Privacy Policy
This privacy statement sets out how DEUS BV processes your personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Telecommunications Act (Telecommunicatiewet). Last updated: 18 May 2026.
01
About DEUS
DEUS BV is a specialized AI firm combining data science, engineering, UX design, and strategy. We act as the data controller under GDPR for any personal data we process. Our offices are located in Amsterdam (Netherlands), Porto (Portugal), and A Coruña (Spain).
For all privacy-related inquiries, please contact us at privacy@deus.ai.
02
What personal data do we process?
Contact form submissions
When you submit our contact form, we collect your name, company name, email address, and the content of your message. This data is processed by Formspree Inc., our contact form handling and email delivery provider.
Newsletter subscribers
We collect and process your email address when you subscribe to our newsletter. This data is processed by MailChimp (Intuit Inc.) as our service provider.
Website visitors (cookies and analytics)
We use Google Analytics 4 (GA4) to analyze visitor behavior for statistical analysis and website optimization. GA4 is operated by Google LLC, which is certified under the EU–US Data Privacy Framework (DPF), providing a legal basis for any transfer of data to servers in the United States.
GA4 places the following cookies on your device:
We have configured GA4 with the following privacy protections:
- ·IP addresses are anonymized by default
- ·Data retention is set to the minimum available (2 months) in GA4 settings
- ·Google Signals and advertising features are disabled
- ·Google Consent Mode v2 is enabled, ensuring GA4 only collects data after you have given consent
We only load GA4 after you have given explicit consent via our cookie banner. You may withdraw your consent at any time by clicking “Cookie settings” in the footer of our website.
We have a Data Processing Agreement (DPA) in place with Google. Google's privacy policy governs their use of the data: policies.google.com/privacy.
03
Cookies
We use the following categories of cookies:
Necessary cookies
Required for the website to function. These cookies cannot be refused and do not require your consent.
Analytics cookies
Used to understand how visitors interact with our website (Google Analytics 4). These are only placed after you give consent via our cookie banner.
We do not use advertising, marketing, or social media tracking cookies.
You can review and change your cookie preferences at any time by clicking “Cookie settings” in the website footer.
04
For what purposes do we process personal data?
- ·Contact form: to respond to your inquiry and, where relevant, to follow up on potential business opportunities
- ·Newsletter: to deliver our newsletter covering research, podcasts, and AI content
- ·Website analytics: to understand visitor behavior and optimize the website experience
05
Legal grounds for processing personal data
Contact form
Processing occurs on the basis of our legitimate interest (GDPR Article 6(1)(f)) in responding to your inquiry. When you submit a contact form, you reasonably expect us to use your data to reply. You may request deletion of your data at any time by emailing privacy@deus.ai.
Newsletter
Processing occurs on the basis of your explicit consent (GDPR Article 6(1)(a)), which you may withdraw at any time by emailing us or using the unsubscribe link in any newsletter.
Website analytics (GA4)
Processing occurs on the basis of your explicit consent (GDPR Article 6(1)(a)) given via the cookie banner. You may withdraw consent at any time by clicking “Cookie settings” in the footer.
06
To whom does DEUS share personal data?
We share personal data only with the following service providers, who act as data processors under a Data Processing Agreement with DEUS:
- ·Formspree Inc., for contact form handling and email delivery
- ·MailChimp (Intuit Inc.), for newsletter delivery
- ·Google LLC, for website analytics (Google Analytics 4), certified under the EU–US Data Privacy Framework
We do not sell or rent your personal data to third parties, and we do not share it with any other parties unless legally required to do so.
07
International data transfers
Data processed by Google Analytics 4 may be transferred to Google's servers in the United States. Google LLC is certified under the EU–US Data Privacy Framework (DPF), which provides an adequate level of data protection as recognized by the European Commission (adequacy decision of 10 July 2023). In the event that this framework is invalidated, Google's Standard Contractual Clauses (SCCs) serve as a supplementary transfer mechanism.
08
Your rights
Under GDPR you have the right to:
- ·Access your personal data
- ·Rectify inaccurate personal data
- ·Erase your personal data ("right to be forgotten")
- ·Restrict processing of your personal data
- ·Port your personal data to another controller
- ·Object to processing based on legitimate interests
- ·Withdraw consent at any time without affecting the lawfulness of prior processing
- ·Protection from automated decision-making and profiling
To exercise any of these rights, please contact privacy@deus.ai. We may need to verify your identity before acting on a request and will respond within 30 days.
09
How long do we keep your personal data?
We do not retain personal data longer than is necessary for the purposes described in this statement.
10
Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure.
11
Questions and complaints
For any questions about this statement or how we handle your data, please contact privacy@deus.ai.
If you are not satisfied with our response, you have the right to lodge a complaint with:
Autoriteit Persoonsgegevens
Dutch Data Protection Authority
Website: www.autoriteitpersoonsgegevens.nl
Telephone: +31 (0)70 888 85 00