Privacy Policy
Last updated: 15th March 2026
Introduction
OpenSummit SARL ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services. We are the data controller for the personal data we collect and process.
Data We Collect
We collect various types of information to provide and improve our services to you. The data we collect includes:
- Personal Information: Name, email address, phone number, business information
- Communication Data: Messages, enquiries, and correspondence you send to us
- Technical Data: IP address, browser type, operating system, referring URLs
- Usage Data: Information about how you use our website and services
- Marketing Data: Your preferences for receiving marketing communications
How We Use Your Information
We use the information we collect for various purposes, including how we use your information to provide our services:
- To provide, operate, and maintain our website and services
- To respond to your enquiries and provide customer support
- To send you business communications and service updates
- To improve our website, services, and user experience
- To comply with legal obligations and protect our rights
- To send marketing communications (with your consent)
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for marketing communications
- Contract: To perform our contractual obligations when providing services
- Legitimate Interests: For business operations, security, and service improvement
- Legal Obligation: To comply with applicable laws and regulations
Cookies and Tracking Technologies
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.
For detailed information about the cookies we use, please refer to our Cookie Policy.
Data Sharing and Disclosure
We do not sell your personal data to third parties. We may share your information in the following circumstances:
- Service Providers: With trusted third-party providers who assist in delivering our services
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with mergers, acquisitions, or asset sales
- Consent: When you have given explicit consent to share your information
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy. Generally, we keep your information for the duration of our business relationship and for up to 7 years afterwards for legal and regulatory compliance purposes. Data retention periods may vary based on the type of information and applicable legal requirements.
International Data Transfers
As we operate primarily within the European Union, most data processing occurs within the EU. When we transfer data outside the EU, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions by the European Commission.
Your Rights
Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data in certain circumstances
- Right to Restrict Processing: Limit how we process your personal data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing
- Right to Withdraw Consent: Withdraw consent for processing based on consent
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.
Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the contact information below:
OpenSummit SARL
Avenue de la Porte-Neuve 28
3293 Dudelange, Luxembourg
Email: privacy@opensummit.world
Phone: +352 27960148
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data in violation of applicable data protection laws. In Luxembourg, you can contact the National Commission for Data Protection (CNPD).