Datenschutzerklärung
1. Controller
Fortius S.A. („Fortius,“ „we,“ „us“)
Société anonyme incorporated under the laws of the Grand Duchy of Luxembourg
Registered office: 940, Parishaff, L-2315 Senningerberg, Luxembourg
RCS Luxembourg: B184396
2. Contact
For any question regarding this Privacy Policy or the processing of your personal data, you may contact us at:
Email: dpo@fortius.lu
Phone: +352 277 20 277
3. Scope
This Privacy Policy describes how Fortius processes personal data collected through this website, namely via the contact form, the newsletter sign-up, and the appointment booking function. It does not cover personal data collected in the context of an existing or prospective client relationship (e.g. onboarding and due diligence documentation), which is governed by separate client agreements and disclosures issued in accordance with the Luxembourg law of 12 November 2004 on the fight against money laundering and terrorist financing, as amended.
4. Personal data we collect and why
| Purpose | Data collected | Legal basis |
|---|---|---|
| Responding to enquiries submitted via our contact form | Name, email address, phone number, and the content of your message | Legitimate interest in responding to enquiries addressed to us, and/or steps taken at your request prior to entering into a contract (Art. 6(1)(b) and (f) GDPR) |
| Sending our newsletter | Name and email address | Consent (Art. 6(1)(a) GDPR), which you may withdraw at any time |
| Booking an appointment (via Calendly) | Name, email address, and any information you choose to provide when scheduling | Steps taken at your request prior to entering into a contract, and/or legitimate interest in managing appointments (Art. 6(1)(b) and (f) GDPR) |
| Website analytics (see Section 5) | Usage and technical data (e.g. pages visited, browser type, approximate location, device information) | Consent, collected via our cookie banner (Art. 6(1)(a) GDPR) |
5. Cookies and analytics
This website uses cookies operated through Piwik Pro for audience measurement and analytics purposes. Non-essential cookies are only placed with your consent, which you can give, refuse, or withdraw at any time via our cookie banner. Strictly necessary cookies required for the website to function are exempt from consent. For further detail on the cookies used and their retention periods, please refer to our cookie banner.
6. Recipients of personal data
Depending on the purpose of processing, your personal data may be shared with the following categories of recipients, acting as processors or, where applicable, independent controllers:
- Maqit, as provider of our KYC/AML screening and monitoring platform, where relevant to a client relationship;
- our IT and website hosting providers;
- Piwik Pro, as our website analytics provider;
- Calendly, as our appointment scheduling provider;
- our professional advisers (lawyers, auditors, insurers);
- competent authorities — in particular the Financial Intelligence Unit and the Administration de l’Enregistrement, des Domaines et de la TVA acting in its capacity as our AML/CTF supervisory authority — and judicial or administrative bodies. Fortius does not systematically or automatically share personal data with these authorities. Disclosure is made only where Fortius is subject to a specific legal obligation to do so, in particular under Article 5 of the Luxembourg law of 12 November 2004 on the fight against money laundering and terrorist financing, as amended, or under equivalent provisions of other applicable legal texts, and strictly within the limits set by those provisions.
We do not sell your personal data to third parties.
7. International transfers
Some of the recipients referred to in Section 6 (in particular our website hosting provider and our appointment scheduling provider) are located outside the European Economic Area, including in the United States. Where this is the case, the transfer is carried out on the basis of the European Commission’s Standard Contractual Clauses, an adequacy decision (including, where applicable, the EU-U.S. Data Privacy Framework), or another safeguard recognized under Article 46 GDPR. You may request further information on these safeguards using the contact details in Section 2.
8. Retention period
We retain personal data collected through this website only for as long as necessary for the purposes set out above, namely:
- contact form submissions: for the duration of our exchange and a reasonable follow-up period, and in any event no longer than 3 years from your last contact with us if no further engagement follows;
- newsletter data: until you unsubscribe;
- appointment data: for the duration necessary to manage and follow up on the appointment.
Where a client relationship is established, applicable retention periods under the Luxembourg AML/CTF law of 12 November 2004, as amended, and other statutory requirements apply instead, as set out in our client documentation.
9. Your rights
Under the General Data Protection Regulation, you have the right to request access to, rectification or erasure of, your personal data, to restrict or object to its processing, and to data portability. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, please contact us using the details in Section 2.
You also have the right to lodge a complaint with the Luxembourg data protection authority:
Commission Nationale pour la Protection des Données (CNPD)
1, avenue du Rock’n’Roll, L-4361 Esch-sur-Alzette, Luxembourg
www.cnpd.lu
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date.
11. Last updated
This Privacy Policy was last updated on 18 September 2026.