myOfficeofBusiness (“myOOB”, “we”, “us”) is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Luxembourg law.

myOOB is the data controller. For any questions or to exercise your rights, contact our Data Protection Officer (DPO) at dpo@myofficeofbusiness.com or [contact number].

We collect the following categories of Personal Data:
• Identity & contact data (name, address, e-mail, phone, passport/ID, tax ID);
• Financial & banking data (account details, risk profile, source of wealth, transactions);
• Electronic identifiers (IP addresses, cookies);
• Employment, household & other data necessary to perform our services.

Data is collected directly from you or from legitimate public and private sources (e.g. public registries, third-party aggregators, the internet).

Purposes and legal basis:
• Compliance with legal and regulatory obligations (Art. 6(1)(c) GDPR);
• Performance of a contract with you (Art. 6(1)(b) GDPR);
• Legitimate interests of myOOB or a third party (Art. 6(1)(f) GDPR);
• Your consent, where required (Art. 6(1)(a) GDPR).

Your Personal Data may be shared with:
• myOOB’s internal departments and business partners in the context of a transaction;
• Service providers and processors acting on our instructions;
• Regulatory and supervisory authorities (e.g. CSSF, tax authorities);
• Counterparties, clearing houses, SWIFT and other financial intermediaries;
• Third parties in the context of a corporate restructuring or acquisition.

Personal Data may be transferred to recipients located outside the EEA, including Brazil and the United States of America. Such transfers are protected by appropriate safeguards.

Personal Data is retained for the duration of our business relationship and, thereafter, for as long as required by applicable law (generally 5–10 years under AML and commercial law obligations), or as necessary to establish, exercise or defend legal claims.

Under GDPR you have the right to: access, rectify or erase your Personal Data; restrict or object to processing; data portability; and to withdraw consent at any time.

You may also lodge a complaint with the Luxembourg data protection authority, the CNPD, or another competent EU supervisory authority. To exercise your rights, contact us.

We may process your data by automated means (profiling) to meet AML/CTF regulatory obligations. These measures are also for your protection.