Privacy Policy

1. Controller under the GDPR

2. General information on data processing

3. Provision of the website and log files

Each time our website is accessed, our system automatically collects the following data:

• Browser type and version
• Operating system of the user
• Internet service provider
• IP address
• Date and time of access
• Referrer URL

The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted after no more than 7 days.

4. Email contact

This website does not include a contact form. If you contact us by email or telephone, the data you provide is processed, typically:

• First and last name
• Email address
• Company (optional)
• Message content

The legal basis is Art. 6 (1) (a) GDPR (consent) or Art. 6 (1) (b) GDPR for pre-contractual measures. Data is deleted once the relevant conversation is concluded, unless statutory retention obligations apply.

5. Cookies

Our website uses technically necessary cookies to ensure core functionality. The legal basis is Art. 6 (1) (f) GDPR. You can disable or delete cookies at any time in your browser settings. Analytics cookies are only set based on your explicit consent under Art. 6 (1) (a) GDPR.

6. Web hosting

This website is operated on the Lovable platform (Lovable Labs Incorporated) and delivered via the infrastructure of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Use is based on Art. 6 (1) (f) GDPR in the interest of a secure and efficient provision of our website. A data processing agreement (DPA) under Art. 28 GDPR has been concluded with the hosting provider.

7. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time without giving reasons (Art. 7 (3) GDPR)

To exercise your rights, please contact: contact@nordbridge-partners.com

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR). The competent authority for Nordbridge Partners UG, based in Dahn, Rhineland-Palatinate, is:

9. SSL / TLS encryption

For security reasons, this website uses SSL / TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar. When encryption is active, data you transmit to us cannot be read by third parties.

10. Sharing data with third parties

Your personal data is only shared with third parties in the following cases:

• You have given your explicit consent (Art. 6 (1) (a) GDPR)
• The disclosure is necessary to perform a contract (Art. 6 (1) (b) GDPR)
• A legal obligation to share the data exists (Art. 6 (1) (c) GDPR)
• The disclosure is necessary to safeguard legitimate interests (Art. 6 (1) (f) GDPR)

Processors are contractually bound under Art. 28 GDPR and obliged to process data only according to our instructions.

11. Validity of this policy

This privacy policy is currently valid and dated June 2026. We reserve the right to update it as our website evolves or legal requirements change. The latest version is always available on this page.