Privacy notice

This notice describes how VieKey Consulting handles personal data in connection with this website and with correspondence. The short version: this site sets no cookies, runs no analytics, and stores nothing about your visit.

Last updated: July 2026.

1. Controller

The controller for the processing described in this notice is Vie Key Consulting S.à r.l., 16, rue Glesener, L-1630 Luxembourg, registered with the Luxembourg Trade and Companies Register under number B 212970 (the “practice”, “we”). You can reach us at contact@viekey.eu.

2. What this site does not do

This website sets no cookies of any kind — functional, analytical, or advertising. It uses no analytics service, embeds no third-party trackers or social media components, stores no identifier in your browser (no local storage, no session storage), and uses no fingerprinting techniques. The only geolocation performed is the server-side country inference described in section 3, which uses a database held locally on our own server and contacts no external service. There is no consent banner because there is nothing to consent to.

3. Page adaptation based on the link you followed

The home page can adapt its emphasis — the introductory line and the ordering of the featured notes — to the context you likely arrived from. The adaptation is performed on our server at the moment the page is requested, using only signals already present in the ordinary page request: the query parameters of the link you followed (for example a utm_persona or utm_source tag in a campaign link), the domain of the referring page as transmitted by your browser, your explicit language selection, and the country — not the precise location — inferred from your IP address using a geolocation database held locally on our server. No third-party service is contacted for any of this.

These signals are used transiently, in memory, to select which pre-built version of the page to serve, and are then discarded. They are not stored, not logged by the adaptation process, not combined with any other data, and give rise to no identifier or profile. The IP address is used only to derive a two-letter country code and is referenced nowhere else; personalised responses are served with headers instructing intermediaries not to cache them. A subsequent visit without such context shows the default page. In our assessment this processing, to the extent it constitutes processing of personal data at all, rests on our legitimate interest in presenting relevant content (Article 6(1)(f) GDPR) and involves no storage of, or access to, information on your device.

4. Server logs

The web server hosting this site records standard access logs, which typically include the IP address of the requesting device, the date and time of the request, the resource requested, the referring URL, and the browser's user-agent string. These logs are generated by the hosting infrastructure for security and operational purposes — detecting abuse, diagnosing faults — on the basis of our legitimate interest in operating the site securely (Article 6(1)(f) GDPR). Logs are not used to identify visitors, are not enriched or cross-referenced with other data, and are retained for a short rolling period consistent with the hosting provider's standard configuration, generally not exceeding a few weeks, after which they are deleted or overwritten.

5. Correspondence by email

If you write to us, we process the personal data contained in your message — typically your name, email address, and whatever you choose to tell us — in order to respond and, where the exchange leads to an engagement, to perform it. The legal basis is our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR) and, where applicable, steps taken at your request prior to entering into a contract and the performance of that contract (Article 6(1)(b) GDPR).

Enquiry correspondence that does not lead to an engagement is generally retained for up to twenty-four months and then deleted, unless a longer period is required for the establishment, exercise, or defence of legal claims. Engagement-related correspondence and files are retained for the duration of the engagement and thereafter for the periods required by applicable Luxembourg legal, tax, and professional obligations, generally up to ten years.

6. Recipients and transfers

We do not sell, rent, or share personal data for marketing purposes. Data may be processed on our behalf by the providers supplying our hosting and email infrastructure, under arrangements consistent with Article 28 GDPR. We do not transfer personal data to recipients outside the European Economic Area; should a service provider's processing involve such a transfer, it would take place only under an appropriate safeguard within the meaning of Chapter V GDPR, such as standard contractual clauses.

7. Your rights

Subject to the conditions set out in the GDPR, you have the right to request access to the personal data we hold about you, rectification of inaccurate data, erasure, restriction of processing, and portability, and the right to object to processing based on legitimate interests. To exercise any of these rights, write to contact@viekey.eu. You also have the right to lodge a complaint with a supervisory authority; in Luxembourg this is the Commission nationale pour la protection des données (CNPD).

8. Changes to this notice

If the way this site or the practice handles personal data changes — for example, if a contact form or newsletter is introduced — this notice will be updated before the change takes effect, and the date above revised accordingly.