Privacy Policy

Data Controller Information

boldimpact SARL is the data controller for your personal information. Our contact details are:

• Company: boldimpact SARL
• Registration Number: RCSB854796
• Address: Avenue de la Gare 33, 4200 Differdange, Luxembourg
• Email: privacy@boldimpact.top
• Phone: +352 28894724

Data We Collect

We collect various types of personal data to provide and improve our heavy machinery depreciation services. The data we collect includes:

Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, and postal address
• Business Information: Equipment details, depreciation requirements, and consultation requests
• Communication Records: Messages sent through our contact forms, emails, and phone conversations
• Service Data: Information related to equipment valuations and depreciation assessments

Information Collected Automatically

• Website Usage: IP address, browser type, device information, and pages visited
• Analytics Data: Website performance metrics and user behaviour patterns
• Cookie Data: Preferences and settings stored through cookies and similar technologies

How We Use Your Information

We use your personal data for legitimate business purposes and only as described in this policy. How we use your information includes:

Service Provision

• Providing heavy machinery depreciation guidance and consultation services
• Responding to your enquiries and service requests
• Preparing equipment valuations and depreciation assessments
• Managing client relationships and ongoing support

Business Operations

• Processing payments and managing billing
• Maintaining accurate business records
• Complying with legal and regulatory requirements
• Protecting against fraud and ensuring security

Communication and Marketing

• Sending service-related communications and updates
• Providing information about new services or regulatory changes
• Improving our website and service offerings

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To provide our depreciation services and fulfil contractual obligations
• Legitimate Interests: For business operations, security, and service improvement
• Legal Compliance: To meet regulatory requirements and legal obligations
• Consent: For marketing communications and optional services where you have given explicit consent

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: Trusted partners who assist in providing our services
• Legal Requirements: When required by law, regulation, or court order
• Business Protection: To protect our rights, property, or safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Our data retention policies include:

• Client Records: Maintained for the duration of the business relationship plus 7 years for tax and legal compliance
• Contact Enquiries: Retained for 3 years unless you request earlier deletion
• Website Analytics: Anonymised after 26 months
• Marketing Data: Retained until you withdraw consent or request deletion

Your Rights

Under GDPR and Luxembourg data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Limit how we use your data in specific situations
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on your consent

To exercise any of these rights, please contact us at privacy@boldimpact.top or +352 28894724.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Secure data transmission using encryption
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection and security

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU/EEA. If we transfer data outside this region, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without proper consent, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy regularly.

Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) if you believe we have not handled your personal data in accordance with applicable law.

Luxembourg CNPD:
1, avenue du Rock'n'Roll
L-4361 Esch-sur-Alzette
Website: cnpd.public.lu