Privacy notice.
What happens to the details you send us through this site, in plain words.
Who we are
SP Consultants Sàrl-S, Bertrange, Luxembourg (RCS B306306, VAT LU37434006) runs this site and is the controller of your data. Questions or requests about your data: sebastiaan@spconsultants.lu.
What we collect
- The contact form: your name, email and message, and your company if you give it. It is sent from our server to our sales inbox, and our internal client system keeps a copy of the emails in that inbox so we can follow up. If our server cannot be reached, the form opens your own email program instead, and the message goes from your email provider straight to us.
- Server logs: your IP address and the time of each request, used to keep the site and its form safe from abuse. We keep them for 30 days, then delete them.
- Visitor statistics: which pages are viewed, the site that sent you here, your browser, device type, screen size and language, your country and region worked out from your IP address, and whether you click "Book a call", an email link or send the contact form. We count this with Umami, an open-source tool that runs on our own server. It sets no cookies and does not store your IP address: a visit is recognised by a one-way code that changes every month, so we cannot tell who you are or follow you across other sites. If your browser asks sites not to track you (Do Not Track), nothing is counted.
We do not use advertising or tracking cookies. The site sets short-lived cookies (20 seconds) when you move between the SPC and SPC Studio sites, only to carry the page transition across.
Why we use it
To answer your message. When you ask about a project or a quote, that is a step you asked us to take before a possible contract (GDPR, Art. 6(1)(b)). For other questions, answering you is our legitimate interest (Art. 6(1)(f)), as is keeping the site safe from abuse and counting visits to see which pages are useful and improve the site. We never sell or share your details for marketing.
Who processes it for us
- Hetzner Online GmbH, Germany: hosts this site, its form, our visitor statistics and our internal client system.
- Proton AG, Switzerland: our email, and the booking page behind "Book a call". Switzerland has an EU adequacy decision.
How long we keep it
- Messages that do not lead to a project: the emails (your message, our reply and any that follow) and their copies in our internal client system are deleted 12 months after the last message, unless you become a client.
- Visitor statistics: deleted 13 months after the visit.
- If you become a client: we keep what the law requires for accounting, in Luxembourg 10 years for invoices and their records, and the correspondence that belongs to the project for as long as the contract and any claims under it can run.
- Backups: deleted data can remain in our backups until they expire: about 3 days in the daily copies on our server, and up to 12 months in encrypted offsite backups at Hetzner.
Your rights
You can ask to see, correct, delete or export your data, to restrict how we use it, or object to it. Write to sebastiaan@spconsultants.lu and we answer within one month. You can also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD).
Last updated: 5 November 2026.