Privacy Policy

1. Controller

nonplusultra Sales GmbH
August-Everding-Straße 25
81671 Munich, Germany
contact@nonplusultra.eu

2. Data we collect

When you visit our website, our servers temporarily store connection data including your IP address, the page visited, date and time, and browser information. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure operation of our website).

When you submit a contact form or book a discovery call, we process the information you provide (name, company, email, and message) to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (contract initiation) and Art. 6(1)(f) GDPR (legitimate interest).

3. Cookies and tracking

We use Cookiebot to manage cookie consent in accordance with TTDSG and GDPR. Only cookies you have consented to are set. You may withdraw consent at any time by clicking the cookie settings link in the footer.

With your consent, we use Google Analytics 4 (GA4) to analyse website usage. GA4 uses IP anonymisation. Data is processed under Google's Data Processing Agreement. You can prevent tracking by declining analytics cookies or using the Google Analytics opt-out browser add-on.

4. Third-party services

Calendly — we embed Calendly for scheduling discovery calls. When you use Calendly, Calendly's own privacy policy applies. Data is processed in the USA; an adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses are in place.

Typeform — we use Typeform for contact forms. Typeform processes submitted data under its own privacy policy. Data may be transferred to the USA under standard contractual clauses.

5. Your rights

Under GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise these rights, contact us at contact@nonplusultra.eu. You also have the right to lodge a complaint with a supervisory authority (Bayerisches Landesamt für Datenschutzaufsicht).

6. Data retention

Contact enquiry data is retained for the duration of our business relationship and deleted after fulfilment of the purpose unless statutory retention obligations apply. Server log files are deleted after 7 days.