Legal notice
This notice is published in accordance with the amended Law of 14 August 2000 on electronic commerce. The naia.lu website is published by Takaneo Group Sarl, which operates the naia brand.
Website publisher
Takaneo Group Sarl, a private limited liability company with share capital of €12,500.
Registered office: 3, rue de Steinfort, L-8476 Eischen, Luxembourg.
Luxembourg Trade and Companies Register: B173702. VAT number: LU25851458. Business licence: 100322.
Phone: +352 27 91 92 92. Email: hello@naia.lu.
Publication director: the manager of Takaneo Group Sarl, as legal representative.
Hosting
The website and its forms are hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States (cloudflare.com).
The data you send us is stored by Supabase, in a data centre in Ireland, within the European Union.
Intellectual property
The elements that make up the website (structure, text, graphics, logos, pictograms, photos, animations, sounds, layout, code) belong to Takaneo Group Sarl or its partners, and are protected by copyright and intellectual property law. Reproducing, displaying, modifying, publishing or adapting them, in whole or in part, by any means whatsoever, is prohibited without our prior written permission.
The logos of the companies and organisations mentioned on the website remain the property of their owners.
Liability
We take care to keep the information published on the website accurate and up to date, but cannot certify that it is free from errors or omissions. It is given for information only and has no contractual value. The calculator results, in particular, are orders of magnitude based on your answers, not a guaranteed outcome.
Takaneo Group Sarl cannot be held liable for any direct or indirect damage resulting from access to the website, its use or the inability to access it.
Links to other websites
The website contains links to third-party websites, such as Guichet.lu or LinkedIn. We have no control over these websites and are not responsible for their content, practices or privacy policies.
You may link to naia.lu, provided the link does not harm the image of naia or Takaneo. We may ask for any link we consider inappropriate to be removed.
Personal data and cookies
How we process your personal data is described in our privacy policy, and our use of cookies on the Cookies page, in accordance with the General Data Protection Regulation (GDPR) and the Luxembourg Law of 1 August 2018.
Governing law
This legal notice is governed by Luxembourg law. Any dispute relating to the use of the website falls under the exclusive jurisdiction of the courts of the judicial district of Luxembourg, subject to the mandatory rules that apply to consumers.
Privacy
This policy explains what personal data we receive when you visit naia.lu, book an audit, sign up for the newsletter or work with us, what we do with it and how long we keep it.
We process it in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the Luxembourg Law of 1 August 2018 on the organisation of the National Commission for Data Protection and the general data protection framework, and, for cookies, the amended Law of 30 May 2005 on the protection of privacy in the electronic communications sector and the CNPD guidelines.
Data controller
Takaneo Group Sarl, which operates the naia brand, 3, rue de Steinfort, L-8476 Eischen, Luxembourg. Luxembourg Trade and Companies Register: B173702.
Email: hello@naia.lu. Phone: +352 27 91 92 92.
We have not appointed a data protection officer. For any question about your data, write to us at hello@naia.lu.
The data we receive
We only receive what we need to reply to you, organise your audit and improve the website.
When you book an audit
The time and format you choose (video call or in person, in which case the meeting address), your first and last name, your company name, your email address, your phone number if you give it, and your answers to the questions (team size, role in the decision, current use of AI, tasks that take the most time). If you write it, the project behind your request. If you used the calculator or the “Where to start?” questionnaire, your estimate and your answers are attached to the booking.
When you start a booking without confirming it
While you fill in the form, we record the time spent on each question, the last question viewed and the type of device (computer, tablet or mobile). As soon as you've entered your email address, we also record your name, your company, your email address and the answers already given, even if you don't confirm.
When you sign up for the newsletter
Your email address, the date you signed up and the date you confirmed.
When you write to us or work with us
Your name, your email address, the content of your messages and whatever you choose to send us. For a project, the contact details of the people we work with, the documents exchanged, quotes and invoices.
The emails we send you
We keep a copy of the emails sent by the website (confirmation, reminders, follow-up, sign-up confirmation), with their date and status, to check they were sent.
