Privacy notice
Who is responsible for your information
LION-S GP S.à r.l., RCS Luxembourg B303061, 99, Grand-Rue, L-1661 Luxembourg, Grand Duchy of Luxembourg (“LION-S”, “we”), is the controller of the personal data covered by this notice. It covers website visitors, enquiries, requests for materials and optional email updates. Contact contact@lion-s.com with the subject “DATA PROTECTION”.
Formal investor onboarding and administration require additional information, which will be provided when that process begins. Do not send identity documents, bank details or sensitive personal information through general website forms.
Information we collect
You provide your name, email address, organisation, role, country, investor category, reason for contacting us, requested materials and correspondence. An optional email subscription also records your preferences and evidence of consent or withdrawal.
Technical information used to deliver and protect the site includes IP address, browser and device information, pages requested, request times, errors and security events. The Cookie Notice explains device storage. We do not use website data for advertising profiles or cross-site tracking.
To review access requests, we may check relevant professional information from your organisation or representative, public company registers and professional websites. We use information about your role, organisation, country and stated investor status. Where information comes from another source, we provide the required notice and source information, normally at first contact and no later than one month after obtaining it unless a legal exception applies.
Why we use it and our legal bases
Enquiries and correspondence. Our legitimate interests in responding to requests and managing professional relationships, under Article 6(1)(f) GDPR. Article 6(1)(b) applies when you personally request steps towards a contract with us.
Requests for restricted materials. Our legitimate interests in checking the recipient, country and documents requested and managing lawful distribution, under Article 6(1)(f). Article 6(1)(c) applies where a specific legal duty requires a check or record.
Website operation and security. Our legitimate interests in providing and protecting the service, preventing misuse and resolving faults, under Article 6(1)(f). Only strictly necessary device storage is permitted under our Cookie Notice.
Optional email updates. Your consent under Article 6(1)(a). Enquiries and access requests do not subscribe you to a mailing list. You may withdraw consent at any time.
Legal obligations and claims. Article 6(1)(c) for binding legal duties; otherwise our legitimate interests under Article 6(1)(f) in handling complaints and establishing, exercising or defending legal claims.
We consider necessity, proportionality and your rights before relying on legitimate interests. We provide further information before using your data for an unrelated new purpose.
Who receives your information
Access is limited to authorised personnel and recipients who need the information for these purposes. These include providers of website hosting, content delivery, form storage, email and mailing services, IT support and security; professional advisers; and public authorities where disclosure is legally required.
Providers acting on our behalf must process data under contractual instructions and confidentiality and security obligations. Professional advisers and authorities may act as independent controllers for their own legal or professional duties. We do not sell personal data.
International processing
Our service providers and authorised support personnel may process or access information outside the European Economic Area. We permit such transfers only where the recipient is covered by an applicable European Commission adequacy decision, or under the Commission’s standard contractual clauses with additional safeguards where needed. We assess the transfer and recipient before permitting access.
Contact contact@lion-s.com for details of the destinations and safeguards relevant to your data, or a copy of the applicable safeguards. Confidential information and other people’s data may be redacted.
How long we keep information
- General enquiries and access requests that do not lead to access
- 24 months after the last substantive contact.
- Approved access and distribution records
- 5 years after the last restricted material is supplied, to document the review and distribution.
- Email subscriptions
- Until withdrawal, or 24 months without affirmative engagement or renewal of the subscription, whichever comes first.
- Evidence of consent and withdrawal
- 5 years after withdrawal or expiry. A minimal opt-out record is kept while the relevant mailing activity continues, solely to prevent unwanted messages.
- Routine technical and security logs
- Up to 90 days. Relevant incident extracts may be retained until the investigation and any related claim are resolved.
At the end of these periods, information is deleted or irreversibly anonymised. A specific legal duty or documented legal claim may require longer retention; in that case, we retain only what is needed, restrict its use and review the need to keep it. Formal investor records have their own applicable retention requirements.
Your choices and rights
Providing information is voluntary. Without the required form fields, we may be unable to respond or assess a request. A person reviews requests for restricted materials. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation. You may object to direct marketing at any time, and we will stop using your data for that purpose.
Withdraw consent through the unsubscribe link in an update or by emailing contact@lion-s.com. Withdrawal does not affect processing lawfully carried out before it. To exercise any other right, use the same address. We may ask for proportionate information to verify your identity.
We respond without undue delay and normally within one month. If a permitted extension is needed, we explain it within that month. You may complain to the Luxembourg Commission nationale pour la protection des données at cnpd.public.lu, or to another competent supervisory authority, including where you live or work.
Security and changes
We use access controls and technical and organisational safeguards proportionate to the data and risks. External websites linked from this site have their own privacy information. We update this notice when our processing changes and identify the current version by its date.