Skip to Content

Privacy policy Policy

Last amended on 13 May 2026


Article 1 — Our role under the GDPR and the EU AI Act

DataNerds (a trading name of LOOX BV) acts as:

  1. Controller: for the data of website visitors and direct client contacts.

  2. Processor: where we carry out technical audits on the instructions of clients, or deploy our sovereign AI assistant Thor within a client's business processes.

Article 2 — Data flows processed

We limit processing to what is strictly necessary (data minimisation):

  • Professional contact details: name, email address and company details, for the performance of agreements and for networking purposes.

  • Technical audit data: company data.

  • AI training data (secured): data processed by Thor remains within the client's sovereign infrastructure. We do not make use of public back doors or of external AI models that would breach confidentiality.

Article 3 — Confidentiality and intellectual property

  • Confidentiality: DataNerds treats all client information as strictly confidential. This information is never shared with third parties without express consent, unless required by law.

  • Ownership of methodology: all reports, audit structures, Thor software algorithms and specific DataNerds methodologies developed by us remain the exclusive intellectual property of LOOX BV.

  • Enforcement: in accordance with our General Terms and Conditions, any breach of our confidentiality or trade secrets, or any unauthorised use or re-use of our intellectual property, is subject to fixed damages of €100,000.00 per incident, without prejudice to the right to prove a higher amount of actual loss.

Article 4 – Sovereign Security

We apply a security-by-design approach:

  • We use only European sub-processors selected against strict GDPR and EU AI Act requirements.

  • Data is stored on sovereign servers in order to limit exposure to non-EU legislation, such as the US CLOUD Act.

Artikel 5 – Your Rights

Data subjects have the right of access to, rectification of and erasure of their personal data. We handle requests within the statutory time limits via info@datanerds.be.

Article 6 — Governing law and jurisdiction

This policy is governed by Belgian law. In the event of a dispute, the courts of the judicial district of Leuven shall have exclusive jurisdiction.