Metaneering S.à r.l. RCS Luxembourg B275944 16, avenue Pasteur, L-2310 Luxembourg E-Mail: info@metaneering.com
1. Controller Identity
The controller responsible for the processing of personal data on this website is:
Metaneering S.à r.l. Registered in Luxembourg — RCS B275944 16, avenue Pasteur, L-2310 Luxembourg E-Mail: info@metaneering.com
For any questions regarding the processing of your personal data, please contact us at the address above.
2. Scope and Applicable Law
This Privacy Policy applies to the websites metaneering.com and profisaison.com (together "the Websites"). The processing of personal data is governed by:
- Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR)
- Luxembourg Act of 1 August 2018 on the organisation of the CNPD and the general data protection framework
- Luxembourg Act of 30 May 2005 on privacy in the electronic communications sector, as amended (transposition of ePrivacy Directive 2002/58/EC)
3. Personal Data We Process and Why
3.1 Server Log Files (Automatically Collected by Hosting Provider)
When you visit the Websites, our hosting provider Hostinger International Ltd (61 Lordou Vironos Street, 6023 Larnaca, Cyprus — EU-based servers) automatically records the following data in server log files:
| Data element | Example |
|---|---|
| IP address | 192.168.x.x |
| Date and time of the request | 2026-04-03 22:00:00 CET |
| Requested URL | /en/index.html |
| HTTP status code | 200 |
| Volume of data transferred | 14 KB |
| Referring URL (if applicable) | https://example.com |
| Browser type, version, OS (User-Agent) | Mozilla/5.0 … |
Purpose: Technical operation of the Websites, server security, error detection, and abuse prevention.
Legal basis: Article 6(1)(f) GDPR — legitimate interests. Our legitimate interest is the technically fault-free, reliable, and secure provision of the Websites.
Retention period: Log files are retained by Hostinger for a maximum of 30 days and then deleted automatically, unless a specific security incident requires longer retention for the purpose of documentation and investigation.
Data Processing Agreement: Metaneering has concluded a Data Processing Agreement (DPA) with Hostinger in accordance with Article 28 GDPR. Hostinger processes data exclusively on documented instructions from Metaneering and within the European Union. Hostinger's DPA is available at: https://www.hostinger.com/legal/dpa
3.2 Image Delivery (pics.metaneering.com)
Images displayed on the Websites are served via a dedicated subdomain (pics.metaneering.com), hosted on the same Hostinger infrastructure. When your browser loads an image, it transmits your IP address to the server hosting that subdomain. This is a technically necessary step for content delivery.
Purpose: Technical delivery of visual content on the Websites. Legal basis: Article 6(1)(f) GDPR — legitimate interests (technical provision of website content). Retention: IP addresses are not retained beyond the standard server log cycle described in Section 3.1.
3.3 Language Preference Cookie
To remember your language selection across pages and visits, the Websites may set the following functional cookie:
| Cookie name | Set by | Purpose | Duration |
|---|---|---|---|
m-lang | metaneering.com | Stores your preferred language (EN, DE, FR, NL, IT, ES) to avoid re-selection on every page load | 30 days |
Legal basis: Article 6(1)(f) GDPR — legitimate interests (personalisation of user experience at user request). This cookie does not track you across third-party websites, does not build behavioural profiles, and is strictly limited to storing a single language preference.
ePrivacy basis: This cookie falls within the user-preference exemption under Article 4(3)(e) of the Luxembourg Act of 30 May 2005, as confirmed by CNPD Cookie Guidelines (January 2022). No consent is required.
3.4 PDF Downloads
PDF documents are made available for download on the Websites. No personal data is collected or processed by Metaneering during the download. The download is served by Hostinger's infrastructure; Section 3.1 (server logs) applies.
3.5 Voluntary Donation Modal
A voluntary donation modal may appear in connection with PDF downloads. This modal contains links to external services operated by PayPal (Europe) S.à r.l. et Cie, S.C.A. and/or Stripe Payments Europe Ltd. Clicking these links redirects you to the respective third-party website. Metaneering does not collect, receive, process, or store any payment or personal data in connection with these links.
