Privacy Policy

LD Security Services S.à r.l. ("LD Security", "we", "us" or "our") is a professional security and facility management company registered in Luxembourg, with its principal place of business at 41-42 Op Zaemer, 4959 Nidderkäerjeng Käerjeng, Luxembourg. This Privacy Policy explains how we collect, use, disclose and safeguard personal data we receive through our website (ldsecurity.lu), client onboarding processes, and service delivery activities.

We may collect and process the following categories of personal data: • **Contact information** — name, email address, company name and job title submitted via our contact form or assessment request forms. • **Technical data** — IP address, browser type, pages visited, and session duration collected via cookies and analytics tools. • **Service delivery data** — site addresses, access logs and incident reports necessary to provide our security services to business clients. We do not collect sensitive personal data (such as biometric, health, or financial data) through this website.

We use your personal data for the following legitimate purposes: • Responding to your enquiries and requests for assessments • Providing, managing and improving our security services • Sending relevant service updates and news (only where you have consented) • Complying with legal and regulatory obligations under Luxembourg and EU law • Maintaining the security and performance of our website

We process your personal data on the following legal grounds under the EU General Data Protection Regulation (GDPR — Regulation 2016/679): • **Contractual necessity** — where data processing is required to fulfil our service agreements • **Legitimate interests** — for responding to business enquiries and operating our website • **Consent** — where you have explicitly opted in to receive marketing communications • **Legal obligation** — where we are required to process data to comply with applicable law

We do not sell or rent your personal data to third parties. We may share data with: • **Trusted service providers** acting as data processors on our behalf (e.g. website hosting, email providers, analytics platforms) under strict contractual data processing agreements • **Regulatory authorities** where required by applicable Luxembourg or EU law • **Professional advisers** (lawyers, auditors) bound by confidentiality obligations All third-party processors are required to implement appropriate security measures to protect your data.

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by applicable law: • Enquiry and contact form data: 24 months • Client service records: 7 years (Luxembourg commercial law requirement) • Website analytics data: 13 months Data is securely deleted or anonymised at the end of the applicable retention period.

Under the GDPR, you have the following rights in relation to your personal data: • **Right of access** — to request a copy of the personal data we hold about you • **Right to rectification** — to correct any inaccurate personal data • **Right to erasure** — to request deletion of your data in certain circumstances • **Right to restrict processing** — to limit how we use your data • **Right to data portability** — to receive your data in a structured, machine-readable format • **Right to object** — to object to processing based on legitimate interests To exercise any of these rights, please contact us at info@ldsecurity.lu. We will respond within 30 days.

Our website uses essential cookies to ensure its proper functioning. We also use analytics cookies (with your consent) to understand how visitors interact with our site. You may manage your cookie preferences through your browser settings. For more information on the cookies we use, please contact us.

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our website is served over HTTPS, and access to personal data is restricted to authorised personnel on a need-to-know basis.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The date of the most recent revision will always appear at the top of this page. We encourage you to review this policy periodically.

For any privacy-related enquiries, to exercise your rights, or to lodge a complaint, please contact: LD Security Services S.à r.l. 41-42 Op Zaemer, 4959 Nidderkäerjeng Käerjeng, Luxembourg Email: info@ldsecurity.lu You also have the right to lodge a complaint with the Luxembourg data protection authority, the Commission Nationale pour la Protection des Données (CNPD): www.cnpd.lu