Privacy Policy
Last updated: 06.08.2026. How aigentcy S.A. collects, uses and protects your personal data, and the rights you have under the GDPR.
Table of contents
1/ Controller
Responsible for your data
aigentcy S.A.12, rue de Flaxweiler
L-6776 Grevenmacher
Luxembourg
- General email
- info@aigentcy.lu
- Data protection contact
- privacy@aigentcy.lu
Full company details are available in our Imprint.
2/ What data we collect and why
2.1/ Contact form (aigentcy.lu)
When you submit our contact form we collect:
- Name
- Email address
- Phone number (optional)
- Message text (optional)
- Voice message recording (optional)
Purpose: to respond to your enquiry and follow up on potential business.
Legal basis: Article 6(1)(b) GDPR (steps prior to entering a contract) or Article 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Recipients: our internal sales and support team. The data is stored in our CRM, Pipedrive (see section 4).
Retention: for the duration of the business relationship plus 3 years (see section 6).
Plain english
If you write to us through the form, we keep what you send so we can reply and follow up. Only your name and email are required — phone, message and voice recording are up to you.
2.2/ Server log files
When you visit aigentcy.lu, our hosting provider may automatically record technical access data (for example IP address, browser type, date and time of access, referring page) in server log files.
Purpose: to ensure the technical operation and security of the website.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in stable and secure operation).
Retention: 7 days (see section 6). Further details are set out in the privacy notice of hosting.de.
3/ Fonts and other third-party resources
This website does not load fonts or other resources from third-party servers; all assets are hosted locally. The web fonts used on this site ("Geist Sans" and "Exo 2", both licensed under the SIL Open Font License) are served from our own hosting environment, so no font request transmits your IP address to an external provider.
The site also sets no cookies, uses no local storage, and loads no analytics, advertising or tracking scripts. External services are only contacted if you actively follow a link to them.
Plain english
Everything you see on this site comes from our own servers — fonts included. Nothing is fetched from Google or any other outside service, and no cookies or trackers are set.
4/ Data processors and recipients
We use the following processors, each engaged under a data processing agreement in accordance with Article 28 GDPR:
Pipedrive (CRM)
Used to manage contacts, leads and enquiries submitted through our contact form.
hosting.de GmbH
Our hosting provider. Hosts the website and processes the server log files described in section 2.2.
No other recipients receive personal data when a page is loaded (see section 3). We do not sell personal data, and we do not share it with third parties for advertising purposes.
5/ International transfers
Of the processors we engage, only Pipedrive may involve transfers of personal data outside the EU/EEA — for example where Pipedrive group companies or subprocessors are located outside the EU/EEA. Such transfers are covered by the transfer mechanisms set out in Pipedrive’s data processing agreement, including the EU Standard Contractual Clauses where required.
Our hosting provider, hosting.de GmbH, stores data within the European Union.
Plain english
Your enquiry data lives in our CRM, which may reach servers outside Europe under standard EU safeguards. Website hosting stays in the EU, and simply visiting the site sends nothing abroad.
6/ Storage periods
We keep personal data only for defined periods, based on the category of data:
- Contact form enquiries without a business relationship
- 12 months after the last communication.
- Contact form data and CRM records in Pipedrive
- Where there is a business relationship or an active sales opportunity: for the duration of the business relationship or sales process, plus 3 years after the last meaningful contact or the end of the business relationship.
- Voice message recordings
- 12 months after the last communication if no business relationship follows; otherwise for the duration of the business relationship plus 3 years.
- Server log files
- 7 days, unless longer retention is required to investigate a security incident or to establish, exercise or defend legal claims.
7/ Your rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15)
- Have inaccurate data rectified (Art. 16)
- Have your data erased (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
To exercise these rights, contact us at privacy@aigentcy.lu.
You also have the right to lodge a complaint with the Luxembourg data protection authority:
Supervisory authority
Commission nationale pour la protection des données (CNPD)15, Boulevard du Jazz
L-4370 Belvaux
Luxembourg
cnpd.public.lu