Privacy Policy

1. Introduction

At GTF-GROUP, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Personal identification information (name, date of birth, nationality)
• Contact information (email, phone number, address)
• Financial information (income, employment details)
• Identity documents (passport, ID card, driver's license)
• Transaction data and account activity

2.2 Information We Collect Automatically

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Location data (with your consent)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Provide and manage your account and services
• Process transactions and payments
• Verify your identity and prevent fraud
• Comply with legal and regulatory requirements
• Improve our services and develop new features
• Communicate with you about your account and services
• Send marketing communications (with your consent)

4. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide services you've requested
• Legal obligation: To comply with laws and regulations
• Legitimate interests: For business operations and fraud prevention
• Consent: For marketing and certain data processing activities

5. Information Sharing

We may share your information with:

• Service providers who help us operate our business
• Financial institutions for payment processing
• Regulatory authorities and law enforcement when required
• Credit reference agencies for identity verification
• Third parties with your explicit consent

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically:

• Account information: 5 years after account closure
• Transaction records: 7 years for regulatory compliance
• Marketing data: Until you withdraw consent
• Technical logs: 90 days

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to data processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with supervisory authorities

9. Cookies

We use cookies and similar technologies to improve your experience, analyze usage, and deliver targeted advertising. You can manage cookie preferences through your browser settings.

Types of cookies we use:

• Essential cookies: Required for service functionality
• Performance cookies: Help us improve our services
• Functional cookies: Remember your preferences
• Marketing cookies: Deliver relevant advertisements

10. International Transfers

Your data may be transferred to countries outside the European Economic Area. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our services are not intended for individuals under 18 years old. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our services.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

GTF-GROUP
Data Protection Officer
123 Financial Street
L-1234 Luxembourg
Email: privacy@gtf-group.xyz
Phone: +352 123 456 789

14. Supervisory Authority

You have the right to lodge a complaint with the supervisory authority:

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux
Website: cnpd.public.lu