The privacy policies of the external providers apply from the moment you leave our site:
- PayPal: https://www.paypal.com/en/legalhub/privacy-full
- Stripe: https://stripe.com/en/privacy
3.6 Contact via E-Mail (Mailto Links)
The Websites provide email contact exclusively via mailto links — no contact form is used, and no data is stored on the server through this channel. When you send an email, the data you provide (name, email address, content of your message) is used exclusively to respond to your enquiry.
Legal basis: Article 6(1)(f) GDPR — legitimate interests (responding to correspondence); or, where applicable, Article 6(1)(b) GDPR (pre-contractual communication).
Retention: Email correspondence is retained for as long as necessary to handle your enquiry, and thereafter in accordance with applicable legal retention obligations (generally up to 10 years for commercially relevant correspondence under Luxembourg law).
3.7 Self-Hosted Fonts
All fonts used on the Websites are self-hosted on our Hostinger infrastructure. No requests are made to external font providers (e.g. Google Fonts). No IP addresses or browser data are transmitted to third parties in connection with font loading.
3.8 Google Tag Manager & Google Analytics 4 (GA4)
Google Tag Manager & Google Analytics
This website uses Google Tag Manager (GTM) and Google Analytics 4 (GA4), services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GTM is a tag management system that loads tracking scripts; it does not collect personal data itself. Through GTM, we use GA4 to analyse website usage. GA4 collects anonymised data such as pages visited, session duration, approximate location (country/city), and device type. IP addresses are anonymised before processing.
Legal basis. The processing of personal data in connection with GA4 (including tags loaded via GTM) is based on Article 6(1)(a) GDPR — consent, which you give via our cookie consent banner. You may opt out via the cookie consent banner or by installing the Google Analytics Opt-out Browser Add-on.
Data processed. When you consent to analytics, GA4 collects the following categories of data: online identifiers (cookies _ga and _ga_<container-id>, Client ID), device and browser information (type, version, screen resolution, operating system), pages visited, clicks, scroll depth, referring URL, and approximate location (city/region level). Your IP address is used for geolocation purposes but is not stored by Google.
Retention period. We have configured event-level data retention in GA4 to 2 months. After this period, event data is automatically deleted. Aggregated reports without personal reference may remain accessible.
Recipient and Data Processing Agreement. Google Ireland Limited acts as a data processor on our behalf. We have accepted Google's Data Processing Terms in accordance with Article 28 GDPR (available at https://business.safety.google/processorterms/).
Transfer to third countries. Google may transfer data to Google LLC in the United States. The legal basis for this transfer is the adequacy decision of the European Commission for the EU-US Data Privacy Framework (DPF) pursuant to Article 45 GDPR. Google LLC is certified under the DPF (verifiable at https://www.dataprivacyframework.gov/). Despite the adequacy decision, a residual risk of access by US authorities under US surveillance laws cannot be entirely excluded.
Opt-out options. You may:
- withdraw your consent at any time via our cookie consent banner (link: "Cookie Settings");
- install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout.
No sensitive data. We do not transmit special categories of personal data (e.g. health, religion, political opinions) to GA4.
3.9 Exali AG Liability Seal
1. Description and scope of data processing
This page uses the Exali AG Liability Seal. The graphic element of the seal is reloaded from the servers of Exali AG. For this purpose, due to the technical design of the Internet, your IP address is processed in order to transmit the graphic to your browser.
If you click on this seal, you leave our website and you will be forwarded to the servers of Exali AG.
Learn more from Exali's privacy policy: Exali data protection declaration (Liability Seal)
2. Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 lit.f) GDPR (legitimate interest).
3. Purpose of data processing
The data processing serves the purpose of providing evidence of the legally prescribed mandatory information on professional indemnity as per Section 2 (11) DL-InfoV in a visually appealing manner.
4. Legitimate interest
Our legitimate interest in data processing arises from the purpose of offering an appealing online offer and fulfilling our information obligations in an appealing manner.
