GDPR / Data Protection Notice

1) Controller and contact

The controller is ODDO TRANSFER, SARL-S, RCS Luxembourg B274502, VAT LU34568812, 17 Rue de la Gare, L-5540 Remich, Luxembourg.

Use privacy@oddotransfer.com for access, correction, deletion, restriction, objection, portability and consent-withdrawal requests. No formal Data Protection Officer has been appointed.

2) Your rights

• Access: ask whether we process your data and receive a copy where applicable.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete data where no legal retention or overriding reason applies.
• Restriction: ask us to limit processing in certain cases.
• Portability: receive data you provided in a structured format where the GDPR conditions apply.
• Objection: object to processing based on legitimate interests where the GDPR allows it.
• Consent withdrawal: withdraw consent for analytics cookies or other consent-based processing without affecting prior lawful processing.

3) How requests are handled

• Send the request to privacy@oddotransfer.com and describe the account, booking, partner application or message involved.
• We may verify your identity before acting on the request.
• The current platform does not have confirmed self-service export or deletion. Requests are handled manually through internal systems where needed.
• We aim to respond within the GDPR time limits. Complex or multiple requests may require additional time as allowed by law.

4) Retention and deletion limits

Deletion does not automatically remove invoices, accounting records, payment/refund records, fraud records, dispute files, security incident records or legal-claim records that must be kept by law or legitimate necessity. Where deletion is not possible, processing should be limited to the required purpose.

5) Complaint right

You may lodge a complaint with the Commission nationale pour la protection des données (CNPD), Luxembourg, if you believe your data protection rights have been infringed.