← Back to home

The agency · Our services · Our team · Portfolio · Expertise · Contact

Privacy Policy

Last updated: July 22, 2026

This policy explains how TAKANEO collects, uses, and protects your personal data when you visit www.takaneo.lu or get in touch with us. We are committed to processing your data in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Luxembourg law of August 1^st, 2018 on the protection of individuals with regard to the processing of personal data.

1. Data controller

The controller of your data is:

TAKANEO S.à r.l.
3, rue de Steinfort — L-8476 Eischen, Luxembourg
R.C.S. Luxembourg: B173702 — VAT: LU25851458
Email: info@takaneo.com — Tel. : +352 27 91 92 92

TAKANEO has not appointed a Data Protection Officer (DPO). If you have any questions regarding your personal data, you can contact us using the details above.

2. Scope and legal framework

This policy applies to all data processing carried out by TAKANEO in connection with its website, forms, communications, and its relationship with clients and prospects. It is based in particular on the GDPR (Regulation (EU) 2016/679), the Luxembourg law of August 1^st, 2018 organizing the National Commission for Data Protection (CNPD) and implementing the GDPR, as well as the amended law of May 30, 2005 on the protection of privacy in the electronic communications sector and the CNPD guidelines on cookies and trackers.

3. Data we collect

Depending on how you interact with us, we may collect the following categories of data:

• Identification and contact data: last name, first name, email address, phone number, company, and the content of your message when you fill in our contact form or write to us.
• Comment data: if you leave a comment on the blog — name, email address, comment content, IP address, and user agent (browser), for spam detection purposes.
• Customer and billing data: information required to manage our services and prepare accounting documents.
• Browsing and technical data: IP address, browser and device type, pages viewed, date and time of connection, collected via server logs and cookies.
• Audience measurement and advertising data: traffic statistics and data related to advertising campaigns, collected via trackers and only with your consent (see §5).

We do not collect so-called “sensitive” data (health, opinions, orientation, etc.) and we invite you not to provide any via our forms.

4. Purposes and legal bases for processing

We only process your data for specific purposes, each based on a legal basis provided for in Article 6 of the GDPR:

• Responding to your requests sent via the contact form or by email — pre-contractual measures / legitimate interest (Art. 6(1)(b) and (f)).
• Managing the customer relationship and delivering our services — performance of a contract (Art. 6(1)(b)).
• Publishing and moderating blog comments — legitimate interest (Art. 6(1)(f)).
• Measuring audience and improving the site (Google Analytics) — consent (Art. 6(1)(a)).
• Targeted advertising and retargeting (Meta, LinkedIn) — consent (Art. 6(1)(a)).
• Sending commercial communications, where applicable — consent (Art. 6(1)(a)).
• Ensuring site security, preventing spam and fraud — legitimate interest (Art. 6(1)(f)).
• Complying with our legal, accounting, and tax obligations — legal obligation (Art. 6(1)(c)).

Where processing is based on your consent, you may withdraw it at any time (see §5 and §10). Where it is based on our legitimate interest, you may object on grounds relating to your particular situation.

5. Cookies and trackers

A cookie is a small file placed on your device when you visit a website. We use several categories of trackers:

• Strictly necessary cookies: essential for the operation of the site (security, saving your display preferences and your cookie choices). They do not require your consent.
• Audience measurement cookies: Google Analytics / Google Tag Manager, to understand how the site is used. Subject to your consent.
• Marketing and advertising cookies: Meta pixels (Facebook / Instagram), LinkedIn, and other advertising trackers. Subject to your consent.

In accordance with CNPD guidelines, non-essential cookies are only placed after your prior, free, specific, and informed consent, expressed by a positive action via our consent banner. You can accept or refuse these cookies at the same level, choose category by category, and change your choice at any time. Simply continuing to browse does not constitute consent, and no boxes are pre-ticked. The lifespan of trackers does not exceed 13 months and your consent is requested again at least every 12 months. You can change your preferences at any time via the “Manage cookies” link available on the site, or configure your browser to block or delete cookies.

6. Recipients and processors

Your data is processed by authorized TAKANEO staff. It may also be shared with service providers (processors within the meaning of Article 28 of the GDPR) acting on our behalf and providing compliance guarantees, including:

• our hosting provider, Diogenius (Chemin des Carriers 59, 1370 Saint-Remy-Geest, Belgium), whose data centers are located in Belgium and France, within the European Union;
• our email, maintenance, and IT security providers;
• the audience measurement and advertising tools mentioned in §5 (Google, Meta, LinkedIn);
• spam protection and avatar management services (for example Akismet, Gravatar — Automattic Inc.);
• our advisors (accountant, lawyer) and public authorities when required by law.

We do not sell or rent your personal data to third parties.

7. Transfers outside the European Union

Our website is hosted within the European Union (Belgium and France). However, some of our service providers (notably Google, Meta, and LinkedIn) may process data outside the European Economic Area, in particular in the United States. These transfers are governed by appropriate safeguards provided for by the GDPR: an adequacy decision (including the EU-U.S. Data Privacy Framework) or the European Commission’s standard contractual clauses, together with additional security measures. A copy of these safeguards can be obtained upon request.

8. Retention period

We only keep your data for as long as necessary for the purposes described, then we delete or anonymize it:

• Requests via the form / prospects: 3 years from the last contact.
• Customer data (contracts, billing): for the duration of the relationship, then 10 years (accounting and tax obligations).
• Blog comments: until they are deleted at your request.
• Consent-based cookies and trackers: 13 months maximum; consent renewed at least every 12 months.
• Connection logs: 6 to 12 months for security purposes.

9. Data security

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure, or alteration: encrypted communications (HTTPS), access management, backups, and security updates. Our hosting provider operates in ISO 27001-certified data centers. In the event of a data breach likely to result in a high risk to your rights, we will notify the CNPD and, where applicable, the individuals concerned, within the time limits provided for by the GDPR.

10. Your rights

In accordance with the GDPR, you have the following rights regarding your data:

• Right of access: obtain confirmation that your data is being processed and receive a copy of it.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to object to processing based on legitimate interest and, at any time, to marketing.
• Right to data portability of the data you have provided to us.
• Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to define instructions regarding what happens to your data after your death.

To exercise these rights, write to us at info@takaneo.com or by post to the address indicated in §1, providing proof of identity if necessary. We respond within one month, extendable by two months in the case of a complex request.

11. Complaint to the CNPD

If you believe that the processing of your data is not compliant with the regulations, you have the right to lodge a complaint with the Luxembourg supervisory authority:

Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz — L-4370 Belvaux, Luxembourg
Tel.: (+352) 26 10 60 -1 — Website: cnpd.public.lu

12. Automated decision-making and profiling

We do not make any decision producing legal effects concerning you based solely on automated processing. Advertising trackers may involve profiling for measurement and targeting purposes; this only takes place with your consent and has no significant legal effect on you.

13. Protection of minors

Our site is intended for a professional, adult audience. We do not knowingly collect data concerning minors under the age of 16. If you believe that a minor has provided us with data, contact us so that we can delete it.

14. Changes to this policy

We may update this policy to reflect regulatory or operational changes. Any new version will be published on this page with its update date. We invite you to consult it regularly.