Privacy Policy

Northstone Partners (“we”, “us”, “our”) processes personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

1. Data Controller

Northstone Partners ApS
CVR: 42991791
Address: Solvænget 6, 2630 Taastrup
E-mail: her@northstonepartners.dk
Phone: +45 4259 8585

2. Purpose of Processing Personal Data

We process personal data for the following purposes:

• Delivery of advisory services, workshops, and board work
• Customer administration, invoicing, and contract management
• Communication with clients, partners, and potential clients
• Compliance with legal obligations
• Operation and improvement of the website and digital services
• Marketing (only with consent or legitimate interest)

3. Categories of Personal Data

As a general rule, we only process ordinary personal data:

• Name, position, and contact details
• Company information
• Notes from sparring meetings, workshops, and analyses
• E-mail correspondence
• IP address (when using the website)

We do not process CPR numbers or sensitive information unless you provide them yourself and they are necessary for the task.

4. Legal Basis

We process data on the following legal grounds:

• Art. 6(1)(b) – performance of a contract
• Art. 6(1)(c) – legal obligation
• Art. 6(1)(f) – legitimate interest in advisory services, communication, and business operations
• Art. 6(1)(a) – consent (only for marketing and newsletters)

5. Disclosure of Personal Data

Personal data is only disclosed to:

• Trusted data processors (e.g., IT systems, hosting, accounting)
• Legal advisors if required for the assignment – by agreement
• Public authorities if we are legally obligated to do so

We never sell personal data.

6. Transfer to Third Countries

If data is transferred outside the EU/EEA, we only use providers with:

• Valid Standard Contractual Clauses (SCC), or
• Other valid transfer mechanisms

7. Storage of Personal Data

We store data for as long as necessary:

• Client data: up to 5 years after the end of the collaboration (Accounting Act)
• Meeting notes and assessments: deleted or anonymised after 24 months
• Marketing data: deleted upon withdrawal of consent

8. Your Rights

You have the right to:

• Access
• Rectification
• Erasure
• Restriction
• Data portability
• Objection
• Withdrawal of consent

Requests should be sent to: her@northstonepartners.dk

9. Security

We protect your information through:

• Encryption
• Secure access control
• Time-limited storage
• Structured data protection procedures

10. Complaints

Complaints can be submitted to:
The Danish Data Protection Agency
Carl Jacobsens Vej 35, 2500 Valby
www.datatilsynet.dk