GDPR

Privacy policy

ThenewB pays particular attention to the protection of your personal data. This policy describes how we collect, use and protect your data, in compliance with the General Data Protection Regulation (EU 2016/679 — GDPR) and Luxembourg law of 1 August 2018.

Data controller

Data collected

We collect only data strictly necessary for the purposes described below:

• Voluntarily submitted contact data — surname, first name, email address, phone number, position, company — when you write to us directly by email or contact us through the website.
• Technical data — IP address, browser type, pages visited — for technical logging and site security.

No advertising tracking cookies nor behavioural analytics tools are deployed on this site. Should this change, a compliant consent banner would be deployed.

Purposes and legal basis

• Responding to your enquiries and business requests — legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
• Managing the contractual relationship when a consulting engagement is formalised — legal basis: performance of a contract.
• Complying with our legal obligations (accounting, tax, regulatory) — legal basis: legal obligation.
• Ensuring the security and proper operation of the website — legal basis: legitimate interest.

Retention period

• Prospect data and contacts that did not result in an engagement: 3 years from the last contact.
• Data related to an executed engagement: duration of the contractual relationship, extended by applicable limitation periods (accounting, tax, professional liability).
• Technical logs: 12 months maximum.

Recipients and subprocessors

Your data is processed exclusively by ThenewB. It may be shared with our subprocessors, strictly to the extent necessary to perform their services, under GDPR-compliant contractual arrangements:

• Website hosting: Netlify, Inc. (United States).
• Business email and productivity tools: providers selected by ThenewB under GDPR-compliant contracts.

No data is sold to third parties.

Transfers outside the European Union

The website is hosted by Netlify, Inc., a US-based company that may process certain technical data (IP address, server logs) on infrastructure located in the United States. Such transfers are framed by the European Commission's Standard Contractual Clauses (SCC 2021/914) and, where applicable, by certification under the EU–U.S. Data Privacy Framework. No other transfer outside the EU is made without appropriate safeguards.

Your rights

In accordance with the GDPR, you have the following rights over your data: access, rectification, erasure, restriction of processing, objection, portability, withdrawal of consent.

To exercise these rights, please contact us at Steve.seremes@thenewB.eu. A response will be provided within one month.

You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) or the competent authority of your country of residence.

Security

ThenewB implements appropriate technical and organisational measures to protect your data against loss, alteration or unauthorised access.

Update

This policy may be updated to reflect legal or organisational changes. Last update: April 2026.