Privacy Policy


Gatsby & White S.A. legal mentions and Privacy Policy

Section 1 : Terms of Use

You are connected to the site of Gatsby & White S.A.: www.gatsbyandwhite.com which is a property of Gatsby & White S.A. company and is governed by the conditions set out below, the cookies policy and the legal and privacy policy (all together the Conditions). Please read carefully the Conditions before using the Website. Using this Website indicates that you accept all of these Conditions.

Section 2 : Website Management and Hosting

This website is owned and managed by Gatsby & White S.A. company, a company incorporated and organized under the Laws of Luxembourg, with registered office at:

40, rue du Curé
L-1368
Grand Duchy of Luxembourg
Tel.: +352 24 84 45- 1
Fax: +352 26 68 78 30
R.C.S. Luxembourg: B 175721
Broker Licence : 2013CM006
VAT I.D.: LU 25981928

Gatsby & White is a company organized under the laws of Luxembourg, with registered office at 40 rue du Curé L-1368, Grand Duchy of Luxembourg, Tel.: +352 24 84 45-1, Fax: +352 26 68 78 30, R.C.S. Luxembourg: B 175721, Broker Licence 2013CM006, VAT I.D.: LU 25981928.. Gatsby & White provides services as insurance broker and is duly authorized by the Commissariat aux Assurances (CAA) (agreement n° 2013CM006)

Section 3: Identity and contact details of the Data Controller

The Data Controller is the Insurance Intermediary:

Gatsby & White S.A.
40, rue du Curé
L-1368
Grand Duchy of Luxembourg
Tel.: +352 24 84 45- 1
Email: data.privacy@gatsbyandwhite.com
Website: www.gatsbyandwhite.com

Any data subject may, at any time, contact us directly with all questions and suggestions concerning data protection.

Section 4 : Collection of Data or Information

In general, access and navigation on the Website can be performed without disclosing any personal information or data. However, on some parts of this Website, it may be needed to collect some information or you may submit these information directly to Gatsby & White S.A..

By using this website, you expressly consent to the collection and use of the information in agreement with the legal and privacy policy and the Cookies policy.

Section 5 : Use of Information collected

  1. Domain name information collected is not used to personally identify you and instead is aggregated to measure the number of visits, average time spent on the website, pages viewed etc. We use this information to measure the use of our website and to improve its contents.
  2. When other personal information, such as your name and email address is collected from you (for example through online forms, etc.) we let you know at the time of collection how we will use that personal information.
  3. We may also use the personal information you provide or which we collect via this website for the following purposes:
    • providing you with services which you have requested and notifying you about important changes to or developments of these services;
    • updating our records about you;
    • responding to your inquiries and complaints or processing your requests in relation to your information;
    • administering offers, competitions and other promotions;
    • evaluating the effectiveness of our marketing;
    • research, training and statistical analysis with the aim of improving our services; and
    • making the website easier for you to use and providing you with access to certain parts of the website.
  4. We may monitor, record, store and use any email or other communications we have with you, so that we can check any instructions given to us, to prevent crime and to improve the quality of our customer service.
  5. By using the website, you consent to us using your personal information for the purposes described above.

Section 6: Transfer of Personal Data

  1. We will treat your personal information as confidential but may share it with each other and disclose it outside Gatsby & White S.A. if:
  • it is necessary for complying with a legal obligation to which Gatsby & White S.A. is subject; or
  • it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Gatsby & White S.A.; or
  • it is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract; or if
  • it is necessary for the purposes of the legitimate interests pursued by Gatsby & White S.A., except where such interests are overridden by your interests or fundamental rights and freedoms; or if
  • it is necessary in order to protect your vital interests; or if
  • you have given your consent.

Section 7 : Gatsby & White S.A. Cookies Policy

Gatsby & White S.A. aims to protect the privacy of personal data and information of every visitors of this website, in accordance with law of August 2nd 2002 on data protection and the law 30th May 2005 (the “Law”) as modified from time to time and applicable in Luxembourg.

