Document version of 2 November 2026
This policy explains how L2M Investments S.à r.l. handles personal data collected through this website. The site is informational only: it has no forms, no accounts and no newsletter, so the data we handle is limited to what your browser sends when you visit.
Who we are
The controller of personal data collected through this website is L2M Investments S.à r.l., a private limited liability company registered in Luxembourg. The company acts as general partner and manager of L2M Global HY Fund SCSp, a special limited partnership (société en commandite spéciale) established in Luxembourg, to which this website relates.
| Controller | L2M Investments S.à r.l. |
| Legal form | Société à responsabilité limitée, Luxembourg |
| RCS Luxembourg | B312969 |
| Registered office | 2 Place de Strasbourg, L‑2526 Luxembourg |
| Fund managed | L2M Global HY Fund SCSp |
| Contact for data protection | info@L2Mfund.com |
Based on an assessment of our processing activities, we have concluded that we are not required to appoint a data protection officer under Article 37 of the GDPR. Write to the address above with any question about this policy or about your personal data.
What we collect
We do not ask you for personal data on this website. There is no contact form, no registration, no login and no newsletter. The only data we handle is what your browser transmits automatically when it requests a page, and what our hosting provider records in order to serve and secure the site.
| Data | How it arises |
|---|---|
| IP address | Sent by your browser with every request; recorded in server logs |
| Browser type, version and language | Sent in the request headers |
| Operating system and device type | Sent in the request headers |
| Date and time of the request, pages viewed | Recorded in server logs |
| Referring website, where applicable | Sent in the request headers |
This technical data is transmitted automatically by your browser whenever it requests a page. It is necessary to deliver the website to you, and if it is not transmitted the site cannot be displayed. You are under no statutory or contractual obligation to provide it, and we ask you for no other personal data on this website.
We do not seek to identify individual visitors from routine website logs, and we do not combine those logs with other sources to build visitor profiles. We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 of the GDPR.
If you write to us at the email address in this policy, we hold your message and your address and use them only to answer you.
Why we use it and on what basis
We process the data described above for a small number of narrow purposes, each with its own legal basis under Article 6 of the GDPR.
| Purpose | Legal basis |
|---|---|
| Delivering the website to your browser and keeping it working | Legitimate interest (Article 6(1)(f)): operating a functioning website |
| Protecting the site against attack, abuse and technical failure | Legitimate interest (Article 6(1)(f)): network and information security |
| Answering an enquiry you send us | Legitimate interest (Article 6(1)(f)): responding to correspondence. Where your enquiry concerns steps you have asked us to take with a view to entering into a contract, Article 6(1)(b) |
Where we rely on legitimate interest, we have carried out and recorded an assessment weighing that interest against your rights, and concluded that the processing is limited, expected by visitors to any website, and not intrusive. You may object to it at any time, as described under Your rights.
Cookies
This website does not use cookies or similar technologies, such as local storage or tracking pixels. It does not load content from third parties: there is no analytics, advertising, social media or external font service, and all files are served from our own hosting account.
If we introduce cookies in future, we will update this policy before doing so and, where the law requires it, ask for your consent first.
Who else sees the data
We do not sell personal data and we do not share it for anyone else's marketing.
The website is hosted by Hostinger, which processes the data described above on our instructions as a processor under Article 28 of the GDPR. Beyond that, we disclose data only to our professional advisers where they need it, and to a public authority or court where the law requires it.
The website is served from a data centre in Lithuania, within the European Economic Area. Our hosting provider may use sub-processors located outside the EEA; where personal data is transferred outside the EEA, the transfer is protected by the European Commission’s Standard Contractual Clauses.
How long we keep it
We keep personal data only as long as it serves the purpose it was collected for, or as long as the law requires.
| Data | Retention |
|---|---|
| Server logs | Kept by our hosting provider for a limited period for security and operational purposes. Logs are available to us in the hosting control panel for 7 days, and we do not keep separate copies |
| Correspondence about an enquiry we have answered and closed | For as long as needed to deal with the matter |
| Correspondence relating to an investment or a contractual relationship | For as long as needed to deal with the matter, and up to 5 years afterwards |
Where a particular record is subject to a statutory retention obligation under Luxembourg law, including anti-money-laundering record-keeping requirements, that period applies to that record instead. Those obligations do not apply to routine website data.
Your rights
Under the GDPR you have the following rights in relation to your personal data.
- Access — to be told whether we hold data about you and to receive a copy of it
- Rectification — to have inaccurate data corrected and incomplete data completed
- Erasure — to have your data deleted where one of the grounds in Article 17 applies
- Restriction — to have our use of your data limited in the circumstances set out in Article 18, for example while a dispute about its accuracy is resolved
- Objection — to object, on grounds relating to your particular situation, to processing based on our legitimate interests
- Portability — to receive data you provided in a structured, machine-readable format, where the processing is based on consent or on a contract and carried out by automated means. Most of the processing described in this policy rests on legitimate interests, so this right will not usually apply to it
- Withdrawal of consent — where processing is based on your consent, to withdraw it at any time without affecting what was done beforehand
To exercise any of these, write to us at the address in Who we are. We will respond within one month. That period may be extended by a further two months where a request is complex, in which case we will tell you within the first month. We may ask you for information to confirm your identity before we act.
Complaints
You have the right to lodge a complaint with a competent supervisory authority, in particular in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement. If you would like us to look at the matter first, we are glad to, but you do not have to raise it with us before complaining.
The supervisory authority in Luxembourg is:
Commission nationale pour la protection des données (CNPD) at 15 Boulevard du Jazz, L‑4370 Belvaux, Luxembourg. Website address: www.cnpd.lu.
Changes and contact
We may update this policy if the website changes or if the law requires it. The date at the top shows when it was last revised. Where a change materially affects your rights, we will make that clear rather than leaving you to spot it.
Questions about this policy, or about personal data we hold, go to info@L2Mfund.com, or by post to L2M Investments S.à r.l., 2 Place de Strasbourg, L‑2526 Luxembourg.