Privacy Policy

This is a courtesy translation. The legally binding version is the German privacy policy.

We would like to welcome you to the website of True North Consulting Pamax UG (haftungsbeschränkt). Data protection naturally has a particularly high priority for the management of True North Consulting Pamax UG (haftungsbeschränkt). In principle, this website can be used without providing any personal data. However, if you wish to use a service via our website, the collection, storage and transfer of your personal data may become necessary. Of course, we will always inform you of possible data collection before such processing takes place, and it happens exclusively with your consent.

The General Data Protection Regulation (GDPR) introduced a number of new terms, and you as a data subject have gained several rights, which we outline below. At the same time, we as the controller have taken on additional obligations, which we are happy to explain in this privacy policy. We have taken all necessary technical and organizational measures to protect your data as well as possible. Despite all efforts, no one can ever fully rule out a security vulnerability; should this occur, we will inform you and close the vulnerability immediately.

Contact details of the controller

True North Consulting Pamax UG (haftungsbeschränkt)
An den Röthen 20, 61381 Friedrichsdorf, Germany
Email: kontakt@truenorth-consulting.de
Website: www.truenorth-consulting.de
Represented by: Patrick Barme – Managing Director, Max de Boer – Managing Director

Data protection officer

In accordance with Art. 37 GDPR in conjunction with § 38 BDSG, we are not obliged to appoint a data protection officer. If you have any questions about data protection or wish to exercise your rights listed below, you can of course contact us at any time using the contact details above.

Types of data processed

The following data may be collected from you, or obtained through your visit:

  • Address data: first name, last name
  • Content data: text input
  • Contact data: phone number, mobile number, email address
  • Other data: qualification data, time-tracking data
  • Technical data: device information, IP address, log data, protocol files
  • Behavioral data: frequency of website access, interest in website content, click behavior, access times, reading times

Purpose of processing

Your data is collected for various reasons. Primarily, the collection enables us to provide our online offering in the form of our website. Certain functions and content can only be provided with the help of your data. Furthermore, the collection enables us to analyze user behavior in order to create a better visitor experience and to analyze and optimize our own web presence. Data is also collected via the contact form so that we can process and answer your inquiries and suggestions. The same applies to comment functions. Finally, the data also allows us to take various security measures to make our website safer.

In summary: analysis of our own web presence, analysis of user behavior, adaptation of security measures, optimization of the web presence, handling of application inquiries, provision of the website and the entire online offering, simplified contact.

Cookies

The websites of True North Consulting Pamax UG (haftungsbeschränkt) use cookies. Cookies are text files that are stored on a computer system via a web browser. Many cookies contain a so-called cookie ID – a unique identifier consisting of a character string by which websites and servers can be assigned to the specific browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual browser of the data subject from other browsers containing other cookies. Through the use of cookies, True North Consulting Pamax UG (haftungsbeschränkt) can provide users of this website with more user-friendly services that would not be possible without them. You can prevent the setting of cookies by our website at any time via a corresponding setting in your browser and thus permanently object to the setting of cookies.

Contact form

When you get in touch (via contact form, email, phone or social media), your details are processed to handle the inquiry in accordance with Art. 6 para. 1 lit. b GDPR (contractual/pre-contractual relationships) and Art. 6 para. 1 lit. f GDPR (other inquiries). This information may be stored in a customer relationship management system (CRM) or comparable inquiry organization. We delete inquiries as soon as they are no longer necessary; necessity is reviewed every two years, and statutory archiving obligations apply.

The technical processing of data submitted via this website's contact form is handled by Netlify Forms (Netlify Inc., San Francisco, USA). For more information, see the Netlify privacy policy.

Legal basis under Art. 6 ff. GDPR

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. Unless stated otherwise in this privacy policy, the following applies: the legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR; for processing to fulfill our services, carry out contractual measures and answer inquiries, Art. 6 para. 1 lit. b GDPR; for processing to fulfill our legal obligations, Art. 6 para. 1 lit. c GDPR; and for processing to protect our legitimate interests, Art. 6 para. 1 lit. f GDPR. If vital interests of the data subject or another natural person require processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Security measures

Taking into account Art. 32 GDPR and the state of the art, we implement appropriate technical and organizational measures to minimize the risk of unlawful handling of your personal data — including safeguarding the confidentiality, integrity and availability of your data through physical access controls to buildings and data carriers, separation of data categories, control of access and disclosure rights, and more.

Storage period of personal data

We may only retain and store your personal data on the basis of statutory periods. After expiry of such a period, we are obliged to delete your personal data unless it is still required for the performance of a contract or the initiation of a new contract, in which case our lawful claim under Art. 6 GDPR applies. We must also comply with certain statutory periods that prescribe longer retention.

Google Analytics

Google uses cookies that store information about a user's use of the online offering and transfer it to and store it on a Google server in the USA. Google uses this information on our behalf to evaluate the use of the online offering and to compile activity reports. We use Google Analytics only with IP anonymization activated, meaning users' IP addresses are truncated by Google within EU member states. Users' personal data is deleted or anonymized after 14 months. This processor is used by us on the basis of our legitimate interests under Art. 6 para. 1 lit. f GDPR and a data processing agreement under Art. 28 para. 3 sentence 1 GDPR.

Google Fonts

We embed fonts ("Google Fonts") from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you open a page, your browser loads the required web fonts into its cache to display texts and fonts correctly. For this purpose, your browser must connect to Google's servers, giving Google knowledge that our website was accessed via your IP address. The use of Google Web Fonts is based on our legitimate interest in a uniform and appealing presentation of our online offering under Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer is used.

YouTube

We embed videos from the "YouTube" platform of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube in enhanced privacy mode. According to YouTube, no information about visitors is stored on this website before they watch the video. As soon as you start a YouTube video on our website, a connection to YouTube's servers is established, telling the YouTube server which of our pages you have visited. This processor is used on the basis of our legitimate interests under Art. 6 para. 1 lit. f GDPR.

LinkedIn

Functions and content of the "LinkedIn" service, offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, may be integrated within our online offering — including images, videos, texts or buttons with which users can share content of this online offering on LinkedIn. The privacy policy can be found at https://www.linkedin.com/legal/privacy-policy. This processor is used on the basis of our legitimate interests under Art. 6 para. 1 lit. f GDPR.

Outbound links

Where we use external links offered within our websites, this privacy policy does not extend to those links. When we offer links, we endeavor to ensure that they also comply with our data protection and security standards. However, we have no influence on other providers' compliance with data protection and security regulations. Please therefore also inform yourself about the privacy policies provided on the websites of other providers.

Your rights as a data subject

You have the following rights:

  • Access (Art. 15 GDPR): you can request information about the personal data we process about you.
  • Rectification (Art. 16 GDPR): you can request the correction of inaccurate data.
  • Erasure (Art. 17 GDPR): you can request the deletion of your data, provided no statutory retention obligations apply.
  • Restriction of processing (Art. 18 GDPR): you can request the restriction of the processing of your data.
  • Data portability (Art. 20 GDPR): you can request to receive your data in a structured, common format.
  • Objection (Art. 21 GDPR): you can object to the processing of your data.
  • Withdrawal of consent (Art. 7 para. 3 GDPR): you can withdraw given consent at any time.

You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR.

Closing remarks

If you have any further questions, or if you notice incomplete information, please feel free to contact us at any time.