In order to be able to function correctly, this website uses cookies. Gatsby & White S.A. may also use Google Analytics cookies (the cookies and Google Analytics cookies hereafter referred as the “cookies”). By continuing to use this website without disabling cookies you expressly consent to the placement of cookies in accordance with the terms of this policy. If you do not wish to accept cookies from this website please either disable cookies in your browser or refrain from using this website. Please note however that by disabling cookies in your browser settings, this website may not function correctly.

Why using Cookies?

Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the individual browser of the dats subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Through the use of cookies, the Gatsby & White S.A. can provide the users of this website with more user-friendly services that would not be possible without the cookie setting

What kinds of cookies do we use?

Cookies are used only for specific purposes in line with the Law and primarily to improve your digital experience.

Gatsby & White S.A. various cookies, such as strictly necessary cookies, performance cookies, functionality cookies and Google Analytics Cookies.

  1. _ga = Google Analytics; explain purpose
  2. _gid = Google Analytics
  3. cuvid = Click Dimensions analytics
  4. cookie_notice_accepted = pop-up cookie
  5. pum-10908 = ?
    + 2 cookies from cybot when solution in place
  6. Hotjar

Gatsby & White S.A. may therefore use cookies strictly necessary to enable to navigate on this website and use all its features, such as accessing secure areas of this website.

Gatsby & White S.A. may also use performance cookies such as cookies tracking the pages visited most often and any error message received by users. These cookies don’t collect information that identify a user. All information collected is anonymous and only used to improve how the website works.

Gatsby & White S.A. may also use functionality cookies i.e. cookies helping to provide services or to remember settings to improve your digital experience. These cookies are for instance to remember language choices you made as well as your country/region.

Gatsby & White S.A. may as well use Google Analytics cookies to track the number of users and which pages have been mostly visited by users.

How can I disable cookies?

You have several options for deleting cookies and other tracers.
Browser settings:
Although most browsers are set by default to accept cookies, you can, if you desire, choose to accept all cookies, always block cookies, or choose which cookies to accept based on their senders. You can also set your browser to accept or block cookies on a case-by-case basis before they are installed. Your browser also allows you to regularly delete cookies from your device. Remember to configure all the browsers in your different devices (tablets, smartphones, computers, etc.)

Regarding management of cookies and your preferences, configuration varies for each browser. This is described in the Help menu of your browser, as well as how to edit your preferences with regard to cookies. For example:

For Internet Explorer™: http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
For Safari™: http://www.apple.com/legal/privacy/en-ww/cookies
For Chrome™: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
For Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
For Opera™: http://help.opera.com/Windows/10.20/en/cookies.html

Saving a cookie to your device depends on your wishes, which you can exercise and change at any time and free of charge using the settings offered by your browser software.

If your browser is set to accept cookies on your device, the cookies embedded in the pages and content that you view may be temporarily stored in a dedicated space on your device. They can only be read by their issuer. However, you can set your browser to block cookies. Keep in mind that if you set your browser to block cookies, some features, pages and spaces on Gatsby & White’s Websites will not be accessible, and we cannot be held responsible in this case. Please be informed however that this can trigger error messages and that some features of Gatsby & White S.A. Website may not work properly.

In case of question please do not hesitate to contact us.

Section 8 : Subscription to our newsletters

On the website of the Gatsby & White S.A., users are given the opportunity to subscribe to our enterprise’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.

The Gatsby & White S.A. informs its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise’s newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.

During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of the e-mail address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller.

The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. The subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given for shipping the newsletter, may be revoked at any time. For the purpose of revocation of consent, a corresponding link is found in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the controller, or to communicate this to the controller in a different way.

Section 9: Newsletter – Tracking

The newsletter of the Gatsby & White S.A. contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the Gatsby & White S.A. may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.

Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. The Gatsby & White S.A. automatically regards a withdrawal from the receipt of the newsletter as a revocation.

Section 10: Contact possibility via the website

The website of the Gatsby & White S.A. contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

Section 11: Data protection for applications and the application procedures

The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).

