top of page

Privacy Policy

Stichting Iluminus Capital Management ("we", "us", "our") is a foundation (stichting) registered in the Netherlands. We are committed to protecting your personal data and complying with all applicable data protection legislation, including Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Dutch Implementation Act (Uitvoeringswet AVG).

​

1. Data controller

​

The data controller is Stichting Iluminus Capital Management, registered in the Netherlands. For all data protection enquiries, please contact us at info@iluminuscapital.com.

​

2. Data we collect

​

We may collect and process the following categories of personal data:

​

  • Identity data — full name, date of birth, passport or national identity card number.

  • Contact data — email address, telephone number, residential address.

  • Financial data — bank account details, assets and liabilities, tax identification number (BSN or equivalent).

  • Technical data — IP address, browser type, cookies, website usage data.

  • Communications data — correspondence with us via email or other channels.

​

3. Purposes and legal basis for processing

​

  • Performance of a contract — providing investment management and family office services (GDPR Art. 6(1)(b)).

  • Legal obligation — compliance with AML/KYC requirements under the Dutch Wwft (Wet ter voorkoming van witwassen en financieren van terrorisme), tax reporting and financial regulatory requirements (GDPR Art. 6(1)(c)).

  • Legitimate interests — risk management, cyber security, portfolio analytics (GDPR Art. 6(1)(f)).

  • Consent — sending marketing communications, placing optional cookies (GDPR Art. 6(1)(a)).

​

4. Retention periods

​

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Financial and contractual records are generally kept for a minimum of seven (7) years following the end of the contractual relationship, in line with Dutch fiscal and financial regulations.

​

5. Recipients of personal data

​

Your data may be shared with:

​

  • custodians, banks and financial intermediaries engaged in the provision of our services;

  • external auditors and legal advisers acting under professional confidentiality obligations;

  • regulatory authorities (e.g. the AFM or DNB) where required by law;

  • IT service providers processing data on our behalf under data processing agreements.

​

We do not sell or rent your personal data to third parties for marketing purposes.

​

6. International transfers

​

Where personal data is transferred outside the European Economic Area, we ensure adequate safeguards are in place, such as the European Commission's standard contractual clauses or adequacy decisions.

​

7. Your rights

​

Under the GDPR you have the right to:

  • access your personal data and obtain a copy;

  • rectify inaccurate or incomplete data;

  • request erasure of your data ("right to be forgotten") where permitted by law;

  • restrict processing in certain circumstances;

  • data portability in a structured, machine-readable format;

  • object to processing based on legitimate interests;

  • withdraw consent at any time without affecting the lawfulness of prior processing;

  • lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl) or any other competent supervisory authority.

​

To exercise any of the above rights, please contact us in writing at the details below. We will respond within 30 days.

​

8. Changes to this policy

​

We may update this Privacy Policy from time to time. Material changes will be communicated via our website or by email. Continued use of our services following any update constitutes acceptance of the revised policy.

​

Contact
info@iluminuscapital.com

+31 2036 91977
Stichting Iluminus Capital Management
Kabelweg 57, 1014BA Amsterdam, Netherlands
Supervisory authority: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl

bottom of page