Privacy Policy

Privacy Policy

Last updated: 04/09/2026 

  1. Who we are 

This Privacy Policy applies to the corporate website of idverde Group. This website is operated by Armorica LUX S.à.r.l., a company incorporated under the laws of Luxembourg, registered under the number B243038, with head office located at 21 rue Glesener, L-1631 Luxembourg, acting as data controller (“we”, “us”, “our”, or “idverde Group”).  

This website serves as the central presentation platform for idverde Group. From this site, visitors may navigate to the dedicated websites of our country subsidiaries. Each subsidiary operates its own website and acts as an independent data controller in respect of the personal data it processes. This Policy does not apply to those subsidiary websites. 

For any questions about this Policy or about how we process personal data, please contact the Group Legal and Compliance Department at the following address: integrite@idverde.com 

 

  1. What personal data we collect and why 

We collect only the personal data necessary to operate this informational website. 

When you visit the site, we automatically collect technical data such as: 

  • IP address (anonymised where possible) 
  • Browser and device information 
  • Pages visited and time spent on the site 
  • Referring website or source 

We use this data to: 

  • Ensure the security and proper functioning of the website 
  • Analyse website usage and improve performance 

The legal basis for this processing is our legitimate interest in operating a secure, functional and accessible website (Article 6(1)(f) GDPR). 

We also use cookies and similar technologies. Where required by law, analytics cookies are used only with your consent. For more information, including how to manage your preferences, please see our Cookie Policy. 

When you use the contact form on this website to submit a general enquiry, we collect the personal data you provide, namely: your first name, last name, company name, country, email address, phone number, the reason for contact you select, the subject of your message, and the content of your message. 

We use this data solely to receive, understand and respond to your enquiry. 

The legal basis for this processing is our legitimate interest in operating an accessible point of contact and responding to general enquiries addressed to us (Article 6(1)(f) GDPR). 

Fields marked as mandatory on the form are necessary for us to process and respond to your enquiry; if you do not provide this information, we may be unable to respond to you. Providing optional fields (company, phone) is not required but may help us respond more efficiently. 

 

  1. How long we keep your data 

We retain personal data only for as long as necessary for the purpose for which it was collected: 

  • Server logs (access and error logs): 12 months 
  • Analytics data: 13 months 
  • Contact form enquiries: 24 months from the date of the enquiry, or from the date of our last exchange with you if the enquiry gives rise to further correspondence. 

These periods may be extended where required by law or for the establishment, exercise, or defence of legal claims. 

 

  1. Who we share your data with 

We may share your personal data with the following categories of recipients, solely to the extent necessary: 

  • Hosting and infrastructure providers responsible for storing and serving our website. 
  • Analytics service providers that help us understand how the site is used. 
  • Professional advisers where required in the normal course of business. 

All third-party providers acting as data processors are bound by data processing agreements and are contractually prohibited from using your data for any purpose other than providing services to us. 

 

  1. International transfers 

The collected data is processed within the European Economic Area. In the event of a transfer outside the European Economic Area, we commit to ensuring an appropriate safeguard is in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or an adequacy decision covering the destination country. 

 

  1. Your rights 

Under applicable data protection laws, you may have the right to: 

  • Access the personal data we hold about you 
  • Request correction of inaccurate personal data 
  • Request deletion of your personal data in certain circumstances 
  • Object to our processing of your personal data 
  • Restrict our processing of your personal data 
  • Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to that withdrawal 

These rights are subject to the conditions and limitations set out in applicable law. We may request information or documentation to verify your identity before responding to your request. 

For any questions or requests to exercise a right, please contact our Group Legal and Compliance Department using the contact details in Section 1. 

 

  1. Right to lodge a complaint 

If you consider that our processing of your personal data does not comply with applicable data protection law, you have the right to lodge a complaint with our competent supervisory authority: Commission Nationale pour la Protection des Données (CNPD) atwww.cnpd.lu. You also have the right to lodge a complaint with the supervisory authority of your country of habitual residence, place of work, or place of the alleged infringement. 

 

  1. Automated decision-making 

We do not carry out any automated decision-making or profiling that produces legal effects or similarly significantly affects individuals. 

 

  1. Changes to this Policy 

We may update this Policy periodically to reflect changes in our practices or applicable law. Any changes we make will be posted on this page with a revised “Last updated” date. We encourage you to review this Privacy Policy periodically to stay informed of how we collect, use, and protect your personal data. 

 

  1. Links to other websites 

This site contains links to the websites of our country subsidiaries and may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites. We encourage you to review their respective privacy policies before submitting any personal data to them.