Privacy Policy

How Charlemain Consulting collects, processes and protects personal data.

Last updated: 6 May 2026

1. Who we are

Charlemain Consulting is a recruitment consultancy based in Luxembourg. For the purposes of the EU General Data Protection Regulation (GDPR) and Luxembourg's loi du 1er août 2018, we are the data controller for personal data collected through this website.

Office address: 2 rue Jean Engling, L-1466 Dommeldange, Grand Duchy of Luxembourg
Contact: contact@charlemainconsulting.com

2. What personal data we collect

We collect personal data only when you choose to provide it through:

• The contact form on this website (name, company, email, phone if provided, message content, enquiry type)
• Direct correspondence by email, phone, WhatsApp or LinkedIn
• Candidate CVs and professional profiles voluntarily shared with us

We do not collect personal data through cookies, analytics, or tracking pixels. This site does not use behavioural tracking.

3. Why we process your data

We process personal data only for these specific purposes:

• To respond to enquiries you send us through the website or by email
• To assess and present candidates for client mandates (where you are a candidate)
• To discuss potential mandates (where you are a hiring client)
• To maintain professional records of our client and candidate relationships

4. Legal basis for processing

We rely on the following GDPR legal bases:

• Legitimate interests (Article 6(1)(f)) — for B2B communications with clients and candidates in the insurance and reinsurance sector, where the processing is reasonably expected and necessary for our recruitment services
• Consent (Article 6(1)(a)) — for any marketing communications, only where you have explicitly opted in
• Contract (Article 6(1)(b)) — where we are engaged on a specific mandate or candidate placement

5. How long we keep your data

• Enquiries that do not lead to engagement: 12 months from last contact, then deleted
• Active candidates: retained for the duration of the relationship plus 24 months
• Client mandates: retained for the legal limitation period (10 years under Luxembourg commercial law)
• Marketing consents: until you withdraw consent

6. Who has access to your data

Personal data is accessed only by Charlemain Consulting and, where strictly necessary for a specific mandate, by our client (with your knowledge and consent if you are a candidate). We do not sell, rent or trade personal data.

We use the following processors, each of whom is bound by GDPR-compliant data processing agreements:

• Netlify (website hosting and form submission storage) — based in the United States, operating under EU Standard Contractual Clauses
• Email and productivity providers used for business correspondence

7. Your rights under GDPR

You have the following rights regarding your personal data. To exercise any of them, email contact@charlemainconsulting.com:

• Right of access — to obtain a copy of the data we hold about you
• Right to rectification — to correct inaccurate data
• Right to erasure ("right to be forgotten") — to have your data deleted, subject to legal retention requirements
• Right to restrict processing — to limit how we use your data
• Right to data portability — to receive your data in a structured format
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — at any time, where consent is the legal basis

We will respond to verified requests within 30 days.

8. Right to complain

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with Luxembourg's data protection authority:

Commission nationale pour la protection des données (CNPD)
15, boulevard du Jazz, L-4370 Belvaux
cnpd.public.lu

9. International data transfers

Where personal data is transferred outside the European Economic Area (for example, through our use of Netlify hosting in the United States), the transfer is governed by EU Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.

10. Security

This website is served entirely over HTTPS. Form submissions are encrypted in transit. We apply reasonable technical and organisational measures to protect personal data, including access controls and secure correspondence channels.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent version. Material changes will be communicated where required by law.

12. Questions

For any questions about this policy or how we process personal data, contact contact@charlemainconsulting.com.