Privacy policy

The controller of your personal data is:

For any questions regarding the protection of your personal data or to exercise your rights, you can contact us at the following email address: contact@deepy.lu

We only collect personal data necessary for the purposes described below:

3.1. Data collected via the contact form

• First and last name
• Email address
• Company
• Subject and message content
• Date and time of submission

3.2. Browsing data

• IP address
• Browser type
• Pages visited
• Date and time of visit
• Session duration
• Traffic source
• Interactions with the site (buttons clicked, sections viewed, quick check steps, questions opened)

Note: The IP address and browser type are processed automatically for technical and security purposes. The other data is collected by Google Analytics, only if you have accepted audience measurement.

3.3. Data collected via Calendly (appointment scheduling)

When you schedule an appointment via our Calendly widget, the following data is collected and processed by Calendly, Inc.:

• First and last name
• Email address
• Selected appointment date and time
• Time zone
• Additional information (if you provide any)

Note: This data is processed in accordance with Calendly's privacy policy and Calendly's terms of use.

3.4. Data collected via the quick check

No data is sent while you answer the questions. When you ask to be contacted or book a call from the result, the following data is sent to us:

• Your answers to the five questions and the result derived from them
• Email address (if you ask to be contacted)
• Phone number (optional)
• Date and time of the request

When you book a call, a quick check reference is attached to your Calendly appointment so that the consultant can find your answers.

Your personal data is not sold, rented or transferred to third parties for commercial purposes.

They may be transmitted to the following categories of recipients:

• Authorized DP Consulting personnel: To process your requests
• Technical service providers:
  • Website host: DigitalOcean, LLC (company established in the United States; server located in Germany)
  • Analytics tool: Google Analytics (Google LLC, United States)
  • Appointment scheduling: Calendly, Inc. (location: United States) - Privacy Policy
  • Protecting the forms against spam: Google reCAPTCHA (Google LLC, United States)
  • Receiving messages sent through the forms: Discord, Inc. (United States)
• Competent authorities: In case of legal obligation or court order

All our service providers are bound by confidentiality obligations and can only use your data for the purposes we have defined.

Your personal data is primarily stored within the European Union.

In some cases, transfers may take place to third countries (example: United States for certain services). In this case, we ensure that appropriate safeguards are in place in accordance with the GDPR:

• Standard contractual clauses approved by the European Commission
• Certification under the EU-U.S. Data Privacy Framework (if applicable)
• Adequacy decisions of the European Commission

We retain your personal data only for the period necessary for the purposes pursued:

• Contact form and quick check: 3 years from the last interaction
• Connection logs: 12 months maximum (legal security obligation)
• Analytical cookies: 13 months maximum

After these periods expire, your data will be deleted or anonymized irreversibly.

In accordance with the GDPR, you have the following rights concerning your personal data:

• Right of Access: Obtain a copy of your data (Art. 15)
• Right to Rectification: Correct inaccurate data (Art. 16)
• Right to Erasure: Request deletion of your data (Art. 17)
• Right to Restriction: Limit processing of your data (Art. 18)
• Right to Data Portability: Receive your data in a structured format (Art. 20)
• Right to Object: Object to processing (Art. 21)

How to exercise your rights?

To exercise any of these rights, contact us by email at contact@deepy.lu specifying:

• Your identity (name, email)
• The right you wish to exercise
• If necessary, proof of identity

We undertake to respond within a maximum of 1 month from receipt of your request.

If you believe that your rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority:

We implement appropriate technical and organizational measures to ensure the security of your personal data, including:

• HTTPS/SSL encryption for all communications
• Secure hosting with regular backups
• Restricted access to data by authorized personnel only
• Regular security updates of our systems
• Monitoring and intrusion detection

Despite these measures, no data transmission over the Internet can be 100% guaranteed. We encourage you to take your own precautions to protect your data.

We reserve the right to modify this privacy policy at any time, in particular to reflect changes in our practices or regulatory changes.

Any modification will be published on this page with a new "Last updated" date. We encourage you to consult this page regularly.

In case of substantial modifications, we will inform you by email (if we have your address) or via a visible notification on our site.