Legal, Compliance, GDPR

Data processing controller

The data processing controller, is the designated entity that is responsible for the way your personal data is processed, transferred and retained.

The editor of the website is also the data processing controller :

European Fund Administration
2, Rue d'Alsace
L - 1122 Luxembourg

Register of Commerce and Companies n°: B56766
Intra community VAT: LU16944578

The data processing controller can be contacted by phone (+352) 48 48 80 80 or by email: .


Complaint policy

Remuneration disclosures


We treat your personal data with respect, while we process any information collected in relation to our activity.

Our privacy policy applies to every visitor who visits our website



What personal data do we collect?

Technical data

While you navigate through our website, we collect different kinds of technical data :

  • web browser and screen resolution
  • operating system and device type (computer, mobile, tablet)
  • session statistics
  • navigation feed and clicks
  • IP address


This data is stored anonymously and can not be used to identify you.



How do we collect your personal data?

Only data that you voluntarily provided is being collected, such as data submitted while signing up to a newsletter, filling out a contact form or contacting us via email.  

Data outlining how you navigate through our website will also be collected.

Where another party (such as a company or a partnership or any third parties acting on you or your behalf) provides your personal information to us, they must also comply with their obligations under the relevant privacy laws and regulations. If you believe that the entity for whom you work or a third party has not provided you with details of the personal information that it holds about you and/or has not obtained your authority to provide us with that personal information for processing as described in this Privacy Notice, then please contact such entity directly.



Usage of your personal data

A cookie (a small text file) is placed on your device (computer, mobile phone, tablet) when you visit any website. This cookie identifies the device each time you visit the web site during the defined lifetime of the cookie.

Various kinds of cookies are used on our website:


Necessary cookies

It is a type of cookie which is essential to navigate a website. If you block this type of cookies in your web browser, you may not be able to use certain features of a website. These types of cookies are only sent by our website and not by third-party tools.


Preference cookies

Preference cookies allow us to improve and optimize the performance of our website by suggesting customized features (eg: language settings). If  you block preference cookies in your browser, you will not be able to benefit from any customised features. Preference cookies are sent by the website and by third party tools.

Please consult our subcontractors at the end of this page to know what type of cookies are sent by third party providers.


Analytic cookies

Analytic cookies allow us to create performance statistics and analyse user behaviour on our website. The collected data is crucial for our business, as well as long term website optimisation measures.

We assume that we have a legitimate interest to send this type of cookies and that your prior consent is not required.


Targeting Cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.



Objection to the usage of cookies

Some of our subcontractors offer “opt-out” options, which will block data collection and tracking:



Most web browser settings will allow you to set alerts if a website is trying to install cookies on your device or limit the type of cookies you allow. Check your web browser settings to find out which cookies you are allowing.



Legal grounds

Personal data is collected based on the following legal grounds :

  • To adapt and improve the offer
  • To comply to legal obligations
  • For our legitimate interest
  • To defend our interests during legal procedures
  • For commercial purposes, if we have received your consent

How long is your data stored for?

Your data is only kept as long as we estimate for it be necessary to achieve the initial goal.

All personal data is stored for a defined period of time depending on the type of data. The retention period may differ depending on the purpose of the data collected such as:

  • legal and contractual retention periods
  • the limitation period during which the concerned persons may assert their legal rights against our company
  • good practice
  • Company’s commercial goals

The maximum retention period of your personal data does not exceed 10 years.



Protection of your personal data

We use different technical and organizational methods to protect your personal data from unauthorized access.



To which countries is your personal data transferred to?

Personal data may be shared internally for company purposes and with different third party providers in accordance with their contractual arrangements.

Selected data may be transferred to third party providers as part of an outsourcing contract.

All third party providers have confirmed to treat and process any data in accordance with GDPR (General Data Protection Regulation) as of 25th May 2018.


Name and address of the provider Data storage country Type of service Concerned data

Amazon Web Services Inc 410 Terry Avenue North
Seattle, WA 98109-5210

Germany, France, Ireland Website hosting All data filled out in forms available on the website.

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043

Member countries of the European Union & USA Web analytics (Google Analytics), social media (Google+), Google fonts COOKIE: Pageviews, clicks,technical data of the web browser and of the device used to connect to the website

Web Insight
Building 3000, Lakeside,
North Harbour, Portsmouth, PO6 3EN

UK Web analytics (Google Analytics), social media (Google+), Google fonts COOKIE: Pageviews, clicks,technical data of the web browser and of the device used to connect to the website


Some of the data we obtain from you when you use our website includes technical data, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login details, browser type and version. , your time zone, the types of browser extensions and their versions, the operating system and the platform.



Your rights

Regulation (EU) n° 2016/679 of the European Parliament (1) and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC, the so-called General Data Protection Regulation ("GDPR") defines a stronger and more coherent personal data protection framework for any personal data processed within the EEA.

The new set of rules enters into force as from 25 May, 2018.

Some of the main points the GDPR emphasises on are (i) the rights of data subjects (the natural person) on the processing of their personal data, (ii) the obligations of the data controller, which determines the purposes and means of the processing of the personal data, as well as (iii) the obligations of the data processor, which processes personal data on behalf of the data controller.

EFA is data controller when it acts for its own purposes (e.g. relating to employees, clients, providers,…).  

The funds are data controllers and determine the purposes and means of the personal data processing. As subcontractor in charge of the central administration of the funds, EFA is data processor and processes personal data on behalf of, on instructions from and under the authority of the funds.

The investment vehicle, acting as data controller (for identity and contact details of the data controller, see the prospectus or the subscription form of the investment vehicle), and/or EFA, acting as data processor (or data controller for its own purposes), shall collect and use information on the account holder in a fair and lawful manner, in accordance with the provisions of the Law of 2 August 2002 on the protection of individuals with regard to the processing of personal data, as amended (the Law of 2002) and according to the Regulation (EU) of the European Parliament and the Council of april 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR") as such laws may be amended or repealed from time to time.

EFA is committed to keeping your information private and safe. By 'your information' (the personal data) we mean any data about you that you or third parties provide to us. EFA respects your privacy and is committed to protecting your personal data.

According to the GDPR, you have (as data subject) the following rights :

  • Right of access to your personal data
  • Right to rectification  of your personal data
  • Right to erasure (‘right to be forgotten') of your personal data
  • Right to restriction of processing
  • Right to data portability of your personal data
  • Right to object and automated individual decision-making

Documentation and personal data which are used to demonstrate orderly data processing will be stored in accordance with Luxembourg legal retention periods. Data subject's personal data are then erased if and when permitted by the Law of 2002 and GDPR or any other applicable laws.


You also have the right to submit a formal complaint to the Commission nationale pour la protection des données having its registered office at 1 Avenue du Rock'n'Roll, L-4361 Esch-sur-Alzette.