Privacy & cookies.

Who is responsible

CIMA Partners Sarl-S, trading as CIMA Advisory, Luxembourg, is responsible for the personal data collected through this website: the “controller” in the sense of the GDPR. For any question about this policy or about your data, write to contact@cimaadvisory.lu.

The contact form

When you write to us through the contact form, we receive the details you choose to share: your name, email address, organisation, and message. They are used for one purpose only: reading and answering your enquiry. The legal basis is the steps taken at your request prior to a possible engagement (Article 6(1)(b) GDPR) and our legitimate interest in answering correspondence.

Submissions are delivered to our mailbox by Web3Forms, a form-delivery service that processes data on Amazon Web Services infrastructure in the United States and may, per its own policy, pass messages through the spam-filtering services CleanTalk and Akismet. Enquiry data is deleted at the latest twelve months after our last exchange if no engagement follows.

Introductions and our network

Arranging an introduction can require sharing parts of your enquiry with the relevant partners in our network (banking, legal, tax, accounting, and similar specialists). We do so only where it is needed for an introduction you have asked for, and only with your agreement. Where a relevant partner is established outside the EU/EEA (for example in Lebanon, the United Arab Emirates, or the Philippines), we tell you before anything is shared and apply appropriate safeguards.

This site makes no automated decisions about you and does not profile its visitors.

Audience measurement, only with your consent

If, and only if, you accept in the cookie banner, this site uses Google Analytics 4 to understand how it is read: pages visited, approximate location, device and browser characteristics. The legal basis is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time through “Cookie settings” in the footer.

Google Analytics sets two cookies, _ga and _ga_Z0N8T4FDYY, each kept for about two years. The data is processed by Google, including transfers to the United States under the EU–US Data Privacy Framework, and is retained in our analytics account for fourteen months. If you decline, no analytics code loads and no cookie is set.

Hosting

The site is served by Netlify, whose infrastructure keeps short-lived technical server logs (such as IP addresses) for security and delivery.

Your rights

You may ask at any time to access, correct, or delete the data we hold about you, to restrict or object to its processing, to receive it in a portable form, and to withdraw any consent you have given. Write to contact@cimaadvisory.lu.

You may also lodge a complaint with the Luxembourg supervisory authority, the CNPD (Commission nationale pour la protection des données), cnpd.lu.