Privacy Policy

Last update: August 03, 2026

1. Introduction

At NUEVOBANCO, we take your privacy seriously. This privacy policy explains how we collect, use, share and protect your personal information when you use our services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information you provide

  • Personally identifiable information (name, date of birth, nationality)
  • Contact details (email, telephone number, address)
  • Financial information (income, employment details)
  • Identity documents (passport, identity card, driving license)
  • Transaction data and account activity

2.2 Information We Collect Automatically

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Location data (with your consent)
  • Cookies and similar tracking technologies

3. How we use your information

We use your information to:

  • Provide and manage your account and services
  • Process transactions and payments
  • Verify your identity and prevent fraud
  • Comply with legal and regulatory requirements
  • Improve our services and develop new features
  • Communicate with you about your account and services
  • Send marketing communications (with your consent)

4. Legal basis for processing

We process your personal data on the basis of:

  • Contract: to provide the services you have requested
  • Legal obligation: to comply with laws and regulations
  • Legitimate interests: for business operations and fraud prevention
  • Consent: for marketing and certain data processing activities

5. Information sharing

We may share your information with:

  • Service providers who help us operate our business
  • Financial institutions for payment processing
  • Regulatory authorities and law enforcement when required
  • Credit reference agencies for identity verification
  • Third parties with your explicit consent

We do not sell your personal information to third parties.

6. Data security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication measures
  • Employee data protection training
  • Incident response procedures

7. Data retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Generally :

  • Account information: 5 years after account closure
  • Transaction records: 7 years for regulatory compliance
  • Marketing data: until you withdraw your consent
  • Technical logs: 90 days

8. Your rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to data processing
  • Request data portability
  • Withdraw your consent at any time
  • File a complaint with supervisory authorities

9. Cookies

We use cookies and similar technologies to improve your experience, analyze usage, and serve targeted advertising. You can manage cookie preferences through your browser settings.

Types of cookies we use:

  • Essential cookies: required for the functionality of the service
  • Performance cookies: help us improve our services
  • Functional cookies: remember your preferences
  • Marketing cookies: deliver relevant advertisements

10. International transfers

Your data may be transferred to countries outside the European Economic Area. We ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

11. Children's privacy

Our services are not intended for persons under the age of 18. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or via our services.

13. Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please contact our Data Protection Officer:

NUEVOBANCO
Data Protection Officer
123 Financial Street
L-1234 Luxembourg
Email: privacy@nuevobnks.online
Phone: +352 123 456 789

14. Supervisory authority

You have the right to lodge a complaint with the supervisory authority:

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux
Website: cnpd.public.lu