This Personal Data Protection Policy (hereinafter “Policy”) established pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to of the processing of personal data and the free movement of such data (hereinafter “GDPR”) is intended for all FBK customers, all visitors to the FBK website (https://fbk. lu/) and to all persons who contact FBK (eg. via the FBK website (https://fbk.lu/), telephone or email) (hereinafter “you”, “your” or “yours”).
This Policy governs the processing, including the collection, use, retention, disclosure and protection (hereinafter “processing”) of your personal data that is processed by FBK (hereinafter “personal data ”) when FBK provides you with services, you visit the FBK website (https://fbk.lu/) or you contact FBK (hereinafter “your relationship with FBK”).
Fiduciaire Benoy Kartheiser S.C., a civil company incorporated under the laws of Luxembourg and registered in the Luxembourg Trade and Companies Register under number E1868, established and having its registered office at 24, rue Saint Mathieu, L-2138 Luxembourg (“FBK”) is the legal entity responsible for the processing of your personal data in the context of your relationship with FBK.
Consequently, the processing of your personal data by FBK is subject to the laws and regulations of the Grand Duchy of Luxembourg.
Respecting and protecting your privacy is important to FBK. Thus, FBK takes all necessary security measures to protect your personal data from unauthorised access, modification, disclosure or destruction. FBK’s efforts to protect your personal data are in any case governed by the rules of professional secrecy to which FBK is subject in its capacity as a fiduciary-member of the Ordre des Experts-Comptables de Luxembourg.
FBK processes personal data provided directly by you in the context of your relationship with FBK.
The categories of personal data that FBK processes depend on the specific context of each assignment and situation. FBK is not in a position to control the volume, extent or nature of personal data that is provided to FBK. Nevertheless, FBK endeavours to process your personal data only in accordance with the applicable data protection principles. Therefore, please only provide FBK with the personal data necessary for the intended purpose (minimisation of personal data).
FBK may also process personal data collected from other sources such as cookies that may be collected from social networks. For more information on cookies and to set your cookie preferences, please refer to the Cookie Policy (/en).
FBK may also process personal data collected from publicly available sources (e.g. Luxembourg Business Registers, press or websites), your other service providers, public administrations or customs (e.g. Administration des contributions directes, Centre commun de la Sécurité sociale) where this is necessary for the purposes described in section 3.5. below. This personal data may include personal identification data (e.g. surname, first name, gender, date and place of birth), personal data relating to your household (e.g. surname, first name, date and place of birth of your partner and children), personal contact data (e.g. postal address, e-mail address, telephone number), personal data relating to your job (e.g. job title, remuneration, hours of work, leave) and other personal data necessary for the purposes described in section 3.5. below.
You are responsible for keeping your personal data up to date and for informing FBK of any changes thereto.
Refusal to provide the personal data requested by FBK may hinder your relationship with FBK and in particular the provision of services by FBK.
When FBK provides services to you, FBK’s processing of your personal data is lawful while :
When you visit the FBK website (https://fbk.lu/), the processing of your personal data by FBK is lawful while :
When you contact FBK, the processing of your personal data by FBK is lawful where the processing is necessary for the purposes of the legitimate interests pursued by FBK or by a third party as further defined under point 3.5. ci-dessous (sauf si vos intérêts ou vos droits et libertés fondamentaux qui exigent la protection des données personnelles prévalent).
Where the processing of your personal data is based on your consent (e.g. in relation to certain cookies), you have the right to withdraw your consent at any time. Such withdrawal of consent shall not affect the lawfulness of processing based on the consent given prior to the said withdrawal.
When FBK provides services to you, FBK processes your personal data for various purposes, in particular :
When you visit the FBK website (https://fbk.lu/), FBK processes your personal data for various purposes, in particular
When you contact FBK, FBK processes your personal data for various purposes, in particular
You have, within the limits of the applicable laws on the protection of personal data, the right of access to, rectification of or erasure of your personal data and the right to limit their processing.
You also have, within the limits of applicable data protection laws, the right to receive your personal data in a structured, commonly used and machine-readable format and the right to have it transferred to another data controller of your choice where technically possible.