Section 12: Data protection provisions about the application and use of Google Analytics (with anonymization function)

On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

For the web analytics through Google Analytics the controller uses the application “_gat. _anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under

http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

Section 14: Data protection provisions about the application and use of Google-AdWords

On this website, the controller has integrated Google AdWords. Google AdWords is a service for Internet advertising that allows the advertiser to place ads in Google search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define specific keywords with the help of which an ad on Google’s search results only then displayed, when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, taking into account the previously defined keywords.

The operating company of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

The purpose of Google AdWords is the promotion of our website by the inclusion of relevant advertising on the websites of third parties and in the search engine results of the search engine Google and an insertion of third-party advertising on our website.

If a data subject reaches our website via a Google ad, a conversion cookie is filed on the information technology system of the data subject through Google. The definition of cookies is explained above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not expired, the conversion cookie is used to check whether certain sub-pages, e.g, the shopping cart from an online shop system, were called up on our website. Through the conversion cookie, both Google and the controller can understand whether a person who reached an AdWords ad on our website generated sales, that is, executed or canceled a sale of goods.

The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through AdWords ads to ascertain the success or failure of each AdWords ad and to optimize our AdWords ads in the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.

The conversion cookie stores personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, at any time, prevent the setting of cookies by our website, as stated above, by means of a corresponding setting of the Internet browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the information technology system of the data subject. In addition, a cookie set by Google AdWords may be deleted at any time via the Internet browser or other software programs.

The data subject has a possibility of objecting to the interest-based advertisement of Google. Therefore, the data subject must access from each of the browsers in use the link www.google.de/settings/ads and set the desired settings.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/.

Section 15: Data protection provisions about the application and use of Jetpack for WordPress

On this website, the controller has integrated Jetpack. Jetpack is a WordPress plug-in, which provides additional features to the operator of a website based on WordPress. Jetpack allows the Internet site operator, inter alia, an overview of the visitors of the site. By displaying related posts and publications, or the ability to share content on the page, it is also possible to increase visitor numbers. In addition, security features are integrated into Jetpack, so a Jetpack-using site is better protected against brute-force attacks. Jetpack also optimizes and accelerates the loading of images on the website.

The operating company of Jetpack Plug-Ins for WordPress is the Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, UNITED STATES. The operating enterprise uses the tracking technology created by Quantcast Inc., 201 Third Street, San Francisco, CA 94103, UNITED STATES.

Jetpack sets a cookie on the information technology system used by the data subject. The definition of cookies is explained above. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Jetpack component was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to submit data through the Jetpack component for analysis purposes to Automattic. During the course of this technical procedure Automattic receives data that is used to create an overview of website visits. The data obtained in this way serves the analysis of the behaviour of the data subject, which has access to the Internet page of the controller and is analyzed with the aim to optimize the website. The data collected through the Jetpack component is not used to identify the data subject without a prior obtaining of a separate express consent of the data subject. The data comes also to the notice of Quantcast. Quantcast uses the data for the same purposes as Automattic.

The data subject can, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Automattic/Quantcast from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Automattic/Quantcast may be deleted at any time via a web browser or other software programs.

In addition, the data subject has the possibility of objecting to a collection of data relating to a use of this Internet site that are generated by the Jetpack cookie as well as the processing of these data by Automattic/Quantcast and the chance to preclude any such. For this purpose, the data subject must press the ‘opt-out’ button under the link https://www.quantcast.com/opt-out/ which sets an opt-out cookie. The opt-out cookie set with this purpose is placed on the information technology system used by the data subject. If the cookies are deleted on the system of the data subject, then the data subject must call up the link again and set a new opt-out cookie.

With the setting of the opt-out cookie, however, the possibility exists that the websites of the controller are not fully usable anymore by the data subject.

The applicable data protection provisions of Automattic may be accessed under https://automattic.com/privacy/. The applicable data protection provisions of Quantcast can be accessed under https://www.quantcast.com/privacy/.

Section 16: Data protection provisions about the application and use of LinkedIn

The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside of the UNITED STATES LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.

LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.

LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available under https://www.linkedin.com/legal/cookie-policy.

Section 17: Legal basis for the processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).

Section 18: The legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.

