{"id":3,"date":"2025-07-07T11:36:50","date_gmt":"2025-07-07T11:36:50","guid":{"rendered":"https:\/\/fm-connect1.fortmindz.in\/lumiros-wp\/?page_id=3"},"modified":"2026-02-26T05:06:49","modified_gmt":"2026-02-26T05:06:49","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<br \/>\n<h3>1. Introduction<\/h3>\n<p>This Privacy Policy explains how personal data is collected, used, shared, stored, and protected when you visit or interact with www.lumiors.com (the \u201cWebsite\u201d) and when you engage with services provided through the Website. These services may include investment onboarding, impact reporting, regulatory compliance processes, and related operational activities.<\/p>\n<p>This Policy applies to individuals whose personal data is processed in connection with the Website and associated services (\u201cyou\u201d or \u201cdata subjects\u201d). It describes the purposes for which personal data is processed, the legal bases relied upon, and the safeguards implemented to ensure that personal data is handled in accordance with applicable data protection laws.<\/p>\n<p>This Privacy Policy explains:<\/p>\n<ul>\n<li>What personal data we collect;<\/li>\n<li>How and why we process it;<\/li>\n<li>With whom we share it;<\/li>\n<li>Your rights as a data subject;<\/li>\n<li>The technical and organisational measures we take to protect your data;<\/li>\n<li>How you can contact us with questions or concerns.<\/li>\n<\/ul>\n<p>This Policy applies to all visitors of the Website and all individuals whose personal data we collect and process, including (but not limited to) potential and current investors, newsletter subscribers, platform users, and business contacts.<\/p>\n<h3>2. Identity of the Controller<\/h3>\n<p>The controller responsible for the processing of your personal data is:<br \/>\nCJC Research B.V.<br \/>\nChamber of Commerce registration number: 97400777<br \/>\nEmail: compliance@lumiors.com<br \/>\nData Protection Officer<br \/>\nAs the controller, CJC determines the purposes and means of processing personal data<br \/>\nwithin the meaning of Article 4(7) of the GDPR.<\/p>\n<h5>2.1 Processing<\/h5>\n<p>In the context of investor onboarding, investment administration and regulatory reporting, certain personal data is also processed by Elite Fund Management B.V. as AIFM, and by its fund administrator, depositary and custodian.<\/p>\n<p>Depending on the specific processing activity, CJC and Elite Fund Management B.V. may act as independent controllers or joint controllers.<\/p>\n<p>The allocation of responsibilities is laid down contractually and ensures that data subjects may exercise their GDPR rights with regard to either party.<\/p>\n<h3>3. Categories of Personal Data Collected<\/h3>\n<p>We may collect and process the following categories of personal data depending on your interaction with our Website and services.<\/p>\n<h5>3.1. Information You Provide to Us Directly<\/h5>\n<p>This includes personal data you actively submit via:<\/p>\n<ul>\n<li>Contact forms<\/li>\n<li>Newsletter sign-ups<\/li>\n<li>Investment interest forms<\/li>\n<li>Email communications<\/li>\n<li>Document uploads for onboarding or due diligence.<\/li>\n<\/ul>\n<p>Examples of such data may include:<\/p>\n<ul>\n<li>First and last name<\/li>\n<li>Email address<\/li>\n<li>Telephone number<\/li>\n<li>Company affiliation and job title<\/li>\n<li>Professional biography or LinkedIn profile<\/li>\n<li>Residential or mailing address<\/li>\n<li>Country of residence and nationality<\/li>\n<li>Identity documents (passport, ID card, driver\u2019s license)<\/li>\n<li>Proof of address (utility bill, bank statement)<\/li>\n<li>Financial data (e.g., bank account number, investment preferences)<\/li>\n<li>Personal investment experience or objectives.<\/li>\n<\/ul>\n<h5>3.2. Information Collected Automatically<\/h5>\n<p>When you use the Website, we automatically collect certain technical data using cookies or similar technologies.<\/p>\n<p>This may include:<\/p>\n<ul>\n<li>IP address<\/li>\n<li>Device type and browser version<\/li>\n<li>Operating system<\/li>\n<li>Referrer URL<\/li>\n<li>Time and date of access<\/li>\n<li>Clickstream data<\/li>\n<li>Cookie identifiers and preferences.<\/li>\n<\/ul>\n<p>Non-essential cookies (including analytical and marketing cookies) are only used with your explicit consent.<br \/>\nYou may withdraw this consent at any time using the cookie settings on our Website. For details, including cookie categories, storage periods and providers, see our Cookie Policy.<\/p>\n<h5>3.3. Data Received from Third Parties<\/h5>\n<p>We may also receive personal data about you from third parties such as:<\/p>\n<ul>\n<li>KYC\/AML service providers;<\/li>\n<li>Identity verification tools;<\/li>\n<li>Analytics or advertising platforms (e.g., Google, LinkedIn);<\/li>\n<li>Publicly accessible sources (e.g., trade registers, sanctions lists);<\/li>\n<li>Our business partners and fund administrators.