Privacy Policy

Last updated: October 2026

Data controller

Northbound Tech Advisory, Athens, Greece. Email: [email protected], phone: +30 211 008 8092. For any question about your personal data you can contact us at the email above.

What we collect and why

Booking a conversation (Microsoft Bookings): full name, email, phone (optional) and whatever you note in the comments field when booking. We use these solely to hold the conversation you requested (Teams invitation, reminder, any rescheduling) and to follow up afterwards. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in replying to people who contact us (Article 6(1)(f)). The booking page is loaded from Microsoft inside our website and is additionally subject to Microsoft's privacy statement.

Direct contact (email, phone, LinkedIn): the details you give us, for the same purpose and on the same legal basis.

Visitor statistics: we use Cloudflare Web Analytics, which sets no cookies, uses no device identifiers and does not track visitors across websites. Only aggregated, anonymous data is collected (page, country, device type, referrer). For this reason the website shows no cookie consent banner.

Technical logs: the hosting provider (Cloudflare) temporarily records IP addresses and technical request data for network security and operation.

Cookies

The website uses no advertising or tracking cookies. Only strictly necessary cookies may be set by Cloudflare for security and by Microsoft for the embedded booking page to function, which do not require consent.

Recipients and processors

Cloudflare, Inc. (hosting, content delivery, analytics). Microsoft Ireland Operations Ltd (Microsoft 365: Bookings appointments, calendar, Teams, email). These providers act as processors, are bound by contract and, where data is transferred outside the EEA, the transfer relies on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

We do not sell or pass personal data to third parties for their own purposes.

Retention

Booking details and correspondence are kept for as long as needed for the conversation, the reply and any resulting collaboration, and at most 24 months from the last contact, unless a contractual relationship follows, in which case the retention periods required by tax and commercial law apply.

Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). To exercise your rights, email [email protected].

Third-party links

The website links to LinkedIn and other third-party websites, whose own privacy policies apply.

Changes

This policy may be updated. The date of the last update is shown at the top of the page.