Section 19 : Gatsby & White S.A. Legal and Privacy Disclaimer

Gatsby & White S.A. aims to protect the privacy of personal data and information of every visitors of this Website, in accordance with law of August 2nd 2002 (the Law) on the protection of persons with regard to the processing of personal data and the law 30th May 2005 as modified from time to time and applicable in Luxembourg.

Therefore, any personal data or information supplied by you through this Website will be collected, stored and processed by Gatsby & White S.A., as data controller, in accordance with the Law. These personal data or information may be used for operational, administrative, marketing or prospecting purposes. By visiting this Website you expressly agree to the processing of any personal data or information supplied to us by you, for administrative, operational, marketing or prospecting needs.

What are my rights?

In compliance with the Laws and Regulations on Personal Data and any other applicable law or regulation, the Data Subject has the right to :

  1. Obtain transparent information on the Personal Data collected and the processing completed on this Personal Data collected
  2. Request from the Insurance Intermediary access to Personal Data, and a.o. to get information on the purpose of the processing, the categories of personal data concerned and recipients or categories of recipients to whom the personal data have been disclosed
  3. Request a rectification of Personal Data i.e. to request that specific Personal Data be rectified from the Insurance Intermediary’s systems where one of the legal grounds is applicable
  4. Request a restriction of processing, i.e. provided one of the legal grounds is applicable, to request that Personal Data are, with the exception of storage, only processed with the Data Subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person
  5. Object, on grounds relating to his or her particular situation, to processing based on the legitimate interest of the Insurance Intermediary
  6. Request a portability, i.e. the right to receive the Personal Data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, if technically feasible
  7. Use his right to be forgotten, i.e. to request an erasure of the Insurance Intermediary’s entire records of Personal Data about him, subject to the provisions of clause 5 concerning pseudonymisation and anonymization
  8. Get a notification of data breaches i.e. when Personal Data collected and processed by the Insurance Intermediary is lost or is subject or unauthorised access or disclosure that is likely to result in a serious harm to the Data Subject
  9. Withdraw consent at any time if the processing of his Personal Data is based on such a consent (i.e. for instance, but not limited to the purpose of commercial offers, competitions, promotions, games and contests);
  10. File a complaint with the Luxembourg supervisory authority, i.e. to send a complaint letter to the Commission Nationale pour la Protection des Données, 1, avenue du Rock’n’Roll, L-4361 Esch-sur-Alzette, Grand Duchy of Luxembourg
  11. Rights related to automated decision making, including profiling, i.e. a decision of the organisation based on Personal Data and carried out without human intervention or profiling i.e. an automated processing of personal data to evaluate certain things about an individual. In cases where automated processing decisions are taken, the Data Subject has the right to obtain a human intervention on the processing leading to the decision, to express concerns and to object to the decision.

How can I exercise my rights?

You can exercise your rights regarding your personal data in accordance with the Law by applying:

  1. in writing to the head office of Gatsby & White S.A.

Gatsby & White S.A. Company SA
40, rue du Curé
L-1368
Grand Duchy of Luxembourg

  1. or contacting by email : data.privacy@gatsbyandwhite.com

Please also be advised that the content of the webpages of this Website and any other Website that is the property of Gatsby & White S.A. (hereafter the Website) is intended solely to provide general guidance to the reader of these pages on the services offered by Gatsby & White S.A.. Any and all information, data, analyses, comments, simulations, advice and opinions published on this site are provided for information purposes only and is not intended as an offer to sell or solicitation for the purchase or sale of any life assurance product or any other financial product or service.

Neither is the information intended to constitute any form of legal, fiscal or investment advice or recommendation and it should therefore be used only in conjunction with appropriate professional advice obtained from a suitable qualified professional source.

It is formally prohibited to use, represent or reproduce such materials, whether in whole or in part, in any form and by any means, unless with the prior written agreement of the authors and beneficiaries of such materials.

Section 20 : Applicable Law and Competent Court.

Information and data appearing on the website are exclusively governed by the laws of the Grand Duchy of Luxembourg. The court and tribunals of Luxembourg will have exclusive jurisdiction for any disputes relating to this website This disclaimer shall be governed solely by the laws of Luxembourg. In case of discrepancies between different versions of this website, the English version shall prevail.