Privacy Policy
1. Introduction
This Privacy Policy aims to inform you about how advantAIge collects, uses, stores, and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and French Data Protection Act.
We are committed to protecting our users' privacy and treating their personal data transparently, securely, and confidentially.
Data Controller:
advantAIge
Sole proprietorship
Represented by: Cyril VU XUAN
Address: 46 Rue de la Semois, L-2533 Luxembourg
2. Personal Data Collected
2.1 Data Collected via Contact Form
When you contact us through our form, we collect the following information:
- First and last name: to identify you and personalize our exchanges
- Email address: to respond to you and send our communications
- Phone number: to contact you if necessary (optional)
- Company name: to understand your professional context (optional)
- Subject and message: to process your request
Legal basis: Your consent and execution of pre-contractual measures taken at your request.
2.2 Data Collected via Calendly
When you schedule an appointment through our Calendly scheduling tool, the following data is collected:
- First and last name
- Email address
- Appointment information: date, time, time zone
- Optional messages: additional information you choose to share
This data is also processed by Calendly in accordance with their own privacy policy. View Calendly's policy.
Legal basis: Your consent and execution of pre-contractual measures.
2.3 Cookies and Browsing Data
We use cookies and analytics tools to improve your experience on our site and understand how it is used:
Google Analytics 4 (GA4)
- Collection of anonymized browsing data
- Analysis of visitor behavior (pages visited, session duration, user journey)
- Approximate demographic data (country, language, device)
- Anonymized IP address
Microsoft Clarity
- Session recordings (mouse movements, clicks, scrolling)
- Heat maps
- User behavior analysis to improve UX
Google reCAPTCHA
- Anti-spam protection for the contact form
- Analysis of site interaction to detect automated behavior
- Technical data (IP address, cookies, site interactions)
Google's role: Google acts as a data processor for the reCAPTCHA service, in accordance with Google's Cloud Data Processing Addendum. Data is processed exclusively to provide the anti-spam protection service and is not used by Google for other purposes.
Legal basis: Your consent (non-essential cookies) and legitimate interest (cookies essential to site operation).
Cookie Management
You can modify your cookie preferences at any time through your browser settings:
3. Use of Data
Your personal data is used exclusively for the following purposes:
- Processing your requests: answer your questions, contact you back, organize appointments
- Sending marketing communications: newsletters, commercial offers, informative content (only with your consent)
- Improving our services: traffic analysis, user experience optimization, development of new services
- Compliance with legal obligations: accounting, tax management, responding to authority requests
We never sell, rent, or share your personal data with third parties for commercial purposes, except in the following cases:
- With your explicit consent
- To comply with a legal or regulatory obligation
- With service providers acting on our behalf (hosting, marketing tools) who are contractually required to protect your data
4. Retention Period
Your personal data is retained for a period of 360 days from our last contact or your last interaction with our services.
After this period, your data is automatically deleted from our systems, unless:
- You become a client: in this case, your data is retained in accordance with legal obligations (10 years for accounting documents)
- A legal obligation requires longer retention
- You have expressly consented to longer retention (e.g., newsletter subscription)
You can request early deletion of your data at any time by exercising your right to erasure (see section 6).
5. Data Security
We implement all appropriate technical and organizational measures to protect your personal data against:
- Unauthorized access
- Loss, alteration, or accidental disclosure
- Cyberattacks and data breaches
Security measures in place:
- SSL/TLS encryption: all communications between your browser and our site are encrypted (HTTPS)
- Anti-spam protection: reCAPTCHA to protect the contact form
- Secure hosting: our data is hosted with OVH, a certified GDPR-compliant host
- Restricted access: only authorized persons have access to personal data
- Regular backups: to prevent data loss
6. Your Rights (GDPR)
In accordance with GDPR, you have the following rights regarding your personal data:
6.1 Right of Access
You can obtain confirmation that we process your personal data and, where applicable, access this data and obtain information about its processing.
6.2 Right to Rectification
You can request correction of your personal data if it is inaccurate or incomplete.
6.3 Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data in certain cases (for example, if you withdraw your consent or if the data is no longer necessary).
6.4 Right to Restriction of Processing
You can request restriction of processing of your data in certain circumstances (for example, while we verify the accuracy of your data).
6.5 Right to Data Portability
You can receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another data controller.
6.6 Right to Object
You can object at any time to the processing of your personal data for commercial prospecting purposes (including profiling related to such prospecting).
6.7 Right to Withdraw Consent
When processing is based on your consent, you can withdraw it at any time. This withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
6.8 Right to Lodge a Complaint
If you believe your rights are not being respected, you can file a complaint with the French Data Protection Authority (CNIL):
- Website: www.cnil.fr
- Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- Phone: +33 1 53 73 22 22
How to Exercise Your Rights?
To exercise any of these rights, you can contact us at the following email address:
We will respond within a maximum of 1 month from receipt of your request. This period may be extended by 2 months in case of complexity or high number of requests.
For security reasons, we may ask you to prove your identity before processing your request.
7. Data Transfers Outside the EU
Some of our service providers (Google Analytics, Microsoft Clarity, Calendly) may be located outside the European Union, particularly in the United States.
These transfers are governed by appropriate safeguards:
- Standard contractual clauses approved by the European Commission
- Privacy Shield certification or equivalent mechanisms
- European Commission adequacy decision
For more information about these safeguards, you can contact us at:
8. Minors
Our services are not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or legal guardian and believe your child has provided us with personal data, please contact us so we can delete it.
9. Changes to Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices or legal and regulatory changes.
In case of substantial modification, we will inform you by email (if we have your email address) or through a visible notice on our website.
We encourage you to regularly consult this page to be aware of any modifications.
10. Contact
For any questions regarding this Privacy Policy or to exercise your rights, you can contact us:
- GDPR Email:
- Contact Form: Contact Page
- Postal Mail: advantAIge, 22 rue de la Gare, L-7535 Mersch, Luxembourg
Last updated: April 5, 2026