1. Introduction

Pithos Capital GP Sàrl (“Pithos,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage with our services, or interact with us in any capacity.

We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Luxembourg data protection laws.

2. Who We Are

Pithos Capital GP Sàrl is a private equity firm registered in Luxembourg. Our registered office is:

Pithos Capital GP Sàrl
19 rue Eugène Ruppert, L2453
Luxembourg
B268221

contact@pithos.eu

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity & Contact Information: Name, email address, phone number, job title, company name, and postal address.
  • Financial & Transactional Data: Banking details, investment history, and financial information where relevant.
  • Technical Data: IP address, browser type, device information, and website usage analytics.
  • Communication & Correspondence: Emails, messages, and any inquiries sent to us.
  • Regulatory & Compliance Data: Information required for Know Your Customer (KYC), Anti-Money Laundering (AML), or other legal obligations.

4. How We Collect Your Data

We collect personal data through:

  • Direct Interactions: When you provide your details via email, website forms, or business correspondence.
  • Automated Technologies: Through cookies, server logs, and analytics tools when you visit our website.
  • Third-Party Sources: Business partners, regulatory bodies, and publicly available sources.

5. Purpose of Processing and Legal Basis

We process your data for the following purposes, relying on legal bases under GDPR:

Purpose Legal Basis
Managing investments, client relationships, and transactions Performance of a contract
Compliance with legal and regulatory obligations (AML/KYC, tax reporting, etc.) Legal obligation
Responding to inquiries and communications Legitimate interest / Consent
Website analytics and improvement Legitimate interest
Marketing and updates (if applicable) Consent

6. How We Share Your Data

We may share personal data with:

  • Regulatory and Legal Authorities (to comply with Luxembourg and EU regulations)
  • Third-Party Service Providers (IT services, legal advisors, auditors, banking partners)
  • Affiliated Companies and Investment Partners (when required for business purposes)

We do not sell, rent, or trade personal data.

7. International Data Transfers

If we transfer personal data outside the European Economic Area (EEA), we ensure adequate safeguards, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Transfers to jurisdictions with adequate data protection laws
  • Binding Corporate Rules (where applicable)

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, including legal, regulatory, and contractual obligations. Retention periods are determined by:

  • Luxembourg financial and tax regulations
  • Anti-Money Laundering (AML) requirements
  • Business needs and risk management policies

9. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

  • Right to Access – Request a copy of the data we hold about you.
  • Right to Rectification – Request corrections to inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”) – Request deletion of your data where legally applicable.
  • Right to Restrict Processing – Request limitations on how we process your data.
  • Right to Data Portability – Receive your data in a structured format and request its transfer.
  • Right to Object – Object to data processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent – Withdraw previously given consent at any time.

To exercise these rights, please contact us at contact@pithos.eu.

10. Security Measures

We implement industry-standard security measures to safeguard personal data, including:

  • Encryption & Secure Storage
  • Access Controls & Authentication
  • Regular Security Audits & Monitoring

Despite our best efforts, no online system is entirely secure. If you suspect unauthorized access, please notify us immediately.

11. Use of Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze site traffic. You can manage cookie preferences via your browser settings.

For more details, refer to our Cookie Policy.

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in regulations or business operations. The latest version will always be available on our website.

13. Contact Information

For any inquiries or data protection requests, contact our Data Protection Officer (DPO) at:

Pithos Capital GP Sàrl
Registered address: 19 rue Eugène Ruppert, L2453,  Luxembourg

Email: contact@pithos.eu

If you are unsatisfied with our response, you have the right to lodge a complaint with Luxembourg’s National Commission for Data Protection (CNPD):

Commission Nationale pour la Protection des Données (CNPD)
Website: https://cnpd.public.lu

Back