Privacy Policy
Last updated: January 12, 2026
1. Introduction and Commitment
Deepy (hereinafter "we", "our" or "Deepy") attaches great importance to the protection of your personal data and to respecting your privacy.
This privacy policy aims to inform you in a clear and transparent manner about how we collect, use, protect and retain your personal data when you visit our website deepy.lu.
This policy complies with the General Data Protection Regulation (GDPR) in force in the European Union and Luxembourg laws on data protection.
2. Data Controller
The controller of your personal data is:
DP Consulting S.àr.l.-S
Limited liability company - Simplified company
6C Porte de France
L-4360 Esch-sur-Alzette Belval
Luxembourg
RCS Luxembourg: B238129
Email: contact@deepy.lu
For any questions regarding the protection of your personal data or to exercise your rights, you can contact us at the following email address: contact@deepy.lu
3. Personal Data Collected
We only collect personal data necessary for the purposes described below:
3.1. Data collected via the contact form
- First and last name
- Email address
- Company (optional)
- Subject and message content
- Date and time of submission
3.2. Browsing data
- IP address
- Browser type
- Pages visited
- Date and time of visit
- Session duration
- Traffic source
Note: This data is collected automatically for technical, security and traffic analysis purposes via Google Analytics.
3.3. Data collected via Calendly (appointment scheduling)
When you schedule an appointment via our Calendly widget, the following data is collected and processed by Calendly, Inc.:
- First and last name
- Email address
- Selected appointment date and time
- Time zone
- Additional information (if you provide any)
Note: This data is processed in accordance with Calendly's privacy policy and Calendly's terms of use.
4. Purpose and Legal Basis
| Purpose | Legal Basis (GDPR) |
|---|---|
| Respond to your contact requests | Consent (Art. 6.1.a) or Legitimate interest (Art. 6.1.f) |
| Appointment management via Calendly | Consent (Art. 6.1.a) or Contract execution (Art. 6.1.b) |
| Analyze website traffic | Legitimate interest (Art. 6.1.f) |
| Ensure website security | Legitimate interest (Art. 6.1.f) |
| Improve our services | Legitimate interest (Art. 6.1.f) |
5. Data Recipients
Your personal data is not sold, rented or transferred to third parties for commercial purposes.
They may be transmitted to the following categories of recipients:
- Authorized DP Consulting personnel: To process your requests
- Technical service providers:
- Website host: DigitalOcean, LLC (location: United States)
- Analytics tool: Google Analytics (Google LLC, United States)
- Appointment scheduling: Calendly, Inc. (location: United States) - Privacy Policy
- Competent authorities: In case of legal obligation or court order
All our service providers are bound by confidentiality obligations and can only use your data for the purposes we have defined.
6. Data Transfers outside the EU
Your personal data is primarily stored within the European Union.
In some cases, transfers may take place to third countries (example: United States for certain services). In this case, we ensure that appropriate safeguards are in place in accordance with the GDPR:
- Standard contractual clauses approved by the European Commission
- Privacy Shield certification (if applicable)
- Adequacy decisions of the European Commission
7. Retention Period
We retain your personal data only for the period necessary for the purposes pursued:
- Contact form: 3 years from the last interaction
- Connection logs: 12 months maximum (legal security obligation)
- Analytical cookies: 13 months maximum
After these periods expire, your data will be deleted or anonymized irreversibly.
8. Your Rights
In accordance with the GDPR, you have the following rights concerning your personal data:
Right of Access
Obtain a copy of your data (Art. 15)
Right to Rectification
Correct inaccurate data (Art. 16)
Right to Erasure
Request deletion of your data (Art. 17)
Right to Restriction
Limit processing of your data (Art. 18)
Right to Data Portability
Receive your data in a structured format (Art. 20)
Right to Object
Object to processing (Art. 21)
How to exercise your rights?
To exercise any of these rights, contact us by email at contact@deepy.lu specifying:
- Your identity (name, email)
- The right you wish to exercise
- If necessary, proof of identity
We undertake to respond within a maximum of 1 month from receipt of your request.
9. Right to Lodge a Complaint
If you believe that your rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority:
Commission Nationale pour la Protection des Données (CNPD)
1, avenue du Rock'n'Roll
L-4361 Esch-sur-Alzette
Luxembourg
Phone: (+352) 26 10 60 - 1
Email: info@cnpd.lu
Website: cnpd.public.lu
10. Data Security
We implement appropriate technical and organizational measures to ensure the security of your personal data, including:
- HTTPS/SSL encryption for all communications
- Secure hosting with regular backups
- Restricted access to data by authorized personnel only
- Regular security updates of our systems
- Monitoring and intrusion detection
Despite these measures, no data transmission over the Internet can be 100% guaranteed. We encourage you to take your own precautions to protect your data.
11. Policy Modifications
We reserve the right to modify this privacy policy at any time, in particular to reflect changes in our practices or regulatory changes.
Any modification will be published on this page with a new "Last updated" date. We encourage you to consult this page regularly.
In case of substantial modifications, we will inform you by email (if we have your address) or via a visible notification on our site.
Any questions?
Our team is available to answer any questions about your personal data or the use of our site.
Contact us