20 More
Privacy Policy
Last updated:
This policy explains what personal data we process when you use 20more.lu, why, on what legal basis, who else processes it for us, and the rights you have under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
Who is responsible
The controller is Shelby Distribution SARL-S, trading as 20 More (20 More AI Studio), registered with the Luxembourg Trade and Companies Register (RCS) under B280426. Registered office: 20, rue Robert Schuman, L-4319 Esch-sur-Alzette, Luxembourg.
For any privacy question or request, write to touschlaurent@gmail.com.
What we collect and why
- Enquiries (contact form, funding check, AI readiness checklist, email sign-ups on the blog): the details you type in, such as name, email, company, company size and your message or answers. We use them to reply, send what you asked for, and follow up on your enquiry. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). Where you ask to receive resources or updates by email, the basis is your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Booking a call: if you book through the embedded Calendly calendar, Calendly processes your name, email, time slot and any answers you give, and shares them with us so the meeting can take place (Art. 6(1)(b)).
- Analytics and advertising measurement, only if you accept cookies: pages viewed, clicks on calls to action, form events, device and browser data, an approximate location derived from your IP address, and session recordings of how the page is used. We use this to understand which pages help visitors and to measure our Google Ads. Legal basis: your consent (Art. 6(1)(a)). Nothing is loaded before you accept.
- Personalised pages: if we sent you a link to a page prepared for your company, the page is generated from business contact details we hold about you, and the text is drafted with Anthropic’s Claude API. Legal basis: our legitimate interest in business-to-business prospecting (Art. 6(1)(f)). You can object at any time.
- Technical logs: our hosting provider records technical data such as IP address, time and requested page to deliver the site and keep it secure (Art. 6(1)(f)).
Who processes data for us
- Netlify, Inc. (United States): website hosting, form submissions and serverless functions.
- PostHog (EU cloud): product analytics and session recordings, after consent.
- Google Ireland Limited / Google LLC: Google Ads conversion measurement and, where enabled, Google Analytics, after consent.
- Microsoft (Clarity), where enabled: usage analytics, after consent.
- Calendly LLC (United States): meeting booking.
- Anthropic, PBC (United States): drafting the text of personalised pages.
- European Commission (VIES): when you use the Supplier File Health Check, the VAT numbers in your file are sent to VIES to be checked. The file itself stays in your browser.
We do not sell personal data.
Transfers outside the EU
Several of these providers are based in the United States. Where a transfer takes place, it relies on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795) for providers certified under it, or on the Standard Contractual Clauses adopted by the Commission.
How long we keep data
Enquiry data is kept for as long as needed to answer and follow up your request and, if we work together, for the duration of the relationship and the periods required by Luxembourg accounting and tax law. Analytics data is kept according to the retention settings of the analytics provider. You can ask us to delete your data sooner at any time, unless we must keep it by law.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting processing before the withdrawal (Articles 15 to 22 GDPR). Write to touschlaurent@gmail.com; we answer within one month.
You can also lodge a complaint with the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), at cnpd.public.lu.
Changes
We update this policy when our processing changes. The date at the top shows the current version.