Privacy Policy
Personal Data Protection — GDPR Compliance
This Privacy Policy describes how Opulanz entities collect, use, store, and protect your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and applicable national laws.
1. Data Controllers
Depending on the service used, the data controller is:
Advensys Insurance-Finance SARL
For all services related to account opening, insurance, investment advisory, and company formation — 66 avenue des Champs-Élysées, 75008 Paris — contact@advensys-in-finance.com
Groupe Advensys Luxembourg S.A.
For accounting, tax advisory, and company formation with accounting mandate — 49 Duarrefstrooss, L-9964 Huldange, Luxembourg — info@advensys.lu
Opulanz SIA
For all services related to account opening — For software licences and IT services — Vīlandes iela 5-36, LV-1010 Riga, Latvia — contact@opulanz.com
2. Data Protection Officer (DPO)
Given the nature of financial data processed, a DPO has been designated:
DPO Contact: contact@opulanz.com — Subject: 'DPO / Personal Data'
Address: 66 avenue des Champs-Élysées, 75008 Paris, France
3. Data Collected & Legal Basis
| Data Category | Data Points | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Identity data | Name, date of birth, nationality, government ID | Legal obligation (AML/KYC — Directive 2015/849) |
| Contact data | Email, phone, postal address | Contract performance & legitimate interest |
| Financial data | Bank account details, source of funds, transaction history | Legal obligation (PSD2, AML) & contract performance |
| Professional data | Company name, RCS/registration number, UBO information | Legal obligation (KYC for legal entities) |
| Navigation data | IP address, cookies, pages visited | Legitimate interest (analytics — Google Analytics) — 1 year retention |
| Communication data | Emails, support tickets, chat history | Legitimate interest & contract performance |
4. Data Retention Periods
- KYC/AML identity documents: 5 years after end of business relationship (AML legal obligation)
- Financial transaction records: 5 years (AML legal obligation)
- Accounting documents: 10 years (Luxembourg accounting law / French commercial code)
- Navigation and analytics data: 1 year
- Support communications: 3 years
- Investment advisory records: 5 years (MiFID II — Article 72)
5. Data Transfers Outside the EU
Personal data is processed exclusively within the European Economic Area (EEA). No transfer outside the EEA takes place without appropriate safeguards (Standard Contractual Clauses or adequacy decision) in accordance with GDPR Chapter V.
6. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15): You may request a copy of all personal data held about you.
- Right to rectification (Art. 16): You may request correction of inaccurate personal data.
- Right to erasure (Art. 17): You may request deletion of your data, subject to legal retention obligations.
- Right to restriction (Art. 18): You may request that processing be restricted in certain circumstances.
- Right to data portability (Art. 20): You may request your data in a structured, machine-readable format.
- Right to object (Art. 21): You may object to processing based on legitimate interest.
- Right to withdraw consent (Art. 7): Where processing is based on consent, you may withdraw it at any time.
To exercise any of the above rights, please contact: contact@opulanz.com. You also have the right to lodge a complaint with the competent supervisory authority: CNIL (France) — www.cnil.fr — or CNPD (Luxembourg) — www.cnpd.lu.
7. Cookies
The Platform uses cookies for navigation, analytics (Google Analytics), and security purposes. Upon first visit, your consent is requested for non-essential cookies. You may manage your cookie preferences at any time via the cookie settings panel.
Last updated: July 2026