Privacy notice.

This notice explains how Corentera Capital S.à r.l. handles personal data in connection with this website. It is written under Regulation (EU) 2016/679 (the GDPR) and the Luxembourg law of 1 August 2018 on the organisation of the National Commission for Data Protection.

The short version

This website sets no cookies, runs no analytics, embeds no tracking pixels and carries no advertising or social media trackers. There is no contact form. If you simply read these pages, the only personal data processed is what any web server necessarily records in order to serve them to you.

Controller

Corentera Capital S.à r.l., 38, Grand-Rue, L-6630 Wasserbillig, Luxembourg (RCS Luxembourg B307290), is the controller for the processing described here. You can reach us at info@corentera.com.

What we process, and why

Server logs. Our hosting provider records technical data for each request: IP address, date and time, the page requested, referring page, and browser and operating system identifiers. These logs exist to operate the site, diagnose faults and protect against abuse. The legal basis is our legitimate interest in running a secure and functioning website (Article 6(1)(f) GDPR).

Correspondence. If you write to us, we process your name, your email address and whatever you choose to put in your message, in order to answer you and to keep a record of the exchange. The legal basis is our legitimate interest in responding to enquiries, and — where your message concerns a prospective engagement — the steps taken at your request prior to entering a contract (Articles 6(1)(f) and 6(1)(b) GDPR).

We do not use personal data for automated decision-making or profiling.

Who else is involved

We use a small number of processors, each under a data processing agreement:

• Vercel Inc. (United States) hosts this website. Server-side execution is configured to the Frankfurt region; static assets are delivered through a global content delivery network. Transfers outside the EEA are covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.
• Microsoft Ireland Operations Limited provides our email and office environment, so correspondence with us is processed there.

We do not sell personal data and we do not share it with third parties for their own purposes. We may disclose data where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

How long we keep it

Server logs are retained for a short period for security and diagnostic purposes and are then deleted or aggregated. Correspondence is kept for as long as needed to deal with the matter and afterwards for the periods required by applicable commercial, tax and financial-sector rules.

Your rights

You have the right to request access to your personal data, and its rectification or erasure; to request restriction of processing; to object to processing carried out on the basis of legitimate interests; and, where applicable, to data portability. To exercise any of these, write to info@corentera.com.

You also have the right to lodge a complaint with a supervisory authority. In Luxembourg this is the Commission nationale pour la protection des données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux.

Changes

We may update this notice as the firm and this website develop. The date at the top shows when it was last revised.