Skip to Content

Privacy Policy

Last modified on 13/05/ 2026


Article 1 – Our Role under the GDPR & EU AI Act

DataNerds (trading name of LOOX BV) acts as:

  1. Data Controller: For data of website visitors and direct client contacts.

  2. Processor: When we perform technical audits on behalf of clients or implement our sovereign AI assistant Thor within the client's business processes.

Article 2 – Processed Data Flows

We limit processing to what is strictly necessary (data minimization):

  • Professional Contact Information: Name, email address, and company information for the execution of agreements and networking purposes.

  • Technical Audit Data: Company data

  • AI Training Data (Secure): Data processed by Thor remains within the client's sovereign infrastructure. We do not use public 'backdoors' or external AI models that violate confidentiality.

Artikel 3 – Non-Disclosure & Intellectual Property

  • Confidentiality: DataNerds treats all client information as strictly confidential. This information is never shared with third parties without explicit consent, unless legally required.

  • Ownership of Methodology: All reports, audit structures, software algorithms of Thor, and the specific DataNerds methodologies developed by us remain the exclusive intellectual property of LOOX BV.

  • Enforcement: In accordance with our General Terms and Conditions, any breach of our confidentiality, trade secrets, or unauthorized (re)use of our intellectual property will be sanctioned with a flat-rate compensation of € 100,000.00 per incident, without prejudice to the right to prove higher actual damages.

Article 4 – Sovereign Security

We adopt a Security-by-Design approach:

  • We only use reliable, European subprocessors that meet the strictest GDPR and EU AI Act standards.

  • Data is stored on sovereign servers to exclude the influence of non-EU legislation (such as the US Cloud Act).

Artikel 5 – Your Rights

Data subjects have the right to access, rectify, and delete their personal data. Given our focus on compliance, we handle requests within the legal timeframes via: info@datanerds.be.

Article 6 – Applicable Law and Jurisdiction

Belgian law applies to this policy. In the event of disputes, only the courts of the judicial district of Leuven have jurisdiction.