EU GDPR Privacy Policy

1. Data Controller

The data controller responsible for the processing of data collected through this website is:
AR-PRO GROUP SA (Luxembourg)
Executive Offices, Grand Duchy of Luxembourg
Contact: privacy@arpro-group.com

2. Scope and Nature of Processing

We process personal and organizational data (such as names, business contact details, company names, and inquiry specifics) strictly for the purpose of responding to institutional consultations, conducting mandatory statutory KYC and anti-money laundering assessments, and executing agreed advisory mandates.

3. Legal Bases for Processing (Art. 6 GDPR)

Processing of your data is carried out on the following legal grounds:

• Contractual & Pre-contractual Measures (Art. 6(1)(b)): To evaluate and fulfill consultative and commercial advisory requests.
• Legal Obligations (Art. 6(1)(c)): To satisfy European and Luxembourg statutory AML/CFT compliance mandates.
• Legitimate Interests (Art. 6(1)(f)): To maintain platform security, prevent fraud, and manage commercial relationships.

4. Data Subject Rights (Articles 15–22 GDPR)

Under the EU General Data Protection Regulation, you have the following rights at any time:

• Right to access personal data held about you (Art. 15)
• Right to rectification of inaccurate data (Art. 16)
• Right to erasure of data ("right to be forgotten", Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)

You may exercise any of these rights by emailing privacy@arpro-group.com. You also have the right to lodge a complaint with the National Commission for Data Protection in Luxembourg (CNPD - Commission Nationale pour la Protection des Données).