Privacy

PRIVACY NOTICE Last updated: 2 September 2026 Northpeak Group respects your privacy and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Czech data-protection law. 1. Who is responsible for your personal data? The data controller is: Northpeak Group s.r.o. Italská 2368 272 01 Kladno Czech Republic Company ID (IČO): 24485977 VAT ID (DIČ): CZ24485977 Registered with the Municipal Court in Prague, Section C, File 441966 Email: hello@northpeakgroup.cz 2. What personal data do we process and why? Website operation and security When you visit this website, technical information may be processed to deliver, secure and maintain the website. This may include IP address, browser and device information, requested pages, timestamps and similar technical data. Purpose: Website delivery, security, troubleshooting and prevention of misuse. Legal basis: Our legitimate interests in operating and securing our website (Article 6(1)(f) GDPR). Contact form and business enquiries If you contact us through the website or by email, we may process information such as your name, company, work email address, the subject of your enquiry and any information you include in your message. Purpose: To respond to your enquiry, discuss potential cooperation and, where relevant, take steps before entering into a contract. Legal basis: Article 6(1)(b) GDPR where processing is necessary in connection with a potential contract, and otherwise our legitimate interests in responding to business enquiries under Article 6(1)(f) GDPR. Analytics We use Google Analytics 4 to understand how visitors use the website and to improve its performance and content. Analytics is activated only where the required consent has been provided through our consent-management platform. Depending on your consent and configuration, analytics data may include online identifiers, device and browser information, approximate location, pages viewed and interaction data. Purpose: Website analytics and improvement. Legal basis: Your consent (Article 6(1)(a) GDPR). You can withdraw or change your consent at any time through the cookie-consent interface on the website. Cookie and consent preferences We use Cookiebot by Usercentrics to manage cookie choices and document consent. The service may process information required to display the appropriate consent interface and record your choices, such as consent status, consent ID, date and time, website URL, browser or device information and IP-related information. Purpose: Managing and documenting cookie preferences and consent. Legal basis: Compliance with applicable privacy requirements and our legitimate interests in operating a compliant consent-management mechanism. Business communications and B2B outreach In a business-to-business context, we may process professional contact information about relevant business representatives, such as name, job title, company, business email address, business telephone number and publicly available professional information. Such information may come directly from you, from your employer or organisation, from referrals, or from publicly available business sources such as company websites, professional directories and professional networking platforms. Purpose: Relevant business development, introducing our specialist services and maintaining professional business relationships. Legal basis: Our legitimate interests in developing and operating our business (Article 6(1)(f) GDPR), subject to your rights and applicable rules on electronic communications and direct marketing. You may object to processing for direct-marketing purposes at any time by contacting hello@northpeakgroup.cz. If you object to direct marketing, we will stop using your personal data for that purpose. 3. Cookies The website uses strictly necessary technologies required for its operation and consent management. Other technologies, including analytics, are used only according to the consent choices available through our cookie banner. You can change or withdraw your cookie consent at any time using the cookie-consent interface available on the website. 4. Who may receive your personal data? We use selected service providers to operate the website and our business. Depending on how you interact with the website, these may include: Framer B.V. — website hosting, website infrastructure and form processing. Google — Google Workspace for business communications and Google Analytics / Google Tag Manager for website measurement and tag management, where applicable and subject to consent requirements. Usercentrics A/S — Cookiebot consent-management platform. Professional advisers, accountants, legal advisers, IT providers or public authorities where this is necessary for our business or required by law. These providers process personal data under their own legal responsibilities or on our behalf under appropriate data-processing arrangements, as applicable. We do not sell your personal data. 5. International data transfers Some service providers may process personal data outside the European Economic Area. Where personal data is transferred to a country that does not benefit from an applicable adequacy decision, we rely on appropriate safeguards required by GDPR, such as the European Commission’s Standard Contractual Clauses, where applicable. 6. How long do we keep personal data? We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal obligations. In particular: Contact enquiries and general business correspondence are normally retained for up to 24 months after the last substantive interaction if no ongoing contractual relationship is established. B2B prospecting and business-development contact data are normally retained for up to 24 months after the last relevant interaction, unless you object earlier or a longer period is justified by an ongoing business relationship. Where a contractual relationship is established, relevant records may be retained for the duration of the relationship and afterwards for the period required by applicable accounting, tax, limitation and other legal obligations. Google Analytics user- and event-level data may be retained for up to 14 months depending on the configured Analytics settings and data type. Cookiebot consent records are retained according to the consent-management service’s configured and contractual retention rules. We may retain limited information where necessary to document an opt-out, establish or defend legal claims, or comply with a legal obligation. 7. Your rights Subject to the conditions set out in GDPR, you may have the right to: - request access to your personal data; - request correction of inaccurate or incomplete personal data; - request deletion of your personal data; - request restriction of processing; - receive personal data you provided to us in a portable format where the right to data portability applies; - object to processing based on legitimate interests; - object at any time to processing for direct-marketing purposes; - withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal. To exercise your rights, contact: hello@northpeakgroup.cz We may need to verify your identity before fulfilling a request. 8. Automated decision-making We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects on you. 9. Complaints If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority. In the Czech Republic, this is: Office for Personal Data Protection (Úřad pro ochranu osobních údajů) Pplk. Sochora 27 170 00 Prague 7 Czech Republic Website: https://uoou.gov.cz/ You may also contact us first at hello@northpeakgroup.cz and we will try to address your concern. 10. Changes to this Privacy Notice We may update this Privacy Notice when our website, services, technologies or legal obligations change. The current version will always be published on this page together with the date of the latest update.