When you visit the website
Our cookie-free audience measurement records the page viewed, the website you came from and the campaign parameters in the address, the country, the type of device, the browser, the operating system and the name of the network the visit comes from (your internet provider, or your company if it has its own network). Your IP address is only used to calculate a fingerprint that changes every day, and it is not kept. Cloudflare, which hosts the website, also processes your IP address to deliver the pages and protect the website against attacks. Google and LinkedIn only receive browsing data with your consent.
We don't ask for any so-called sensitive data (health, opinions, trade union membership, etc.) and ask you not to write any in the free-text fields.
Why we use it
Each use relies on a legal basis provided by Article 6 of the GDPR.
Organising your audit
Creating the appointment in our calendar and sending you the invitation with the video call link, blocking travel time if we come to you, sending you the confirmation and reminders (the day before and an hour before), letting you reschedule or cancel from your personal link, and preparing the conversation based on your answers.
Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b)).
Following up with you once
If you entered your email address without confirming, we write to you once, on the next working day, with a link that picks up your answers. Never if you've booked in the meantime with the same address, nor after 7 days. No other follow-up comes after it.
Legal basis: legitimate interest (Art. 6(1)(f)), namely helping you finish something you started.
Improving the booking form
The time per question and the last question viewed show us which questions cause difficulty.
Legal basis: legitimate interest (Art. 6(1)(f)).
Sending you the newsletter
We only write to you after you've confirmed your address from the email you received. Every mailing contains an unsubscribe link.
Legal basis: consent (Art. 6(1)(a)).
Replying to your messages, carrying out our projects and invoicing them
Legal basis: pre-contractual measures and performance of the contract (Art. 6(1)(b)), legitimate interest for exchanges that go no further (Art. 6(1)(f)), legal, accounting and tax obligations (Art. 6(1)(c)).
Measuring the audience without cookies and protecting the website
Counting visits and audit requests, knowing which channels bring us visitors, filtering out bots and automated submissions.
Legal basis: legitimate interest (Art. 6(1)(f)).
Measuring the audience and our ads with Google and LinkedIn
Only if you accept it in the cookie banner.
Legal basis: consent (Art. 6(1)(a)).
When a use relies on your consent, you can withdraw it at any time. When it relies on our legitimate interest, you can object to it on grounds relating to your particular situation.
Cookies
We measure the audience without cookies. Google Analytics, Google Ads and LinkedIn cookies are only set after you agree, through an action of your own in the banner. Refusing is as easy as accepting, no box is ticked in advance, and continuing to browse does not count as consent. Your choice is kept for 6 months, then asked again.
Details of the cookies, how long they last and the button to change your mind are on the Cookies page.
Who receives your data
Your data is read by the naia team, only by the people who need it to reply to you or prepare your audit. It also goes through service providers acting on our behalf (processors within the meaning of Article 28 of the GDPR).
Cloudflare
Hosting of the website and forms, protection against attacks, access control for our admin area.
Supabase
Database, hosted in Ireland, within the European Union.
Google Workspace
Calendar, invitations and Google Meet links, sending emails.
Slack
Internal message to the team when an audit is booked, moved or cancelled (name, company, contact details, time, project), or when a newsletter sign-up is confirmed (email address).
Google and LinkedIn, with your consent
Audience measurement and measurement of our ads, described on the Cookies page.
Our advisers and the authorities
Our accountant and our lawyer if needed, and public authorities when the law requires it.
We neither sell nor rent out your data.
Transfers outside the European Union
Our database is in Ireland. Cloudflare, Google, Slack and LinkedIn are American companies, or subsidiaries of American groups, which may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework, which these companies have joined, or by the European Commission's standard contractual clauses. A copy of these safeguards is available on request.
How long we keep it
We keep your data for as long as the intended use requires, then delete it or make it anonymous.
Booked audits
3 years after the date of the audit, including the appointment in our calendar, unless we work together afterwards.
