Privacy policy
Last updated: 21 September 2026
NeuroWave-AI takes the protection of your personal data seriously. This page explains what data is processed when you visit www.neurowave-ai.com or contact us, and what rights you have under Regulation (EU) 2016/679 (GDPR).
1. Data controller
- Entity
- NeuroWave-AI S.à r.l.-S, société à responsabilité limitée simplifiée
- RCS Luxembourg
- B306639
- Address
- 6, rue du Parc, L-3542 Dudelange, Luxembourg
- info@neurowave-ai.com
- Phone
- +352 691 571 580
No data protection officer (DPO) has been appointed: the nature and volume of our processing activities do not require one under Article 37 GDPR. Any question about your data can be sent directly to the contact above.
2. What this site does not do
This is a static brochure site. Specifically:
- it sets no cookies, neither technical nor advertising;
- it uses no localStorage, no sessionStorage and no other storage on your device;
- it embeds no analytics (no Google Analytics, no advertising pixel);
- it makes no request to any third party. Web fonts are hosted on our own server, so your IP address is never disclosed to an external provider.
That is why no consent banner is shown: there is nothing to consent to.
3. Contact form
The form on the home page sends no data to any server. It composes a message inside your browser, then opens your own mail application with that message pre-filled. You stay in control of the sending; until you press “Send” in your mail app, we receive nothing.
Data processed when you write to us
- Data
- Name, company (optional), email address, subject of the request and the content of your message.
- Purpose
- Answering your request and, where relevant, preparing a commercial proposal.
- Legal basis
- Article 6(1)(b) GDPR — pre-contractual steps taken at your request; failing that, Article 6(1)(f) — our legitimate interest in responding to enquiries addressed to us.
- Recipients
- Only the NeuroWave-AI staff handling your request, and our email provider acting as a processor.
- Retention
- 3 years from the last contact, then deletion. Exchanges leading to a contract are kept for the statutory retention periods applicable to commercial and accounting records.
- Transfers
- We carry out no transfer outside the European Economic Area.
4. Hosting server logs
This site is hosted in Germany, within the European Union, by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen), acting as a processor within the meaning of Article 28 GDPR. Like any web server, it records connection data for technical and security reasons: IP address, date and time of the request, page requested, browser type.
- Purpose
- Keeping the site running, secure and available, and detecting abuse.
- Legal basis
- Article 6(1)(f) GDPR — legitimate interest in the security of our systems.
- Retention
- 14 days, then automatic deletion.
- Transfers
- None: the data stays within the European Union.
5. Training and professional services
When you become a client (training, recruitment, advisory work), we process the data needed to perform the contract: professional contact details, billing information, attendance lists for training sessions. The legal basis is Article 6(1)(b) GDPR (performance of the contract) and, for accounting obligations, Article 6(1)(c) (legal obligation). This data is kept for the statutory retention period applicable to accounting records.
6. Applications and recruitment
If you send us a CV or an application, the data it contains is processed in order to introduce you to our recruiting clients, on the basis of your consent (Article 6(1)(a) GDPR) or of pre-contractual steps. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand. Unsuccessful applications are kept for a maximum of 2 years, then deleted.
7. Your rights
Under Articles 15 to 22 GDPR, you have the following rights:
- Access — obtain confirmation that your data is processed and receive a copy of it;
- Rectification — have inaccurate or incomplete data corrected;
- Erasure — request deletion of your data where the conditions of Article 17 are met;
- Restriction — request that processing be temporarily frozen;
- Portability — receive the data you provided to us in a structured, machine-readable format;
- Objection — object to processing based on our legitimate interest, on grounds relating to your particular situation;
- Withdrawal of consent — at any time, where processing is based on your consent.
To exercise these rights, write to info@neurowave-ai.com. We reply within one month, extendable by two months for complex requests. Proof of identity may be requested where there is reasonable doubt about the identity of the person making the request.
8. No automated decision-making
No decision producing legal effects concerning you is taken solely on the basis of automated processing, either by this site or in the course of our recruitment services. The artificial intelligence tools we use assist our consultants; they do not decide in their place.
9. Lodging a complaint
If you consider that the processing of your data infringes the GDPR, you may lodge a complaint with the Luxembourg supervisory authority:
- Authority
- Commission nationale pour la protection des données (CNPD)
- Address
- 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg
- Website
- cnpd.public.lu
You may also contact the supervisory authority of your own member state of residence.
10. Changes
This policy may be updated to reflect changes in our processing activities or in the applicable regulation. The date of the last update is shown at the top of this page.