To provide its services OpenField S.A. collects and stores the client’s personal data in accordance with the provisions of EU Regulation n°2016/679 of April 27 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and with any other data protection law applicable to the Grand Duchy of Luxembourg.
OpenField S.A. may process data such as identification data, financial data or business contact information in the context of the execution of the engagement letter. Personal data shall mainly be processed by OpenField S.A. for the following purposes: (i) to ensure the performance of the contract with the Client as set out in the engagement letter (including the preparation of the contract); (ii) to deliver the service requested by the Client; (iii) to send client service-related communications (marketing); (iv) to comply with our legal obligations; (v) to handle potential claims and disputes and in particular to establish, exercise or defend any legal rights.
The collected personal data will not be stored for a period longer than necessary for the realization of the above-mentioned purposes nor for a period longer than required or permitted by law.
OpenField S.A shall implement appropriate technical and organizational measures for ensuring that, by default, only personal data which are necessary for each specific purpose of the processing are processed. Additionally, OpenField S.A. shall take all necessary and reasonable measures of a technical and organizational nature to ensure a high level of security with respect to the data processed and to ensure the protection of such data against accidental or unlawful destruction, accidental loss, alteration, loss or damage dissemination or unauthorized access and any other form of unlawful processing (see Confidentiality section).
OpenField S.A may disclose personal data to third parties (service providers, subsidiaries, professional advisors) when it is necessary for the performance of any services requested or authorized by the Client. OpenField S.A. will ensure that in the performance of their services third parties will process data in compliance with the applicable data protection law and abide by our data privacy and security requirements. In addition, OpenField S.A may be required to disclose personal data by virtue of a legal obligation or in the course of a legal process.
In accordance with the GDPR, the Client has the rights to access, rectify, or delete its personal data. Furthermore, where applicable the Client has the right to request the restriction of or to object to the processing and the right to data portability. If you wish to exercise any of these rights, please contact OpenField S.A. by sending an e-mail at gdpr@openfield.eu. Finally, in the event of a dispute with Openfield S.A. which failed to be resolved you have the right to lodge a complaint with the “Commission Nationale pour la Protection des Données” (1, avenue du Rock’n’Roll L-4361 Esch-sur-Alzette) where you believe that your data is being processed in a way that does not comply with the GDPR.