Privacy Policy

Last updated: July 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Dr. Arnold Martin
Ramie-Str. 39
79312 Emmendingen
Germany

Email: arnold@truenorthloyaris.com

2. General Information on Data Processing

We process personal data only to the extent necessary to provide this website, respond to inquiries, operate and secure our digital services, and communicate with visitors, clients and potential business partners.

Personal data means any information relating to an identified or identifiable natural person, such as name, email address, contact details, IP address or the content of a message submitted through a contact form.

The legal bases for processing personal data are, depending on the specific case:

  • Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures or the performance of a contract;
  • Art. 6(1)(f) GDPR where processing is necessary for our legitimate interests, such as operating a secure website, responding to business inquiries and protecting our systems;
  • Art. 6(1)(c) GDPR where processing is necessary to comply with legal obligations;
  • Art. 6(1)(a) GDPR where consent is requested and given.

3. Hosting and Server Log Files

This website is hosted by Hostinger. When you visit the website, technical data may be processed automatically by the hosting provider and server infrastructure.

This may include:

  • IP address
  • date and time of access
  • requested page or file
  • browser type and version
  • operating system
  • referrer URL
  • hostname of the accessing device
  • technical status codes and similar log information

This data is processed to ensure the secure and reliable operation of the website, to detect technical errors, to prevent misuse and to maintain system security.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient operation of this website.

Server log files are stored only for as long as necessary for the above purposes, unless longer storage is required for security reasons or legal obligations.

4. Contact by Email

If you contact us by email, we process the personal data you provide in order to handle your inquiry. This may include your name, email address, company or organisation, the content of your message and any additional information you voluntarily provide.

The processing is carried out for the purpose of responding to your inquiry, communicating with you and, where applicable, preparing or conducting a business relationship.

The legal basis is Art. 6(1)(b) GDPR where the inquiry relates to pre-contractual or contractual matters. In other cases, the legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries and maintaining business communication.

We store inquiry-related data only for as long as necessary to process the request and any resulting communication, unless statutory retention obligations apply.

5. Contact Forms

This website may use contact forms, for example on the Contact page or in connection with buttons such as “Start a Conversation”.

If you submit a contact form, we process the information entered into the form. Depending on the form design, this may include:

  • name
  • email address
  • company or organisation
  • telephone number, if provided
  • subject or area of interest
  • message content
  • time of submission
  • technical metadata necessary for form processing and security

The purpose of processing is to receive and respond to your inquiry, evaluate your request, communicate with you and, where applicable, prepare a potential business relationship.

The legal basis is Art. 6(1)(b) GDPR where the contact relates to pre-contractual or contractual communication. For general inquiries, the legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in efficient and structured communication with website visitors and potential clients.

The website currently uses Fluent Forms as a form plugin. Form submissions may be stored within the WordPress system and/or forwarded by email to the responsible contact person. The data is not used for marketing newsletters unless you have separately and explicitly consented to such use.

Form data is stored only for as long as necessary to process the inquiry and any resulting communication, unless legal retention obligations require longer storage.

6. Cookies and Technically Necessary Technologies

This website may use technically necessary cookies or similar technologies to provide basic website functionality, improve security, enable caching, maintain user sessions or ensure proper operation of WordPress and installed plugins.

Technically necessary cookies and comparable technologies are used on the basis of Art. 6(1)(f) GDPR and, where applicable, the relevant provisions of German telecommunications and digital services data protection law. Our legitimate interest lies in providing a functional, secure and efficient website.

At this stage, the website does not intentionally use analytics, marketing or advertising cookies. If such services are introduced in the future, this Privacy Policy will be updated and, where required, consent will be requested before such technologies are activated.

7. Local Fonts

This website uses custom fonts. Where possible, fonts are loaded locally from the website server rather than from external font providers. This means that no connection to external font servers is intended solely for font loading.

The legal basis for local font integration is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a consistent, performant and privacy-friendly website design.

