Data controller
Who processes your data?
The controller of the personal data collected on this website is:
WingedProw Advisory and Solutions S.A.Luxembourg public limited company
Route de Trèves 6D, Senningerberg
L-2633 (Niederanven), Luxembourg
VAT number: LU36884024
Represented by its CEO, Fayçal Chaddad
Email: advisoryHub@wingedprow.eu
For any question regarding the protection of your personal data, you may contact the controller at the email address above.
Purposes
Why do we collect your data?
Personal data collected on this website is used exclusively for the following purposes:
- Responding to enquiries: handling messages sent through the contact form or by email.
- Managing business relationships: following up pre-contractual and contractual exchanges with prospects and clients.
- Ensuring the security and operation of the website: preventing abuse, maintaining availability and protecting our systems.
- Providing access to the editorial workspace: authenticating authorised contributors and editors.
We carry out no profiling, no targeted advertising and never sell personal data.
Data collected
What data do we collect?
We collect only the data strictly necessary for these purposes:
- Identity and contact details: first name, last name, email address, phone number and organisation, when you complete the contact form.
- Content of your message: subject, body and any attachments.
- Technical connection data: IP address, browser type, pages visited and timestamps, solely for security and diagnostic purposes.
- Authentication data: identifier and email address of users holding an editorial account.
The contact form opens your default email client: no data entered in the form is stored on our servers unless you actually send it to us by email.
Legal basis
On what legal basis do we process your data?
In accordance with Article 6 of the GDPR, our processing operations rely on the following legal bases:
- Steps taken at the request of the data subject prior to entering into a contract: responding to enquiries and preparing a possible engagement.
- Legitimate interest: website security, prevention of abuse and technical management.
- Consent: where you explicitly choose to register or to receive our communications.
- Legal obligation: retention of accounting and tax records under Luxembourg law.
Retention periods
How long do we keep your data?
We apply proportionate and limited retention periods:
- Enquiries without follow-up: 3 years from the last contact, in line with standard business practice.
- Clients and business relationships: for the duration of the contractual relationship, then 10 years for accounting and tax obligations.
- Technical connection data: 12 months maximum, unless a legal obligation requires otherwise.
- Inactive editorial accounts: 2 years after the last login, then deletion or anonymisation.
After these periods, data is deleted, anonymised or archived in accordance with applicable statutory periods.
Recipients
Who has access to your data?
Your data is strictly confidential and accessible only to the following recipients:
- Authorised staff of WingedProw Advisory and Solutions S.A.: employees, senior advisors and administrators involved in handling your request.
- Technical service providers: processors involved in the infrastructure or maintenance of the website, bound by contracts compliant with Article 28 of the GDPR.
We do not transfer your data outside the European Economic Area (EEA), except where required by law or where the provider concerned offers adequate safeguards in accordance with the GDPR.
Security
How do we protect your data?
We implement appropriate technical and organisational measures to ensure the security of your data:
- Secure HTTPS/TLS connection across the entire website.
- Strong authentication for access to the administration workspace.
- Infrastructure operated in line with recognised security standards.
- Access to personal data restricted to strictly authorised staff.
- Backup and data recovery procedures.
In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will inform you as soon as possible in accordance with the GDPR.
Your rights
Exercising your rights
Under the GDPR and Luxembourg law, you have the following rights:
- Right of access: obtain confirmation that data concerning you is processed and receive a copy of it.
- Right to rectification: have inaccurate or incomplete data corrected.
- Right to erasure: request the deletion of your data in certain cases.
- Right to restriction of processing: have the use of your data restricted.
- Right to object: object to the processing of your data on legitimate grounds.
- Right to data portability: receive your data in a structured, commonly used and machine-readable format.
- Right to withdraw your consent at any time, where processing is based on consent.
To exercise these rights, please write to:
You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD).