Privacy notice atHomeFinance
At atHomeFinance we respect and protect your privacy and believe that transparency is the key to good governance of personal data. We want to remain worthy of the trust you place in us by using our services. This is why we would like to inform you of the precautions we take in processing the personal data you provide to us.
Your personal data
The personal data we may collect and process is the following:
- Your identity information: last name, first name, identification data, civil status, date and place of birth, etc.
- Your contact information: e-mail address, phone number, postal address, etc.
- Information related to your personal life: family status, real estate project, etc.
- Information related to your working life: work situation, education, etc.
- Your economic and financial information: income, expenses, financial situation, bank data, etc.
Responsibility for processing, purpose, consequences of the absence of data
atHomeFinance, located at 25 route d'Esch L-1470 Luxembourg, carries out the processing of personal data, supplied by you or otherwise acquired during the performance of the services, as the controller of such processing. The processing of this data is carried out within the framework of appropriate procedures and measures in order to safeguard security in terms of integrity, confidentiality and accessibility of your data, in accordance with applicable legislation.
The purpose of the collection of this data is to formulate one or more financing plans, seek financing from banking partners, monitor and manage the file, propose borrower insurance, profiling based on preferences expressed during applications for real estate loans, etc.
This data and information, as well as its processing, is essential to atHomeFinance in order to provide the services requested.
Retention period of this data
In accordance with the provisions governing the retention of personal data and with regard to the nature of the banking operations, the retention period of your personal data is set at thirty-six (36) months or up to five (5) years after the total repayment of your credit in the event that you have taken out a real estate loan by the intermediary of atHomeFinance.
Nature of data disclosure and consequences of non-disclosure
The disclosure of your personal data and your needs and characteristics to our banking partners, insurance partners, and competent authorities is a necessary condition for the processing carried out for the above purposes: Those will act as Controller or as Processors appointed from atHomeFinance with a specific Data Protections Agreement under Art. 28 of the GDPR.
Therefore, in the event of non-disclosure of your personal data and/or your opposition to it, atHomeFinance will not be able to provide the requested services.
Additional purposes of the processing and consequences of the absence of your data
Based on your free, explicit, specific consent which can be withdrawn at all times, atHomeFinance may process your personal data, including through automated systems, to send you information, commercial offers relating to our products and/or services, as well as to prepare analyses, statistics and market research. Your consent to the processing of your data for this purpose is optional.
Persons authorised to process your personal data and to whom your personal data may be disclosed
The processing of your data will be carried out by persons designated by atHomeFinance and who assume roles related to this processing such as atHomeFinance brokers, the administrative service, the staff of the financial department and the staff responsible for the maintenance of computer systems.
Your personal data will also be communicated and processed by persons outside the atHomeFinance organisation, including our banking, insurance and real estate partners, who will only process it for the purposes mentioned above and within the framework of their contractual relations with atHomeFinance. Those will act as Controller or as Processors appointed from atHomeFinance with a specific Data Protections Agreement under Art. 28 of the GDPR.
For all of the above purposes, the data may be communicated to the Grand Duchy of Luxembourg or abroad, to third parties such as tax and legal consultants of atHomeFinance, technical consultants responsible for the management and maintenance of our information systems, software and databases, to financial service, administration, archiving, auditing and budgetary certification companies, in any case in close relation and within the limits of the performance of their respective tasks and activities.
If this is necessary to pursue the purposes mentioned above, your personal data may also be communicated or made available to other entities within the group of which atHomeFinance is a member.
We make every effort to ensure the security, integrity and confidentiality of your personal data and information and to avoid its accessibility to unauthorised third parties. To this end, we review and update our security measures in line with current technologies. Unfortunately, no data transmitted over the Internet can be guaranteed as completely secure.
In addition, our employees and contractors who provide services related to our information systems are required to respect the confidentiality of personal information held by us. However, we cannot be held responsible for events resulting from unauthorised access to your personal information.
Your rights and contacts
As an interested party in the processing of your personal data processed by atHomeFinance, you are able to exercise, at any time, the rights specific to natural persons as defined by the GDPR. In particular, you may request confirmation of the processing or not of personal data concerning you and, in this case, obtain access to it. You also have the right to request correction, deletion, notification of correction or deletion carried out to the recipients to whom your data was transmitted, processing limitation in the cases provided for by the Law, portability of personal data provided in the cases indicated by the Law, opposition to the processing of your data and, more specifically, opposition to decisions concerning you if it is based solely on automated processing of your data, including profiling. If you believe that the processing that concerns you violates the rules of the GDPR, you have the right to lodge a complaint with the supervisory authority under Art. 77 of the GDPR.
For any contact request or to exercise your rights, exclusively relating to data protection, you can contact our Data Protection Officer by email at email@example.com.