Close-up of the Q logo with a circle and a small rectangle at the bottom.

Privacy Policy

1. Introduction

Qatchova (“We”, “Our”, “Us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how We process and protect your personal data (as defined in Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data of 27 April 2016 (“GDPR”) when you visit Our website: www.qatchova.com

We process personal data in accordance with:

  • GDPR

  • Any applicable national data protection laws within the European Economic Area (“EEA”)

  • Any other applicable privacy legislation.

By using visiting Our Website, you acknowledge being perfectly aware that your personal data will be processed as described in this Privacy Policy.

2. Data controller

The data controller responsible for processing your personal data is:

Qatchova Sàrl
28 boulevard Grande Duchesse Charlotte, L-1330 Luxembourg
Email: info@qatchova.com
Company Registration Number: B309775

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact Us using the details above.

3. Personal data we collect

Depending on your interactions with us, We may collect the following categories of personal data.

  • When you navigate on the website : Standard technical data (eg logs, cookies). Please refer to the cookies policy for more information.

  • When you send a message through the option “Contact us” : Your email

4. How we use your personal data

We only use your personal data only to reply to your message or for the legitimate interests as described below.

5. Legal basis for processing

We may process personal data where necessary for Our legitimate interests, including:

  • Improving services

  • Website security

  • Fraud prevention

  • Internal administration

We ensure such interests do not override your rights and freedoms.

6. Sharing personal data

We will not share any personal data collected through your visit of Our Website.

7. Personal data retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy.

After the retention period, personal data will be securely deleted or anonymized.

8. Your GDPR rights

Where applicable, you have the following rights which can be exercised at any time without being charged:

  • Right of access

To obtain a copy of your personal data that We process.

  • Right to rectification

To correct inaccurate or incomplete your personal data.

  • Right to erasure

To request deletion of your personal data from Our system.

  • Right to restrict processing

To request limitation of processing activities.

  • Right to personal data portability

To receive your personal data in a structured and machine-readable format.

  • Right to object

To certain processing activities, including direct marketing.

  • Right to withdraw consent

Where processing relies on consent.

  • Right to lodge a complaint

You have the right to lodge a complaint with your local data protection authority.

For individuals located in the EU, complaints may be submitted to the competent supervisory authority in their country of residence.

In Luxembourg, the competent authority is:

La Commission Nationale pour la Protection des Données
Address: 15 boulevard du Jazz, L-4370 Belvaux
Tel: +352 26 10 61-1
Website: www.cnpd.public.lu

9. Security measures

We implement appropriate technical and organizational measures to protect personal data, including:

  • Personal data is managed primarily only by the person on a need-to-know privilege.

  • Access to the premises is controlled, and members of the workspace are identified prior to being granted access. The workstation is systematically locked whenever left unattended, and the device's hard drive is encrypted using FileVault.

  • No physical documents containing personal data are left unattended on the premises.

  • Access to business applications and systems is protected through the use of strong passwords and a password management solution. Multi-factor authentication (MFA) is enabled on critical accounts and services, including but not limited to Microsoft 365 and Squarespace.

Access to personal data is restricted to Qatchova only according to operational needs.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be posted on this page with the revised “Last Updated” date.

For significant changes, We may provide additional notice through email or website notifications.

11. Contact Us

For questions regarding this Privacy Policy or your privacy rights, please contact:

Qatchova Sàrl
28 boulevard Grande Duchesse Charlotte, L-1330 Luxembourg
Email: info@qatchova.com