<\/li>\n<\/ul>\n<h5>3.4. Required vs. Optional Data<\/h5>\n<p>Providing certain information (such as identity documents and KYC information) is a legal and contractual requirement under the Wwft and our fund documentation.<\/p>\n<p>If you do not provide this information, we cannot enter into or continue an investment relationship with you. Other information, such as newsletter subscription data, is optional.<\/p>\n<h5>3.5. Children<\/h5>\n<p>Our services are intended exclusively for individuals aged 18 years and over.<\/p>\n<p>We do not knowingly collect or process personal data relating to minors.<br \/>\nIf we become aware that we have received data relating to a minor, we will delete such data without undue delay.<\/p>\n<h5>3.6. Special Categories and Criminal Data<\/h5>\n<p>CJC does not intend to process special categories of personal data (such as health, ethnicity, political beliefs or biometric identifiers) except where required under anti-money-laundering and sanctions legislation.<\/p>\n<p>In such cases, processing is limited to what is legally necessary and subject to additional safeguards.<\/p>\n<h3>4. Purposes and Legal Bases for Processing<\/h3>\n<p>We process personal data for specific, explicit, and legitimate purposes.<\/p>\n<p>The legal bases for such processing are provided under Article 6 of the GDPR. The purposes and their associated legal grounds are as follows:<\/p>\n<table border=\"1\" cellpadding=\"10\" cellspacing=\"0\">\n<thead>\n<tr>\n<th>Purpose<\/th>\n<th>Legal Basis<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>To provide access to our Website and enable its core functionalities<\/td>\n<td>Article 6(1)(f) GDPR \u2013 legitimate interest<\/td>\n<\/tr>\n<tr>\n<td>To respond to contact requests and communications<\/td>\n<td>Article 6(1)(f) GDPR \u2013 legitimate interest<\/td>\n<\/tr>\n<tr>\n<td>To process subscription to newsletters and marketing communications<\/td>\n<td>Article 6(1)(a) GDPR \u2013 consent<\/td>\n<\/tr>\n<tr>\n<td>To onboard and verify investors, including identity verification and due diligence<\/td>\n<td>\n                Article 6(1)(b) GDPR \u2013 performance of contract<br \/>\n                Article 6(1)(c) GDPR \u2013 legal obligation (e.g., Wwft)\n            <\/td>\n<\/tr>\n<tr>\n<td>To maintain investor records and execute investment transactions<\/td>\n<td>Article 6(1)(b) GDPR \u2013 performance of contract<\/td>\n<\/tr>\n<tr>\n<td>To comply with applicable financial laws and regulations, including AML\/KYC requirements<\/td>\n<td>Article 6(1)(c) GDPR \u2013 legal obligation<\/td>\n<\/tr>\n<tr>\n<td>To protect the platform against fraud, misuse, or security threats<\/td>\n<td>Article 6(1)(f) GDPR \u2013 legitimate interest<\/td>\n<\/tr>\n<tr>\n<td>To generate statistical reports and improve the Website\u2019s functionality and content<\/td>\n<td>Article 6(1)(f) GDPR \u2013 legitimate interest<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Where processing is based on Article 6(1)(f) GDPR (legitimate interest), CJC performs a documented balancing test to ensure that our interests (such as fraud prevention, platform security, Website improvement and client communication) do not override your fundamental rights. These assessments are reviewed periodically in line with EDPB Guidelines on Article 6(1)(f).<\/p>\n<h3>5. Newsletter and Marketing Communications<\/h3>\n<p>If you subscribe to our newsletter, we will use your name and email address to send you periodic updates about lumiors products, events, and market insights. You may withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any of our emails or by contacting us at compliance@lumiors.com. We do not send unsolicited commercial communications without your prior consent, in accordance with Article 11.7 of the Dutch Telecommunicatiewet.<\/p>\n<h3>6. Data Sharing and Categories of Recipients<\/h3>\n<p>CJC only shares your personal data with trusted third parties where necessary and under strict data processing agreements.<\/p>\n<p>Categories of third-party recipients may include:<\/p>\n<ul>\n<li>Cloud service providers and data processors (e.g., AWS, Google Workspace);<\/li>\n<li>CRM and investor management platforms;<\/li>\n<li>Fund administrators and AIFMD-compliant managers;<\/li>\n<li>KYC\/AML and sanctions screening providers;<\/li>\n<li>Auditors, legal advisors, and compliance officers;<\/li>\n<li>Financial regulators, tax authorities, or law enforcement agencies, where required by law.<\/li>\n<\/ul>\n<p>Each third party is carefully vetted, and processing is governed by legally binding data<br \/>\nprocessing agreements pursuant to Article 28 GDPR.<br \/>\nWe do not sell or rent personal data to third parties under any circumstance.<\/p>\n<h3>7. International Data Transfers<\/h3>\n<p>CJC may transfer your personal data to countries outside the European Economic Area<br \/>\n(EEA) only if:<\/p>\n<ul>\n<li>The European Commission has issued an adequacy decision for the country in question;<\/li>\n<li>Standard Contractual Clauses (SCCs) as approved by the European Commission are in place;<\/li>\n<li>Supplementary measures (e.g., encryption, access limitations) are adopted where appropriate.