AN INFINITEMINDAsensia / Legal
Privacy policy
How Asensia collects, uses and protects your personal data, and how you can exercise your rights under the GDPR.
Last updated: 1 October 2026
Transparency is one of our four pillars. This policy explains which personal data Asensia S.A. processes when you use this website or contact us, why, for how long, and what your rights are. It applies under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Luxembourg law of 1 August 2018 on data protection.
1. Data controller
Asensia S.A., 19 rue Edmond Reuter, L-5326 Contern, Luxembourg (“Asensia”, “we”). For any question about your personal data, contact us at info@asensia.lu with the subject “Personal data”, or by post at the address above.
2. Data we collect
- Contact requests: name, email address, company, subject and the content of your message, when you use our contact form or write to us.
- Job applications: identity and contact details, CV, cover letter and any information you choose to share with us.
- Business relationship: professional contact details of client, prospect and partner representatives.
- Technical data: data necessary for the website to work and stay secure, such as server logs and your cookie preferences.
- Audience and marketing data: only if you accept the corresponding cookies (see our Cookie policy).
We do not collect sensitive data through this website. Please do not include any in your messages.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering your requests and demo or Health Check enquiries | Steps taken at your request before a contract, or our legitimate interest in answering you |
| Managing job applications and recruitment | Steps taken at your request before an employment contract |
| Managing the relationship with clients, prospects and partners | Performance of a contract and our legitimate interest in developing our business |
| Operating and securing the website | Our legitimate interest in providing a secure, working website |
| Audience measurement and marketing | Your consent, which you can withdraw at any time |
| Complying with legal obligations (accounting, tax, requests from authorities) | Legal obligation |
4. Retention periods
- Contact and prospect data: 3 years from our last contact with you.
- Client and partner data: for the duration of the relationship, then for the legal limitation periods.
- Unsuccessful applications: 2 years, unless you ask us to delete them sooner.
- Accounting documents: 10 years, as required by Luxembourg law.
- Cookie preferences: 12 months, after which we ask you again.
5. Who receives your data
Your data is accessed only by the Asensia staff who need it. Where useful to answer your request (for example a question about ServiceNow, data and AI, or myndy), it may be shared with the InfiniteMind group companies concerned: SPOC Luxembourg, Mentis or the myndy team. We also use carefully selected service providers (hosting, email, digital tools) who act on our instructions under a data processing agreement. We never sell your data.
6. Transfers outside the European Union
We favour providers that store data within the European Union. If a transfer outside the EU or the European Economic Area becomes necessary, it is protected by an adequacy decision of the European Commission or by the Standard Contractual Clauses adopted by the Commission, together with any additional measures required.
7. Security
Security is our profession. We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access and alteration, including access control, encryption where appropriate and regular reviews of our practices.
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to it, and to data portability. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. To exercise your rights, write to info@asensia.lu. We may ask for proof of identity and will answer within one month.
9. Complaints
If you believe your rights are not respected, you can lodge a complaint with the Luxembourg supervisory authority: Commission nationale pour la protection des données (CNPD), 15 boulevard du Jazz, L-4370 Belvaux, www.cnpd.lu. We would appreciate the chance to address your concern first.
10. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The date at the top of the page shows the latest version.