Privacy Notice

This notice explains how BILDERBERG ADVISORY S.à r.l. and GREIVELDINGER GROUP S.à r.l., trading as Bilderberg Advisory, processes personal data in connection with this website and our advisory services, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the Luxembourg law of 1 August 2018 on the organisation of the Commission Nationale pour la Protection des Données (“CNPD”) and implementing the GDPR.

1. Data Controller

GREIVELDINGER GROUP S.à r.l. (trading i.a. as Bilderberg Advisory)

16 cité Bourfeld, L-8354 Garnich, Luxembourg

R.C.S. Luxembourg B225315

2. Data Protection Contact

For any question about this notice, or to exercise your rights under Section 8, please contact:

Email: cgreiveldinger@bilderberg-advisory.com

3. Personal Data We Process

We process the following categories of personal data:

Contact and correspondence data: name, email address, telephone number, and the content of any message sent via the contact form, email, or telephone.

Business contact data: name, title, organization, and business contact details of prospective or existing clients and their representatives.

Technical and usage data: IP address, browser and device information, and pages visited, collected via cookies or similar technologies (see Section 10).

4. Purposes and Legal Basis

We process personal data on the following legal bases under Article 6(1) GDPR:

To respond to enquiries submitted via the website, email, or telephone — performance of pre-contractual steps taken at your request (Art. 6(1)(b)) or our legitimate interest in handling enquiries (Art. 6(1)(f)).

To negotiate and perform advisory engagements — performance of a contract (Art. 6(1)(b)).

To operate and secure our website — our legitimate interest in the proper functioning and security of our systems (Art. 6(1)(f)).

To comply with legal and regulatory obligations, including under Luxembourg commercial, tax, and anti-money-laundering law — compliance with a legal obligation (Art. 6(1)(c)).

For non-essential cookies or similar technologies — your consent (Art. 6(1)(a)), which you may withdraw at any time.

5. Recipients of Personal Data

Given the confidential nature of our advisory work, access to personal data is strictly limited to authorized personnel and, where necessary: IT and hosting providers acting as processors under an Article 28 GDPR data processing agreement; professional advisors (legal, tax, audit) bound by confidentiality; and public authorities, where disclosure is required by law. We do not sell personal data and do not disclose client relationships to third parties.

6. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (Art. 46 GDPR), or by relying on an adequacy decision (Art. 45 GDPR).

7. Retention Period

General correspondence and enquiry data (including data not leading to an engagement) is retained for three (3) years from the date of last contact. Data linked to an advisory engagement, or subject to a statutory retention obligation (e.g., commercial and accounting records under the Luxembourg Commercial Code), is retained for as long as required by the applicable law. In all cases, we retain personal data no longer than necessary for the purpose for which it was collected.

8. Your Rights

Under the GDPR, you have the right to:

o access your personal data (Art. 15);

o rectify inaccurate data (Art. 16);

o request erasure (Art. 17);

o restrict processing (Art. 18);

o receive or transmit your data in a portable format (Art. 20);

o object to processing based on our legitimate interest, including profiling (Art. 21); and

o withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

To exercise these rights, contact us using the details in Section 2. We will respond within one month of your request, as required by Article 12(3) GDPR.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the Luxembourg supervisory authority:

Commission Nationale pour la Protection des Données (CNPD)

15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg

10. Cookies

Our website may use cookies strictly necessary for its operation, and, subject to your consent, analytics or functionality cookies. You can manage your preferences at any time via your browser settings.

11. Changes to This Notice

We may update this notice to reflect changes in our practices or in applicable law. The version in force is the one published on this page.

Last updated: 6th July 2026