Privacy Policy
Last updated: 22 August 2026
Who we are
Luxembourg For Family Office a.s.b.l. (“LFFO”, “we”) is a non-profit association governed by Luxembourg law, registered with the Luxembourg Trade and Companies Register under number F8558, with its registered office at 33, boulevard Prince Henri, L-1724 Luxembourg.
We are the data controller for the personal data described here. Write to us at secretariat@luxembourgforfamilyoffice.lu.
The association has not appointed a Data Protection Officer, and is not required to do so: it does not carry out large-scale monitoring or process special categories of data on a large scale.
What we collect, and why
When you contact us or apply for membership
Our forms collect your name, email address, organisation, role, country, city, postal address, the event or subject you are writing about, and your message. We use this to reply, to assess a membership or partnership application, and to keep a record of the correspondence.
Legal basis: your consent, given by ticking the box on the form, together with our legitimate interest in answering enquiries addressed to the association. For membership applications, processing is also necessary to take steps at your request before entering into a membership relationship.
When you sign in as a member
Members receive an account in order to read documents reserved to members. We hold the username, email address and encrypted password for that account, and the fact that a sign-in took place.
Legal basis: performance of the membership relationship.
When you simply read the site
Our host records standard server logs, including IP address, browser type and pages requested, to keep the site running and secure.
Legal basis: our legitimate interest in the security and integrity of the site.
What we do not do
We use no analytics, advertising or tracking technologies. We do not profile visitors, we do not sell or rent personal data, we do not use it for automated decision-making, and we do not currently send a newsletter. If that changes, this notice will be updated first and any mailing will be sent only to people who have asked for it.
Cookies
This site sets only cookies that are strictly necessary for it to work, so no consent banner is required:
- WordPress session cookies — set only when a member signs in, to keep you signed in.
- lffo_member — records only that a session exists, so the interface knows not to ask you to sign in again. It carries no identity.
- Caching and security cookies set by our server and by Cloudflare to serve pages quickly and to protect against malicious traffic.
Who else sees your data
We share personal data only with the providers who operate the site for us, as processors bound by contract: our hosting provider Newco, and our content delivery and security provider Cloudflare, Inc. Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses.
We may also disclose data where the law requires it.
How long we keep it
- Enquiries and unsuccessful applications: three years from our last exchange with you, after which they are deleted.
- Membership records: for the duration of membership, then ten years, matching the retention period Luxembourg law requires for accounting and association records.
- Server logs: six months, then overwritten.
Your rights
Under the General Data Protection Regulation you may ask us for a copy of your personal data, ask us to correct or erase it, ask us to restrict or stop processing it, ask to receive it in a portable form, and, where processing rests on consent, withdraw that consent at any time without affecting what was lawful beforehand.
Write to secretariat@luxembourgforfamilyoffice.lu. We answer within one month. If you are not satisfied you may complain to the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD), 15 boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.
Changes
If we change how we handle personal data we will update this page and the date above.