<\/li>\n<\/ul>\n<p>For example, Google Analytics or LinkedIn may transfer certain data to the United States. We ensure that such transfers are structured in full compliance with Chapter V of the GDPR.<\/p>\n<p>Where personal data is transferred to service providers in the United States that participate in the EU\u2013US Data Privacy Framework, such transfers rely on the European Commission adequacy decision of 10 July 2023. For all other transfers to third countries, CJC relies on Standard Contractual Clauses and implements additional safeguards where required.<\/p>\n<h3>8. Data Retention<\/h3>\n<p>We retain your personal data only for as long as necessary to fulfil the purposes for which it<br \/>\nwas collected or to comply with applicable laws.<\/p>\n<p>The following retention periods generally apply:<\/p>\n<ul>\n<li>Contact requests and general correspondence: 2 years after last interaction;<\/li>\n<li>Investor data, KYC files, and transaction records: 7 years (as required by Wwft and tax laws);<\/li>\n<li>Newsletter subscription data: until withdrawal of consent;<\/li>\n<li>Cookies and tracking data: see Cookie Policy.<\/li>\n<\/ul>\n<p>Data may be retained longer if required for legal claims or regulatory investigations.<\/p>\n<h3>9. Your Rights as a Data Subject<\/h3>\n<p>Under the GDPR, you have the following rights regarding your personal data:<\/p>\n<ul>\n<li>Right of access: to obtain a copy of the data we hold about you;<\/li>\n<li>Right to rectification: to correct inaccurate or incomplete data;<\/li>\n<li>Right to erasure: to request deletion of your data under certain conditions;<\/li>\n<li>Right to restriction of processing: to limit the way your data is used;<\/li>\n<li>Right to object: to processing on grounds of legitimate interest or direct marketing;<\/li>\n<li>Right to data portability: to receive your data in a machine-readable format;<\/li>\n<li>Right to withdraw consent: where processing is based on your prior consent.<\/li>\n<\/ul>\n<p>You can exercise these rights by emailing us at compliance@lumiors.com. We may ask for identity verification to protect your data.<br \/>\nIf you believe we have not adequately responded to your request, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at <a href=\"https:\/\/www.autoriteitpersoonsgegevens.nl\/\">www.autoriteitpersoonsgegevens.nl.<\/a><\/p>\n<h3>10. Data Security Measures<\/h3>\n<p>CJC implements robust technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or alteration. These measures include, but are not limited<br \/>\nto:<\/p>\n<ul>\n<li>TLS\/HTTPS encryption for all web traffic;<\/li>\n<li>Encrypted data storage at rest and in transit;<\/li>\n<li>Role-based access controls with multi-factor authentication;<\/li>\n<li>Physical and network security protocols for hosted infrastructure;<\/li>\n<li>Staff training on data protection obligations;<\/li>\n<li>Periodic security assessments and vulnerability scans;<\/li>\n<li>A documented data breach response and notification protocol in accordance with Articles 33 and 34 of the GDPR.<\/li>\n<\/ul>\n<h3>11. Automated Decision-Making and Profiling<\/h3>\n<p>CJC does not conduct automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.<\/p>\n<p>We may use automated tools to assist with identity verification and risk screening (e.g., PEP<br \/>\nor sanctions list checks), but any onboarding approval or refusal is reviewed and decided by<br \/>\na human.<\/p>\n<h3>12. Changes to This Privacy Policy<\/h3>\n<p>CJC reserves the right to amend this Privacy Policy at any time, particularly in response to legal developments, changes in our processing activities, or improvements in our services. The most recent version will always be available on our Website. In the event of material changes, we will notify you via the Website or through other appropriate channels.<\/p>\n<p>We encourage you to review this Privacy Policy periodically.<\/p>\n<h3>13. Contact Us<\/h3>\n<p>If you have any questions, concerns, or wish to exercise your rights, please contact us via:<br \/>\n<strong>CJC Research B.V.<\/strong><br \/>\nAttn: Data Protection Officer<br \/>\nEmail: compliance@lumiors.com<br \/>\nKvK Number: 97400777<\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. Introduction This Privacy Policy explains how personal data is collected, used, shared, stored, and protected when you visit or interact with www.lumiors.com (the \u201cWebsite\u201d) and when you engage with [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"page-templates\/page-common-support.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":8,"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":424,"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/pages\/3\/revisions\/424"}],"wp:attachment":[{"href":"https:\/\/fm-connect1.fortmindz.in\/wp-lumiros-wp\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}