Privacy Policy

Last updated: 1 January 2026

This Privacy Policy explains how PEP European Investment S.à r.l. (“the company”, “we” or “us”) processes personal data in connection with this website. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the applicable data-protection law of the Grand Duchy of Luxembourg.

1. Data controller

The data controller is PEP European Investment S.à r.l., 16, Rue Eugène Ruppert, L-2453 Luxembourg, Grand Duchy of Luxembourg (RCS Luxembourg B225312). You may contact us regarding data protection at contact@pep-investment.lu.

2. Personal data we process

We process personal data only to the extent necessary, and in the following circumstances:

• Correspondence. When you write to us or use the contact form, we process the name, organisation, email address and the contents of your message.
• Technical data. Our hosting infrastructure may process limited technical information (such as IP address and browser type) for the secure and reliable operation of the website.

This website does not use advertising or tracking cookies.

3. Purposes and legal bases

• To respond to and manage your enquiry, on the basis of our legitimate interest in handling correspondence (Article 6(1)(f) GDPR), or steps taken at your request prior to entering into a relationship (Article 6(1)(b) GDPR).
• To operate, secure and maintain the website, on the basis of our legitimate interest in the integrity and availability of our systems (Article 6(1)(f) GDPR).
• To comply with legal obligations to which the company is subject (Article 6(1)(c) GDPR).

4. Recipients

We do not sell personal data. Personal data may be disclosed to service providers acting on our behalf (for example, hosting and email providers) under appropriate contractual safeguards, and to competent authorities, advisers or auditors where required by law.

5. International transfers

Where personal data is transferred outside the European Economic Area, we ensure that an adequate level of protection is in place, for example through an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Retention

We retain personal data only for as long as necessary for the purposes set out above, and thereafter for any period required to meet our legal, regulatory or record-keeping obligations.

7. Your rights

Subject to the conditions of the GDPR, you have the right to:

• request access to the personal data we hold about you;
• request the rectification of inaccurate or incomplete data;
• request the erasure of your data;
• request the restriction of, or object to, our processing;
• request the portability of data you have provided to us; and
• withdraw consent at any time, where processing is based on consent.

To exercise these rights, please contact us at contact@pep-investment.lu. You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD).

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page.