Luka Capital

Privacy policy

Last updated · 2026-05

This policy describes how Luka Capital processes the personal data you provide through this site, contact forms or the investor portal. We comply with Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).

  1. 01

    Data controller

    Luka Capital, S.L., registered office at Velázquez 50, 28001 Madrid (Spain). Contact email: privacy@lukacapital.com.

  2. 02

    Data we collect

    Identification data (name, email, phone) when you contact us voluntarily. Additional professional and financial data when you access the investor portal, under the signed mandate.

  3. 03

    Purpose and legal basis

    We process your data to respond to your request, manage the contractual relationship or, on the portal, execute the investment mandate. The legal basis is your consent (art. 6.1.a GDPR) or contract performance (art. 6.1.b).

  4. 04

    Retention

    We retain data for the duration of the contractual relationship and the applicable statutory term (up to 10 years for tax and anti-money-laundering purposes).

  5. 05

    Recipients

    We do not transfer data to third parties except by legal obligation or operational necessity (accredited providers of hosting, banking, tax advisory). All processors sign a data-processing agreement under art. 28 GDPR.

  6. 06

    Your rights

    You may exercise at any time your rights of access, rectification, erasure, objection, restriction and portability by writing to privacy@lukacapital.com. You may also lodge a complaint with Spain's AEPD (www.aepd.es).

  7. 07

    Security measures

    We apply reasonable technical and organisational measures to protect your data (encryption in transit, access control, encrypted backups).