Who we are
Ethrac is the trading name of [LEGAL_ENTITY], registered in Luxembourg under RCS number [RCS_NUMBER], with its registered office at [REGISTERED_ADDRESS]. We are the controller of the personal data described in this notice. For any privacy question or request, write to [PRIVACY_EMAIL].
What this notice covers
This notice explains what personal data we collect through this website and when you contact us, why we use it, how long we keep it and what rights you have. It does not cover the data we handle for clients during an engagement, which is governed by the contract with that client.
The data we collect and why
When | What we collect | Why we use it | Legal basis |
You send a message or email us | Name, email, company, role, topic and your message | To answer you and follow up on your enquiry | Our legitimate interest in responding to enquiries, or steps taken at your request before a contract |
You book a free consultation | Name, email, chosen time and anything you add to the booking | To hold the call and prepare for it | Steps taken at your request before a contract |
You apply to the Expert Partner network | Name, contact details, CV, background, focus areas, rates and any links you give us | To assess your application and to plan engagements that may suit you | Steps taken at your request before a contract, and our legitimate interest in maintaining a network of specialists |
You use a free tool | Work email, company, role and the answers you give | To produce and send your result | Steps taken at your request |
You opt in to the Digest or to alerts | Email address and your subscription choices | To send you the briefing you asked for | Your consent, which you can withdraw at any time |
You use the chat | Your messages and, if you leave it, your email | To answer your question | Our legitimate interest in responding to enquiries |
You visit the website | Technical data such as IP address, browser, device and pages viewed | To keep the site secure and working, and to understand how it is used | Our legitimate interest in running a secure site. Non-essential analytics and cookies only with your consent |
You become a client or supplier | Contact, contract and billing details | To perform the contract and keep our accounts | Performance of a contract and our legal obligations |
We ask only for what we need. If a field is required, the form says so. We do not buy personal data, and we do not sell yours.
Cookies
We use the cookies that are strictly necessary for the site to work. [If analytics or other non-essential cookies are used: We use [ANALYTICS_PROVIDER] to measure visits. These cookies are set only if you agree, and you can change your choice at any time through "Cookie settings" in the footer.]
Automated decisions
We do not make decisions about you by automated means that have legal or similarly significant effects. Our free tools give a first read based on your answers. They are not a certification, a legal assessment or a decision about you.
Who we share data with
We share personal data only with:
service providers that host and run this website and our business tools, acting on our instructions: website hosting ([HOSTING_PROVIDER]), scheduling (Cal.com), email and document storage ([EMAIL_PROVIDER]), forms and tools ([FORMS_PROVIDER]) and, if used, analytics ([ANALYTICS_PROVIDER]) and chat ([CHAT_PROVIDER]);
professional advisers such as accountants and lawyers, where needed;
public authorities, where the law requires it.
We do not share an Expert Partner applicant's CV or rates with clients without that person's agreement.
Transfers outside the European Economic Area
Some of our service providers are based outside the EEA or store data there. Where that happens, we rely on a European Commission adequacy decision or on the Commission's standard contractual clauses, together with additional safeguards where needed. You can ask us for a copy of the safeguards that apply.
How long we keep data
Data | Kept for |
Enquiries, booking details and chat messages | [24 months] after our last contact with you |
Expert Partner applications | [24 months] after your last update, unless you ask us to remove them sooner or we engage you |
Free tool answers and results | [12 months] |
Digest and alert subscriptions | Until you unsubscribe |
Contract and accounting records | 10 years, as Luxembourg law requires |
Website technical logs | [Up to 12 months] |
When a period ends, we delete the data or make it anonymous.
How we protect data
We limit access to the people who need it, use providers that offer appropriate security, and keep data encrypted in transit. No system is perfectly secure, so if you believe your data has been compromised, tell us at [PRIVACY_EMAIL].
Your rights
Under the GDPR you can ask us to:
give you access to your personal data and a copy of it;
correct data that is wrong or incomplete;
delete your data;
restrict how we use it;
send your data to you or to another organisation in a common format;
stop using your data where we rely on our legitimate interests;
stop sending you the Digest or alerts, which you can also do through the link in every email.
Where we rely on your consent, you can withdraw it at any time. That does not affect what we did before you withdrew it. To use any of these rights, write to [PRIVACY_EMAIL]. We reply within one month. We may ask for proof of identity if we cannot otherwise be sure who is asking.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu, or to the authority in the EU country where you live or work.
Children
This website is for businesses. We do not knowingly collect personal data from children.
Changes to this notice
We update this notice when our practices change. The date at the top shows the latest version. If a change is significant, we will say so on this page.