4. Cookies: Complete Overview
The Websites use functional and — with your consent — analytics cookies.
| Cookie | Set by | Category | Purpose | Duration |
|---|---|---|---|---|
m-lang | metaneering.com | Functional / User preference | Language preference storage | 30 days |
_ga | google.com (GA4) | Analytics (consent required) | Distinguishes unique visitors via a randomly generated Client ID | Up to 2 years |
_ga_<container-id> | google.com (GA4) | Analytics (consent required) | Maintains session state | Up to 2 years |
Analytics cookies are set only after you give active consent via the cookie consent banner. No third-party cookies are set without your prior opt-in.
5. Analytics, Tracking, and Advertising
The Websites use Google Analytics 4 for web analytics (see Section 3.8). This is the only analytics tool deployed. GA4 is activated only after you provide active consent via our cookie consent banner.
The Websites do not use:
- Social media plugins, like buttons, or share widgets that call external servers
- Advertising networks, retargeting, or remarketing tools
- Session recording, heatmapping, or click-tracking tools
- Newsletter, marketing automation, or CRM integration
- Fingerprinting or device-identification technologies
- External font services (all fonts are self-hosted)
Should any of the above be introduced in the future, this Privacy Policy will be updated prior to activation, and — where required by applicable law and CNPD guidelines — your prior explicit consent will be obtained.
6. Recipients and Data Processors
We share personal data only with the following processor, bound by a written Data Processing Agreement under Article 28 GDPR:
| Processor | Function | Country | Transfer safeguard |
|---|---|---|---|
| Hostinger International Ltd | Web hosting (all Websites, including image subdomain) | Lithuania / EU | GDPR directly applicable — no third-country transfer |
| Google Ireland Limited | Web analytics (GA4) | Ireland / EU | GDPR directly applicable — no third-country transfer. Sub-processing by Google LLC (USA) under EU-US DPF adequacy decision (Art. 45 GDPR) |
We do not sell, rent, or otherwise disclose personal data to any third party beyond the above.
7. International Data Transfers
All hosting described in this policy takes place within the European Union (Hostinger EU servers, Lithuania). In connection with Google Analytics 4 (see Section 3.8), personal data may be transferred to Google LLC in the United States. The legal basis for this transfer is the adequacy decision of the European Commission for the EU-US Data Privacy Framework (DPF) pursuant to Article 45 GDPR. Google LLC is certified under the DPF. No other international data transfers take place.
8. Data Security (Article 32 GDPR)
We implement appropriate technical and organisational measures (TOMs) to protect personal data against accidental loss, alteration, unauthorised disclosure, or access, including:
- HTTPS / TLS encryption for all data in transit between visitor and server
- EU-based hosting with contractually secured access restrictions (Hostinger DPA)
- Self-hosted assets (fonts, images) to minimise third-party data exposure
- Regular review of data processing activities and sub-processors
9. Your Rights as a Data Subject
Under Chapter III of the GDPR, you have the following rights:
| Right | Legal basis | Description |
|---|---|---|
| Right of access | Art. 15 GDPR | Obtain confirmation and a copy of personal data we hold |
| Right to rectification | Art. 16 GDPR | Correct inaccurate personal data |
| Right to erasure | Art. 17 GDPR | Request deletion, subject to legal retention obligations |
| Right to restriction | Art. 18 GDPR | Restrict processing in specified circumstances |
| Right to data portability | Art. 20 GDPR | Receive data in a structured, machine-readable format (where applicable) |
| Right to object | Art. 21 GDPR | Object to processing based on legitimate interests at any time |
| Right to withdraw consent | Art. 7(3) GDPR | Withdraw consent without affecting prior lawful processing |
To exercise any right, please contact: info@metaneering.com
We will respond within one month (extendable by a further two months for complex requests) in accordance with Article 12 GDPR.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority at any time (Article 77 GDPR). The supervisory authority for Luxembourg is:
Commission Nationale pour la Protection des Données (CNPD) 15, boulevard du Jazz — L-4370 Belvaux — Luxembourg Website: https://cnpd.public.lu E-Mail: info@cnpd.lu Tel: +352 26 10 60 1
You also have the right to an effective judicial remedy against a controller or processor (Article 79 GDPR).
11. Changes to This Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in applicable law, CNPD guidelines, or the technical configuration of the Websites. Changes will be published on this page with a revised "Last updated" date. We recommend reviewing this page periodically.