Legal

Privacy Policy

Last updated: 29/09/2026

This Privacy Policy explains how personal data is processed in connection with the Nexus Luxembourg event, its website (nexusluxembourg.com), its ticketing, the exhibitor portal (nexuslux.co), the order platform (nexuslux.net), the Startups & Scaleups Awards, the speaker programme, the gala dinner and the event application.

1. Who we are

Nexus Luxembourg Ventures G.I.E. (“Nexus”, “we”), a groupement d’intérêt économique registered with the Luxembourg Trade and Companies Register under number C180, with its registered office at 10 rue des Gaulois, L-1618 Luxembourg, is the data controller.

Joint controllership. For the Nexus Luxembourg 2027 event, held on 9 and 10 March 2027 at Luxexpo – The Box, Nexus acts as joint controller with the Chamber of Commerce of the Grand Duchy of Luxembourg (7, rue Alcide de Gasperi, L-1615 Luxembourg) under Article 26 GDPR, for: (i) the registration of exhibitors and visitors; (ii) the organisation of B2B matchmaking meetings; and (iii) participation in the event by visitors, exhibitors and speakers. The essence of the arrangement between the joint controllers is available on request. You may exercise your rights with respect to and against either joint controller.

Contact for all data protection matters: hello@nexusluxembourg.com

2. Whose data we process and what data

Depending on how you take part in Nexus Luxembourg, we may process:

  • Identity and contact data: name, job title, company, email address, phone number.
  • Professional data: company information, sector, country, website, logo, and for speakers, biography and photograph.
  • Participation data: tickets, orders, stand details, Awards applications and jury evaluations, gala dinner seating, matchmaking meetings, and travel and accommodation arrangements for invited speakers.
  • Payment and invoicing data: invoicing details and payment references. We never store full payment card details.
  • Specific requirements: dietary and accessibility needs, used only to accommodate you at the event.
  • Communication data: your correspondence with us, your communication preferences and consent records.
  • Images: photographs and videos taken during the event.
  • Technical data: IP address, browser and device information and, with your consent, website audience data.

Most of this data is provided directly by you. Some is provided by your company, for example when an exhibitor designates a contact person or invites a speaker. In that case, the company must inform the persons concerned, and invited speakers complete their own profile.

3. Purposes and legal bases

  • To organise the event and provide our services (performance of a contract). This covers registration, tickets, exhibitor orders and invoicing, the exhibitor, speaker and startup portals, the speaker programme, VIP speakers’ travel arrangements, the Startups & Scaleups Awards, the gala dinner, B2B matchmaking with the Chamber of Commerce and its Enterprise Europe Network, and the service messages linked to your participation.
  • With your consent. We rely on your consent to send you newsletters and commercial communications, to include you in the participant list on the event application, to publish speakers’ biographies and photographs and to measure website audience. You may withdraw your consent at any time.
  • For our legitimate interests. We rely on our legitimate interests to ensure the security of the event, the platforms and the website, to improve our events, including through feedback analysis, and to promote Nexus Luxembourg with photographs and videos taken at the event. You may object to this processing at any time.
  • To comply with our legal obligations. This covers, in particular, accounting and tax obligations.

4. Commercial communications

We send newsletters and commercial communications only to persons who have expressly opted in, by ticking the relevant box during registration or by subscribing to our newsletter. These boxes are never pre-ticked, consent is given separately for each channel and refusing has no effect on your registration or participation.

You may withdraw your consent at any time, free of charge and with immediate effect:

Service messages necessary for your participation (confirmations, reminders, practical information) are not commercial communications and continue to be sent while you are registered.

5. Publication of information

Some information is published as part of the event: exhibitor names, logos and stand information; speaker names, titles, companies, biographies and photographs; and the directory of startups and scaleups, which displays company names and logos, not the names of individual founders. Speakers complete their own profile and give their publication consent directly.

Photographs and videos may be taken during the event and used to promote Nexus Luxembourg. This is indicated at the venue. If you do not wish to appear, you may inform our team on site or object afterwards at hello@nexusluxembourg.com.

6. Who receives your data

We do not sell personal data.

  • The joint controller, the Chamber of Commerce, for the processing described in section 1.
  • Our service providers (processors), who act only on our instructions and are bound by contract to protect your data:
ProviderServiceLocation of data
SwapcardEvent application and matchmakingFrance / EU
WelkomRegistration platformLuxembourg
Nexuslux.coExhibitor, speaker and startup portalEU
Nexuslux.netOrder and invoicing platformEU
BrevoNewsletter and email deliveryEU
Google Analytics, Google Ads and LinkedIn Insight TagWebsite audience measurementEU and United States (EU–US Data Privacy Framework and Standard Contractual Clauses)
  • Sponsors, event partners and media partners receive your data only with your separate and explicit consent, given before any sharing. Media partners and publishers are independent controllers for their own publications and mailings: to stop receiving a publication, please contact its publisher directly.
  • Other participants: where you consent, your name, job title, company and photograph appear in the participant list on the event application, during and after the event.
  • Public authorities, where required by law.

7. How long we keep your data

We keep personal data only as long as necessary for the purposes for which it was collected. It is then deleted or anonymised. In practice:

  • Event participation data (registration, tickets, matchmaking, speakers, Awards applications, gala dinner, travel arrangements): up to 24 months after the event. Data needed only for a specific booking, such as identity document details, is deleted as soon as it is no longer needed.
  • Commercial communications: until you withdraw your consent, or after 3 years without any interaction with us.
  • Contractual, accounting and invoicing records: 10 years, as required by Luxembourg law.
  • Website audience measurement data: up to 13 months.

Data may be kept longer only where required by law or to establish, exercise or defend legal claims.

8. Security

We apply technical and organisational measures appropriate to the risks, including encrypted connections, access restricted to authorised persons, personal single-use links for forms accessible without an account, logging of administrative actions, and regular backups. In the event of a personal data breach, we notify the CNPD within 72 hours where required and inform the persons concerned when the breach is likely to result in a high risk to them.

9. Your rights

You have the right to:

  • access your data;
  • have it rectified;
  • have it erased;
  • restrict its processing;
  • object to its processing, including to direct marketing at any time and without giving reasons;
  • data portability;
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Write to hello@nexusluxembourg.com. We respond within one month. Your request covers all platforms operated for Nexus Luxembourg; where it concerns data held by the joint controller, we forward it to them without undue delay. We may ask you to confirm your identity.

You may also lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.

10. Cookies

  • Strictly necessary cookies ensure the website and platforms work (session, security, language). They do not require consent.
  • Audience measurement cookies help us understand how the website is used. They are placed only after your consent, given through the cookie banner.

You can change your choice at any time via the “Cookie settings” link at the bottom of every page.

11. Minors

Our services are intended for professionals and are not directed at persons under 16.

12. Changes to this policy

We may update this policy to reflect changes to our services or legal requirements. The date of the latest update appears at the top of this page. Significant changes will be brought to your attention.