8. Website Tools, Plugins and Security

This website is based on WordPress and uses selected plugins and tools for website design, performance, SEO, security, backups and technical operation. These may include, among others:

  • Kadence / Kadence Blocks for layout and page building
  • LiteSpeed Cache for caching and performance optimisation
  • Rank Math SEO for search engine optimisation
  • UpdraftPlus for website backups
  • Hostinger Tools for hosting-related functionality
  • Simple Custom CSS and JS for site-specific design adjustments
  • Custom Fonts for local font handling
  • Fluent Forms for contact forms

These tools may process technical data necessary for their respective functions. The purpose is to provide, secure, optimise and maintain the website.

The legal basis is generally Art. 6(1)(f) GDPR, based on our legitimate interest in operating a secure, functional and technically optimised website. Where processing is required to comply with legal obligations, the legal basis is Art. 6(1)(c) GDPR.

Backups may contain website content and, where applicable, data submitted through forms. Backups are retained only for as long as necessary for website recovery and security purposes.

9. Comments

Comments are currently disabled on this website. Visitors are not intended to submit public comments through the website.

If comments are enabled in the future, this Privacy Policy will be updated to describe the related processing of personal data, including comment content, name, email address, IP address and technical metadata.

10. Analytics and Marketing Tracking

This website currently does not intentionally use Google Analytics, Google Tag Manager, Meta Pixel or comparable marketing or tracking tools.

If analytics or marketing tracking tools are introduced in the future, this Privacy Policy will be updated accordingly. Where required, such tools will only be activated after consent has been obtained.

11. External Content and Embedded Services

This website currently does not intentionally embed external content such as Google Maps, YouTube videos, LinkedIn widgets or comparable third-party services.

If such external services are embedded in the future, personal data such as IP addresses and technical browser data may be transmitted to the respective third-party providers. In that case, this Privacy Policy will be updated and, where required, appropriate consent mechanisms will be implemented.

12. Newsletter

This website currently does not offer a newsletter subscription.

If a newsletter is introduced in the future, this Privacy Policy will be updated to describe the processing of subscription data, consent, double opt-in procedures, mailing service providers and unsubscribe options.

13. Data Recipients

Personal data may be processed by service providers that support the operation of this website, including hosting, website maintenance, email delivery, form processing, backups and technical security.

Where required, such service providers are engaged on the basis of data processing agreements pursuant to Art. 28 GDPR.

Personal data is not sold to third parties.

14. International Data Transfers

We aim to use services that process data within the European Union or the European Economic Area where possible.

If personal data is transferred to countries outside the European Union or the European Economic Area, such transfers will only take place where permitted under applicable data protection law, for example on the basis of an adequacy decision, standard contractual clauses or another lawful transfer mechanism.

15. Storage Period

Personal data is stored only for as long as necessary for the purposes for which it was collected.

Different retention periods may apply depending on the type of data:

  • server log files are generally stored only for a limited technical and security-related period;
  • contact inquiries are stored for as long as needed to process the request and any resulting communication;
  • business-related communication may be retained longer if statutory retention obligations apply;
  • backup data is retained only for the period necessary for website recovery and security.

Once the relevant purpose no longer applies and no legal retention obligation exists, personal data will be deleted or restricted.

16. Your Rights

As a data subject, you have the following rights under the GDPR, subject to the applicable legal requirements:

  • the right of access to your personal data;
  • the right to rectification of inaccurate personal data;
  • the right to erasure of personal data;
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to processing based on legitimate interests;
  • the right to withdraw consent at any time, where processing is based on consent.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you may contact us at:

arnold@truenorthloyaris.com

17. Right to Lodge a Complaint

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

You may contact the supervisory authority responsible for your place of residence, your workplace or the place of the alleged infringement.

For Baden-Württemberg, the competent supervisory authority is generally:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

18. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect the transmission of data. You can recognise an encrypted connection by the “https://” prefix in the browser address bar.

Encryption helps protect data transmitted through the website from unauthorised access by third parties.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technical developments or changes to the services used on this website.

The version published on this website is the currently applicable version.