Privacy Policy

1. Controller

nonplusultra Sales GmbH
August-Everding-Straße 25
81671 Munich, Germany
contact@nonplusultra.eu

2. Data we collect

When you visit our website, our servers temporarily store connection data including your IP address, the page visited, date and time, and browser information. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure operation of our website).

When you submit a contact form or book a discovery call, we process the information you provide (name, company, email, and message) to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (contract initiation) and Art. 6(1)(f) GDPR (legitimate interest).

When we share documents such as presentations via a personalised link (for example a proposal deck), we record access events for that link: time of access, the sections viewed and for how long, video playback, approximate location (country and city derived from the IP address, which itself is not stored), and device type. No cookies are set and nothing is stored on your device. We use this to follow up on active business conversations. The legal basis is Art. 6(1)(f) GDPR (legitimate interest); the data is deleted after 12 months at the latest.

3. Cookies and tracking

We ask for your consent with our own banner, without an external service. Google Analytics 4 sets its cookies, and shares data with Google Ads, only if you agree. Without consent, Google's services send only cookieless signals that store nothing on your device (Google Consent Mode). We keep your choice for 12 months in a cookie named “npu_consent” on your device and, as proof of consent, as a record with a random ID, the time and your choice, without your IP address, on our server (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). You can change or withdraw your consent at any time under “Cookie settings” in the footer.

With your consent to marketing, we use Google Ads to measure our campaigns and for remarketing; for this, Google Analytics shares conversions and audiences with our linked Google Ads account.

With your consent, we use Google Analytics 4 (GA4) to analyse website usage. GA4 uses IP anonymisation. Data is processed under Google's Data Processing Agreement. You can prevent tracking by declining analytics cookies or using the Google Analytics opt-out browser add-on.

4. Third-party services

Calendly— we embed Calendly for scheduling discovery calls. When you use Calendly, Calendly's own privacy policy applies. Data is processed in the USA; an adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses are in place.

Typeform — we use Typeform for contact forms. Typeform processes submitted data under its own privacy policy. Data may be transferred to the USA under standard contractual clauses.

5. Your rights

Under GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise these rights, contact us at contact@nonplusultra.eu. You also have the right to lodge a complaint with a supervisory authority (Bayerisches Landesamt für Datenschutzaufsicht).

6. Data retention

Contact enquiry data is retained for the duration of our business relationship and deleted after fulfilment of the purpose unless statutory retention obligations apply. Server log files are deleted after 7 days.