Privacy Policy
Information obligation pursuant to Art. 12, 13 and 14 GDPR
Last updated: 10 July 2026
1. Privacy at a Glance
The protection of your personal data is important to us. Our commitment to data protection goes beyond legal requirements. Below we inform you about the processing of personal data when using our website. Personal data is any data that can be used to personally identify you, e.g. name, address, email address, phone number.
2. Responsible Entity
nordvisory - corporate finance | mergers + acquisitions
Tobias Sutantio
Schauenburgerstraße 59
20095 Hamburg
3. Data Collection on This Website
Hosting
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you access the website, Netlify processes the technical connection data of your browser (in particular IP address, date and time of access, requested page and browser identifier) to the extent required to deliver the content. Processing is based on Art. 6 (1) lit. f) GDPR due to our legitimate interest in the secure and performant operation of our website. Servers may be located in the USA; data transfers are based on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify.
Server Log Files
When you visit our website, information is automatically collected in so-called server log files, which your browser automatically transmits to us. Processing is based on Art. 6 (1) lit. f) GDPR due to our legitimate interest in ensuring the stability and functionality of our website.
Contact Form
When you send us inquiries via the contact form, your information from the inquiry form, including the contact data you provided, will be stored for the purpose of processing the inquiry and in case of follow-up questions. Processing is based on Art. 6 (1) lit. b) and f) GDPR. Your data will be deleted after your inquiry has been resolved, unless legal retention obligations apply.
4. Storage Duration
The storage duration of personal data depends on the period required to achieve the storage purpose or on statutory requirements.
5. Withdrawal of Consent
You may revoke any consent given at any time. The lawfulness of data processing carried out before the revocation remains unaffected. After revocation, your data will be deleted immediately unless there is another legal basis for processing.
6. Profiling and Scoring
No profiling or scoring takes place.
8. Your Rights
You have the right to information about your stored personal data, to rectification, deletion, restriction of processing, and to data portability in a structured, commonly used, and machine-readable format. Furthermore, pursuant to Art. 21 GDPR, you have the right to object to the processing of your personal data where it is based on Art. 6 (1) (f) GDPR (legitimate interest).
9. Right to Complain
You have the right to lodge a complaint with the competent supervisory authority:
10. Cookies
This website uses technically necessary cookies required for its operation. In addition, analytics cookies (Google Analytics 4) are set only with your explicit consent. You can adjust or revoke your cookie settings at any time via the "Cookie Settings" link in the footer. Details on the cookies used can be found in sections 12 and 13 of this Privacy Policy and in the cookie consent banner.
11. Third-Party Content
Third-party providers may set their own cookies to track activities and personalize content.
12. Contact Form (Netlify Forms)
The contact form on this website is powered by the Netlify Forms service. When you submit the form, the data you enter is transmitted to and stored by our hosting provider Netlify so that we can process your inquiry.
Provider
Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.
Data Residency
Form submissions are stored on Netlify’s infrastructure in the USA. By submitting the form, your data is therefore transferred to the USA.
Data Processing Agreement
A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Netlify. The transfer of data to the USA is based on the EU Standard Contractual Clauses and supplementary safeguards.
Purpose of Processing
Receipt, storage and processing of contact inquiries submitted via the contact form on this website, and the initiation and maintenance of business relationships with existing and potential clients.
Legal Basis
Art. 6 (1) (b) GDPR (preparatory and contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in efficient handling of inquiries). Your consent via the GDPR checkbox on the contact form covers the storage and processing of the transmitted data.
Categories of Data Processed
First and last name, email address, optionally phone number and company, subject / mandate type, content of your message, and time of inquiry. Simply visiting the website without submitting the form does not cause any personal data to be collected via Netlify Forms.
Storage Duration
Data from contact inquiries is stored for the duration of the business relationship and any statutory retention periods (typically 6 to 10 years under German Commercial Code / Tax Code). Upon request, your data will be deleted promptly, unless statutory retention obligations apply.
Objection & Information
You can object to the storage of your data at any time informally via email to info@nordvisory.de. On request, you will also receive information about all data stored about you.
13. Google Analytics 4
Provider
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Purpose of Processing
Analysis of visitor behaviour on this website, creation of anonymised usage statistics, and optimisation of website content.
Legal Basis
Art. 6 (1) (a) GDPR (consent). Google Analytics 4 is activated exclusively after your explicit consent via our cookie banner.
Google Consent Mode v2
We use Google Consent Mode v2. By default, analytics_storage is set to "denied" – Google Analytics does not collect any personal data without your consent. Full measurement is only activated after your consent is given.
IP Anonymisation
Google Analytics 4 anonymises IP addresses by default. No complete IP address is transmitted to Google.
Data Transfers to Third Countries
Google may transfer data to servers in the USA. Such transfers are based on the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR. Google LLC is certified under the EU-US Data Privacy Framework.
Storage Duration
The retention period for event data in Google Analytics 4 is limited to 14 months. Browser cookies (_ga, _ga_N625BDKGM8) are stored for a maximum of 2 years.
Objection & Opt-out
You can revoke your consent at any time via the "Cookie Settings" link in the footer of this website. Alternatively, you can prevent data collection by Google Analytics using the browser add-on at the following link: Disable Google Analytics ↗
7. Social Networks
Our website contains links to LinkedIn. The mere inclusion of these links does not result in the collection of personal data. Please refer to the privacy policies of the respective platforms.