Personal data protection

1. Data controller

Data is processed by MIP-IT SARL, the controller for the archilu.com site and the ArchiLU service. We apply appropriate technical and organisational measures to prevent any unauthorised access, alteration, loss or disclosure.

2. Purposes of processing

The data collected is used only to:

• prepare the one-month free trial requested through the form on the main page;
• answer your contact and demo requests;
• measure traffic on the site with its own measurement, described in section 4;
• manage the commercial and contractual relationship;
• run and secure the ArchiLU service;
• meet our legal and regulatory obligations.

3. Categories of data collected

We collect only the data each purpose needs:

• through the trial form: the organization name, the work email and the chosen need, with the language and the address of the page the request comes from;
• through the contact and demo forms: first and last name, company and position, work email, phone number and the content of the request;
• through the site measurement: the visit events described in section 4.

Each request sent through a form is recorded in the site's database, and MIP-IT SARL receives an email notification of it. The request is linked to the visit's session identifier and, if you accepted the measurement, to the visitor identifier. A hidden field and a limit on the number of submissions keep automated submissions out.

4. Audience measurement and cookies

The site keeps its internal statistics. With your explicit consent, Google Analytics 4 also measures page views, visit sources and accepted trial requests. No Google Analytics script loads before consent or after refusal. Visit data is then sent to Google; contact details and form text are not sent to Google. Google Privacy

During the visit, the browser sends a few events to the site's database: page view, scroll to mid-page, click on an action button, form steps, sharing an article, the choice made in the consent banner. Each event carries the page address and title, its language, the referring page, the campaign parameters in the address, the browser used, its language, its time zone and its window size.

The site's database does not record the IP address: it keeps only a hashed fingerprint of it, used to limit the number of submissions. A score computed from the browser headers separates bots from human visits.

Two identifiers link the events together. The session identifier is kept in the browser tab for the length of the visit. The visitor identifier is kept in your browser's local storage only if you accept the measurement in the banner; if you decline, it is not created.

The archilu_consent and archilu_analytics_consent_v2 cookies keep your choice for one year. With consent, Google Analytics also uses measurement cookies (_ga). The visit source is kept in the tab and expires after 30 minutes of inactivity to attribute trial requests. Withdraw consent using “Analytics preferences” in the footer.

5. Legal basis

Processing relies on your consent (trial, contact and demo forms; visitor identifier accepted in the banner), on the performance of pre-contractual or contractual measures, and on the legitimate interest of MIP-IT SARL in securing and improving the site and the service, including traffic measurement without a visitor identifier.

6. Retention period

Data is kept for as long as the purposes strictly require, then archived or deleted in line with the applicable legal requirements.

7. Data location and sovereignty

ArchiLU is published from Luxembourg. The data of the site and of the service is hosted and processed in the European Union, in Germany. No data leaves the European Union as part of the ArchiLU service.

8. Recipients of the data

The data is accessible only to authorised staff of MIP-IT SARL and, where needed, to technical subcontractors bound by strict confidentiality and security obligations.

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, under the conditions set by the regulation. You can also withdraw your consent at any time.

10. Contact

For any request about your personal data: