FORSTONE commits to making every effort to comply with the laws and regulations governing the processing of personal data, including, but not limited to, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, concerning the protection of natural persons regarding the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”), as well as any other applicable national law or regulation governing personal data processing.
Data Protection Officer
FORSTONE has appointed CLSINFO as an external data protection officer (the “DPO”), who can be contacted at the following details:
Address: 56 rue Eugène Welter L-2723 Howald, Grand Duchy of Luxembourg
Phone: +352 27 991 612
Email: dpo@forstone.lu

What Personal Data Does FORSTONE Collect and Why Are They Used?

Identification and contact details: This includes the name and email address provided in the contact form on the FORSTONE Site or on a business card or email signature. These details will be processed by FORSTONE to respond to the Data Subject’s requests or during the execution of mandates.
Content of CVs and cover letters: Data provided by Candidates will be used in relation to job applications and vacant positions. This data includes names, dates of birth, nationality, contact details, education, professional qualifications, and work experience.
Employee and collaborator identification data: Data necessary for the proper execution of employment or collaboration contracts, including names, addresses, phone numbers, bank details, family status, tax information, performance, and remuneration.
Messages from Data Subjects: Data Subjects may contact FORSTONE through various means, including social media. These messages will be processed by FORSTONE to respond to the Data Subjects’ requests or during the execution of mandates.
Other personal data: These data are collected for the provision of legal advisory services and are subject to professional confidentiality.
Content and metadata: These elements refer to activities on the FORSTONE Site, including data flows generated by User activities, which may be used to improve site performance.
Technical information: Data related to the browser type, language settings, country, time zone, device type, operating system, and more. FORSTONE uses such data to optimize the site experience.
Some of these data are mandatory for FORSTONE to provide its services. Such data will always be specifically identified in the form or by the member of FORSTONE requesting them. Other data are provided by Data Subjects if deemed appropriate and will only be used by FORSTONE if necessary for the purposes outlined in this Privacy Policy.
FORSTONE may also process other personal data as described later in this Privacy Policy.
Source of Personal Data
We obtain some personal data directly from the Data Subjects. However, particularly in the course of our mandates, we may obtain personal data indirectly, for example, during anti-money laundering checks or through third-party communication.
Use of Social Media
Personal data collected through social media platforms may be processed by FORSTONE for marketing purposes. FORSTONE also shares responsibility for processing such data with the social media platforms.
Use of Cookies
FORSTONE uses cookies to enhance User experience and gather anonymous statistical data to improve the site.
How Does FORSTONE Protect Personal Data?
FORSTONE implements appropriate security measures to protect personal data throughout its lifecycle from unauthorized access, tampering, disclosure, or destruction.
Sharing of Personal Data
FORSTONE may share personal data in specific cases related to its mandate, with public authorities, or with subcontractors under strict confidentiality obligations.
Data Transfer
FORSTONE does not transfer personal data to third countries unless necessary for its services. Transfers are based on valid mechanisms, such as adequacy decisions, standard contractual clauses, or other GDPR-approved transfer mechanisms.
Retention of Data
FORSTONE takes reasonable measures to ensure that personal data are processed and retained for the minimal necessary period for the purposes outlined in this Privacy Policy. Data retention periods vary based on the nature of the data and the relationship with FORSTONE.
Rights of Data Subjects
Data Subjects have the right to access, modify, restrict, object to, and delete their personal data, as well as the right to data portability, by contacting the DPO at the above details.
Changes to This Privacy Policy
FORSTONE reserves the right to update this Privacy Policy at any time. Changes will be noted by the update date at the bottom of the page.