Privacy Policy

Last updated: February 18, 2026

1. Controller

Yan Soisson
41, rue Hiereknapp
8326 Capellen
Luxembourg

2. Overview

This website ("EU AI Pinboard") is a static, non-commercial website that showcases European AI startups on an interactive map. We are committed to protecting your privacy and processing personal data only where necessary and in compliance with the General Data Protection Regulation (GDPR) and the Luxembourg Law of 1 August 2018 on the organisation of the Commission nationale pour la protection des données and the general data protection framework (Loi du 1er août 2018).

3. Hosting and Content Delivery

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit this site, Vercel's servers automatically process technical data such as your IP address, browser type and version, operating system, referring URL, date and time of access, and the pages you visit. This processing is necessary for delivering the website to you and is based on our legitimate interest in providing a functional, secure web presence (Art. 6(1)(f) GDPR).

Vercel may transfer data to the United States. Vercel participates in the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection. For more information, see Vercel's Privacy Policy.

4. Analytics

We use Vercel Web Analytics to collect anonymised usage data about how visitors interact with this website. Vercel Web Analytics is privacy-focused by design: it does not use cookies, does not collect personally identifiable information, and does not track individual visitors across sessions or websites.

The data collected includes aggregated page views, referrers, browser types, operating systems, and device types. No IP addresses are stored or processed for analytics purposes.

The legal basis for this processing is our legitimate interest in understanding how the website is used in order to improve it (Art. 6(1)(f) GDPR).

For more information, see Vercel Analytics documentation.

5. Submission Form (Tally.so)

The submission and feedback form on this website is provided by Tally, operated by Tally NV, Ghent, Belgium. If you choose to submit a startup suggestion or feedback, you voluntarily provide data such as a startup name, website URL, free-text comments, and whether you work at the startup in question.

Tally processes this data on our behalf. Your submission data is stored on Tally's servers within the European Union. Tally does not use cookies on embedded forms and does not track visitors who do not submit the form.

The legal basis for processing data you submit through the form is your consent, given by voluntarily completing and submitting the form (Art. 6(1)(a) GDPR). You may withdraw your consent at any time by contacting us at the email address above. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

For more information, see Tally's Privacy Policy.

6. Cookies

This website does not use cookies. Neither we nor the third-party services we use (Vercel Analytics, Tally.so) set cookies on your device when you visit this site.

7. External Links

This website contains links to external websites (e.g. company websites, LinkedIn profiles, GitHub repositories, research papers). We have no control over the content or privacy practices of these external sites. Please review their respective privacy policies when visiting them.

8. Data Retention

Server logs (Vercel): Automatically collected access data is retained by Vercel in accordance with their data retention policies and is not stored by us separately.
Analytics data (Vercel Analytics): Aggregated and anonymised; no personal data is retained.
Form submissions (Tally): Retained until we delete them or until you request deletion. We review and process submissions regularly and delete data that is no longer needed.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — You may request confirmation of whether we process your personal data and, if so, access to that data.
Right to rectification (Art. 16 GDPR) — You may request correction of inaccurate personal data.
Right to erasure (Art. 17 GDPR) — You may request deletion of your personal data, subject to legal retention obligations.
Right to restriction of processing (Art. 18 GDPR) — You may request that processing of your data be restricted under certain conditions.
Right to data portability (Art. 20 GDPR) — You may request to receive your personal data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR) — You may object to processing based on legitimate interests at any time. We will then cease processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent (Art. 7(3) GDPR) — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at soissonyan@gmail.com.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux
Luxembourg
https://cnpd.public.lu/

11. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last updated. We encourage you to review this page periodically.