Privacy Policy

Controller and scope

The controller for this website is nVentic GmbH, Kirtaweg 19, 81829 Munich, Germany. You can contact us about privacy at web@nventic.com or by telephone at +49 173 6124847.

This notice applies to personal data processed when you visit nventic.com, use the contact form, register for a benchmark report, download material hosted by us, follow links to third-party websites, or allow us to measure website use with Google Analytics. It does not replace privacy information that may apply to a separate client engagement.

We do not sell personal data. Connections to this website are protected with HTTPS encryption.

Data processed when you visit

Our hosting infrastructure may process technical request data such as IP address, date and time, requested URL, referring page, browser information and response status. This is necessary to deliver and secure the website, investigate faults and prevent abuse.

The legal basis is our legitimate interest in providing a secure and reliable website under Article 6(1)(f) GDPR. Technical logs are retained only for the period required for security, troubleshooting and applicable legal obligations, then deleted or anonymised.

Contact form

If you use the contact form, we process the first name, last name, work email, company, role, inquiry type and message you submit. We use these details only to route and answer your inquiry, take requested pre-contractual steps and maintain an appropriate business record.

The legal basis is Article 6(1)(b) GDPR where your request concerns a potential or existing contract, and otherwise our legitimate interest in answering business inquiries under Article 6(1)(f) GDPR.

We retain an inquiry only as long as needed to answer it, manage the resulting business relationship and comply with applicable statutory retention duties. We do not add contact-form submissions to a mailing list without a separate opt-in.

Benchmark report registration

If you register to access a benchmark report, we process the first name, last name, work email, company and job title you submit, together with your choice about receiving further communications from nVentic. We use these details to provide the report you requested and to keep a record of that request.

The legal basis for providing the report is Article 6(1)(b) GDPR. Where you agree to receive further communications, that processing is based on your consent under Article 6(1)(a) GDPR. You can withdraw that consent at any time with effect for the future, for example through the unsubscribe link in any message or by contacting web@nventic.com.

HubSpot as form and CRM provider

Both forms are processed on our behalf by HubSpot (HubSpot, Inc. and its group companies), which provides the customer relationship management system in which we store and manage these requests. Submitted details are transmitted to and stored on HubSpot infrastructure in the United States.

Our use of HubSpot is governed by a data processing agreement. For transfers to the United States, HubSpot relies on the EU-U.S. Data Privacy Framework and on the European Commission Standard Contractual Clauses. HubSpot’s privacy information is available at legal.hubspot.com/privacy-policy.

Access to form submissions within HubSpot is limited to people who need it to answer inquiries, provide requested material and manage the resulting business relationship.

Recipients and international transfers

Personal data may be received by our website hosting provider, HubSpot as the provider of our forms and customer relationship management system, Google as the provider of Google Analytics where you have consented, and professional advisers or public authorities where disclosure is legally required. Service providers act under contractual and confidentiality obligations appropriate to their role.

Where a service provider processes data outside the European Economic Area, we rely on an applicable adequacy decision, the European Commission Standard Contractual Clauses, or another lawful transfer mechanism. You may contact us for information about the safeguards relevant to your data.

Web analytics with Google Analytics

If you accept analytics in the cookie banner, this website uses Google Analytics 4 to understand how visitors use the site, for example which pages are viewed, how visitors arrive and whether an enquiry or benchmark request was completed. Google Analytics is not loaded, and no analytics cookies are set, unless you accept.

Google Analytics stores cookies such as _ga and _ga_* on your device and processes usage data including pages visited, referring websites, approximate location derived from your connection, device and browser information, and the time of your visit. When a form is submitted successfully we record only that an enquiry took place and which form was used; we never pass names, email addresses, messages or other form contents to Google Analytics. Google signals and advertising personalisation are disabled, and the data is not used for advertising.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google LLC in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework. Google’s privacy information is available at policies.google.com/privacy.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can withdraw your consent at any time with effect for the future through Cookie settings, which is available on every page. Withdrawing stops analytics collection and removes the Google Analytics cookies set on this website.

Analytics data is retained only for the retention period configured in our Google Analytics account and is then deleted automatically.

Cookies, local storage and external links

Apart from Google Analytics after your consent, this website does not use analytics or advertising cookies. To remember your analytics choice, we store it in your browser’s local storage. This is technically necessary to respect your decision (Section 25(2) TDDDG and Article 6(1)(c) and (f) GDPR) and contains no identifier.

Links to external websites, including LinkedIn, become subject to the external provider’s privacy terms when you follow them. nVentic is not responsible for how those independent websites process data.

Your data-protection rights

Subject to the conditions in applicable law, you may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent for the future.

To exercise a right, contact web@nventic.com. We normally respond to GDPR requests within one month; that period may be extended where permitted for complex or numerous requests.

You also have the right to complain to a data-protection supervisory authority. The authority competent for private-sector organisations in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de.

Children

This business-to-business website is not directed to children. nVentic does not knowingly collect personal data from children through the website. If you believe a child has submitted information, contact us so we can review and delete it where appropriate.

Changes to this notice

We may update this notice when the website, our service providers or legal requirements change. The current version was updated on 16 September 2026.