:
How do we collect your data?
You directly provide Estating with most of the data we collect. We collect data and process data when you:
What is the legal basis for collecting, storing and processing personal data?
How will we use your data?
Estating S.A. collects your data so that we can:
We may also send you electronic communications about our products and services based on our legitimate interest to advertise our products and services where you have provided us with your contact details in the context of the sale of similar products and services of ours.
How long will we keep your data
We keep your data in compliance with GDPR requirements and comply with GDPR removal rules. Legal retention periods are preserved.
Data based on contact forms and emails are stored to enable processing of your questions/comments and follow-up communication. We process the data due to your consent. You may ask to revoke your consent at any time via email. Your provided data will be stored until you request erasure, the purpose for storing the data ceases or you revoke your consent.
You have the right at any time to stop us from contacting you for marketing purposes or giving your data to other Estating entities. If you no longer wish to be contacted for marketing purposes, please unsubscribe using the link in our email.
We will delete user data after account closure. If you want to delete your account, please send an email to firstname.lastname@example.org
Who we share your personal information with
We are an international prop/fin/tec company operating entities in a variety of countries. Information that you provide to us may be shared with and processed by any of these entities.
We may also share your personal information with certain trusted third parties in accordance with contractual arrangements in place with them, for example your financial advisor or third parties engaged to provide certain support or IT services, among others:
We are using cloud service providers (Microsoft 365, Amazon Web Services) which are accessible through the Internet for several business processes, e.g. document management, calendar management, email, spreadsheet applications, presentations, video conferences, chats. In this context, personal data may be processed and stored on the service provider’s servers, as far as we process data as described in this policy.
We use the services Google (Universal) Analytics, Google Analytics Remarketing, Google Ads, and the Google Tag Manager. These are services provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, “Google”). Google is based in the third country USA, which basically lacks an EU level of protection. Therefore, Standard Contractual Clauses as appropriate safeguards according to Art. 46 GDPR are completed with Google.
We use HubSpot, a service of HubSpot, Inc., 25 First Street, Combridge, MA 02141 USA (“HubSpot”), for the provision, administration and distribution of our e-mail messaging and for our customer relationship management. Further, HubSpot enables customers and prospective customers to book meetings for demonstrations and consultation with Estating. HubSpot is based in the third country USA, which basically lacks an EU level of protection. With Hubspot, Standard Contractual Clauses are completed as appropriate safeguards according to Art. 46 GDPR.
HubSpot transmits personal data to external service providers in order to offer its services. HubSpot processes personal data in accordance with European privacy standards.
For marketing purposes, we are active on social media and provide information regarding current news, events and other information which may be of interest to you. If you contact the respective page or account or our company in a social network, we will process the personal data that you provide to us in order to establish or maintain contact with you in this network.
We do not use scripted social media plugins to share data from our Website through social media. Rather, our share buttons only contain a link to the social media. As a result of this, we do not process your personal data in this context. In addition, it is ensured that your personal data such as your (possibly truncated) IP address, whole cookies or other information is only transmitted to the social media and thus possibly also to servers in the USA, if you press the relevant button. This also applies to the links to our social media pages that we have implements on our Website. It is possible that a social media provider can link your visit to our services with your user account.
For the above-mentioned purposes, we use the following social media (you can find more information in the links to the respective privacy policies included below):
LinkedIn: Website: https://www.linkedin.com;
Medium: Website: https://medium.com
Which countries we transfer your personal information to
In order to provide our services to you we may need to transfer your personal information to locations outside the jurisdiction in which you provide it or where you are viewing the website/apps. This may be a transfer of your information from a location within the European Economic Area (EEA) to outside the EEA, or from outside the EEA to a location within, for example:
We are using standard contractual clauses between Estating entities if we are sharing and processing personal information.
Where our third party services providers (see section “Who we share your personal information with”) process personal data outside the EEA in the course of providing services to us, our written agreement with them will include appropriate measures, usually standard contractual clauses.
We would like to make sure you are fully aware of all of your data protection rights.Every user is entitled to the following:
The right to access - You have the right to obtain confirmation as to whether or not we process personal data relating to you, and, where that is the case, access to the personal data and information about their processing. You have the right to request copies of your personal data, provided that this does not adversely affect the rights and freedoms of others.
The right to rectification - You have the right to request that we correct any information you believe is inaccurate. You also have the right to request to complete information you believe is incomplete.
The right to data portability - If the processing of your personal data is based on your consent or on the performance of a contract that you have with us, you have the right to request that we transfer the data concerned to another organization, where technically possible, or directly to you
The right to erasure - You have the right to request that we erase your personal data, except in certain cases, notably if we need your personal data for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
The right to restrict processing - You have the right to request that we restrict the processing of your personal data in certain situations, notably where you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of your personal data, or, where you have objected to the processing pending verficiation whether our legitimate grounds override those of you.
The right to object to processing - Where the processing of your personal data is based on the pursuance of a legitimate interest, you have the right to object to us processing of your personal data. In this case, we will no longer process your personal data unless we demonstrate compelling legitimate grounds overriding those of you or if we need your personal data for the establishment, exercise or defence of legal claims. Your right to object is unconditional with regard to the processing of your personal data for direct marketing purposes.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email:
Privacy policies of other websites
The content of third-party resources is not under our control, and we are not responsible for the contents of any of websites. The third-party hypertext links presented on this site are provided for your convenience only. The inclusion of any link on this website does not imply any recommendation, approval or endorsement of that site by us.
How to contact us
Email us at: email@example.com
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Luxembourg data protection supervisory authority Commission nationale pour la protection des données (CNPD)
The form may be completed online or sent to the CNPD by post to the following address:
Commission nationale pour la protection des données
Service des réclamations
15, Boulevard du Jazz