Bookings started but not confirmed
Contact details and answers deleted after 30 days. The time per question remains, with nothing that identifies you.
Newsletter
Until you unsubscribe: your address is deleted the following night. A sign-up that is never confirmed is deleted after 30 days.
Clients
For the duration of the relationship, then 10 years for accounting and tax records.
Copies of sent emails and the admin log
3 years. In our mailbox and our internal messaging tool, messages older than this are deleted once a year.
Cookie-free audience measurement
25 months. The previous day's fingerprint can no longer be recalculated the next day, because the day's key is deleted.
Cookies that require your consent
13 months at most, detailed on the Cookies page.
Security
All pages and exchanges with the website go over HTTPS. The database has no public access: only the website's server can read from and write to it. The admin area is reserved for the team, behind authentication, and every change made there is recorded in a log. The personal link used to manage your audit is impossible to guess.
In the event of a data breach, we notify the CNPD within 72 hours, unless it poses no risk to your rights, and we tell you if the risk is high.
Your rights
At any time, you can access your data and receive a copy, have it corrected or deleted, ask for its processing to be restricted, object to processing based on our legitimate interest (and to marketing at any time), get back the data you've given us in a machine-readable format, and withdraw your consent, with no effect on what was done before.
To do so, write to us at hello@naia.lu or by post to the address given above. We may ask you to prove your identity if in doubt. We reply within one month, which may be extended by two months for a complex request.
To move or cancel an audit, the link in your emails is all you need. To leave the newsletter, the unsubscribe link is at the bottom of every mailing.
Complaints to the CNPD
If you believe your data is not being processed in compliance with the rules, you can lodge a complaint with the National Commission for Data Protection (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg. Phone: (+352) 26 10 60 1. Website: cnpd.public.lu.
Automated decisions
We make no decision about you based solely on automated processing. The service suggested by “Where to start?” is an indication, which we discuss with you during the audit. Advertising cookies may involve profiling for measurement and targeting purposes, only with your consent, and with no legal effect on you.
Minors
The website is aimed at a professional, adult audience. We do not knowingly collect data about minors under 16. If you think a minor has sent us data, write to us so that we can delete it.
Updates to this policy
We may update this policy to keep up with regulations or our tools. Each new version is published on this page, with the date it was updated.
Cookies
What a cookie is
A cookie is a small file the website places in your browser, like a reminder note that remembers your choices from one visit to the next.
The cookies on this website
We measure the website's audience without cookies. Google and LinkedIn tools only load with your consent.
naia audience measurement, without cookies
Our own tool counts visits, pages viewed and audit requests. It places nothing in your browser and does not keep your IP address, only the name of the network the visit comes from (your internet provider, or your company if it has its own network). A fingerprint that changes every day is used to count visitors, without being able to recognise them the next day. The data is stored in the European Union.
Google Analytics, with your consent
Counts visits and pages viewed. Cookies _ga and _ga_…, kept for 13 months at most.
Google Ads, with your consent
Measures the audit requests that come from our Google ads. Cookies _gcl_…, kept for 90 days.
LinkedIn, with your consent
Measures the visits that come from our LinkedIn ads, and helps us show them to people who already know naia. Cookies li_…, lidc and bcookie, kept for a year at most.
Audit booking form, without cookies
While you fill in the form, we record the time spent on each question and the last question viewed, to spot the questions that cause difficulty. As soon as your email address is entered, we also record the fields filled in (name, company, email address, answers), even if you don't confirm: we then write to you once, on the next working day, to offer to finish. Nothing is placed in your browser, and these contact details are deleted after 30 days.
Your choice and your estimate
Your cookie choice is kept for 6 months in your browser, so we don't ask you again on every page. If you go from the calculator to booking an audit, your estimate is kept there to prefill the form. Both pieces of information stay in your browser.
Managing your choices
You can give or withdraw your consent at any time. When you withdraw it, we delete the Google and LinkedIn cookies from your browser. You can also clear them from your browser settings.
Last updated: 13 October 2026. This English version is provided for convenience; the French version prevails.