You have, within the limits of the applicable laws on the protection of personal data, the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that FBK processes for the purposes of its legitimate interests as defined under point 3.5. above, unless there are compelling legitimate grounds for the processing which override your interests and rights and freedoms or the processing is necessary for the establishment, exercise or defence of legal claims.
To exercise your personal data protection rights as described in this point 4, you can contact FBK by sending an e-mail to info@fbk.lu. Please indicate clearly in your request which personal data you wish to access, correct, delete or transmit, which processing of personal data you wish to restrict or which processing of personal data you wish to oppose.
Please note that your personal data protection rights are not absolute and your requests to exercise your rights may be refused in accordance with applicable laws. In such cases, however, FBK will provide you with the reasons for the rejection of your application.
FBK will process your request as soon as reasonably possible and will inform you of the action(s) taken as soon as possible and in any event within one month of receiving your request(s). If necessary, this period may be extended by two months, taking into account the complexity and number of your application(s). In this case, FBK will inform you of this extension and the reasons for the postponement within one month of receiving the request.
In the event that FBK has decided not to act on your request or has not processed your request within the above-mentioned time limits, you have the right to lodge a complaint with the competent national supervisory authority (see point 11. below).
As a matter of principle, FBK does not sell, rent, share or disclose (hereinafter referred to as “disclose”) your personal data for commercial purposes and the personal data is exclusively intended for FBK.
Nevertheless, FBK has the right to disclose your personal data to private or public third parties if one of the legal bases described in point 3.4. above is applicable.
The categories of recipients of your personal data are, as appropriate:
As a matter of principle, your personal data is processed within the European Union or even on the territory of the Grand Duchy of Luxembourg.
FBK may, however, transfer your personal data outside the European Economic Area (i.e. to “third countries”) in accordance with applicable data protection legislation. FBK may therefore transfer your personal data to third countries, particularly if appropriate safeguards are put in place.
In this case, FBK transfers the personal data under a contract signed between FBK and these subcontractors (based on the standard contractual clauses adopted by the European Commission), the latter are obliged to process the personal data disclosed only on the instructions of FBK, in accordance with this Policy and in application of appropriate security and privacy measures. If your personal data is transferred to a processor located in a third country, you have the right to obtain a copy of the signed contract by sending an e-mail with your request to info@fbk.lu.
In the event that FBK merges with another legal person or entity, in whatever form, or if FBK is partially or wholly acquired by such legal person or entity, that legal person or entity is entitled to process your personal data in accordance with this Policy.
Without prejudice to the right to further process your personal data for purposes that are not incompatible with the original purpose, and subject to the legal, regulatory or fiscal obligations to which FBK is subject, FBK shall keep your personal data in a form that allows identification for no longer than is necessary for the purposes described in point 3.5. above.
If the storage of your personal data is no longer necessary, including for FBK’s documentation obligations in accordance with the applicable statute of limitations (subject to interruption or in the event of litigation), FBK will securely delete your personal data.
This Policy is available on the FBK website (https://fbk.lu/).
FBK reserves the right to revise, change, modify, update, supplement, add or remove portions of the Policy at any time in its sole discretion. The version applicable in each case will be available on the FBK website (https://fbk.lu/).
The FBK website (https://fbk.lu/) may provide references or links to other websites or online services or facilitate access to other websites or online services (hereinafter “External Websites”).
FBK does not control these External Websites or any of their contents and FBK cannot under any circumstances be held responsible for External Websites to which FBK refers or provides a link, either directly or indirectly. In particular, FBK cannot under any circumstances be held responsible for the content of External Websites, for any information posted on them, for their policies, data protection standards, promotions, products, practices, services or actions or for any other damage, loss, failure or problem caused by or related to the External Websites.
Please note that the inclusion of any link or reference within the FBK website (https://fbk.lu/) does not imply endorsement of an External Website by FBK and it remains the case that these External Websites have separate and independent data protection policies. Therefore, FBK encourages you to review the policies, rules, terms, data protection practices and regulations of each External Website you visit.
If you have any questions about this Policy or require additional information, you may contact FBK by sending an e-mail to info@fbk.lu.
You have the right to lodge a complaint with the National Commission for Data Protection (the Luxembourg supervisory authority) with its registered office at 15, Boulevard du Jazz L-4370 Belvaux (Luxembourg) if you consider that the processing of your personal data by FBK is in breach of the provisions of the GDPR.