Last updated: June 2026 1. Controller & Contact The controller responsible for data processing on this website is: WestendStrategy & Company KG Große Gallusstraße 14, 45. Etage / T1 / FOUR 60315 Frankfurt am Main, Germany Managing Partners: Kaan Özkan & Matthias Hoppe Email: compliance@nelveon.com 2. General Information We take the protection of your personal data seriously. This Privacy Policy explains what data we collect, how we use it, and what rights you have. This website is operated under the Nelveon brand by WestendStrategy & Company KG and is hosted via OnePage.io and IONOS. 3. Hosting This website is hosted by: OnePage.io — Hosting and website infrastructure IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany — Additional hosting infrastructure When you visit this website, your browser automatically transmits technical data to the hosting servers, including your IP address, browser type, operating system, referring URL, and time of access. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). 4. Cookies & Tracking This website uses cookies and tracking technologies to analyze usage, measure performance, and improve our services. The following tools may be in use: Google Analytics Google Analytics collects anonymized usage data including pages visited, time on site, and traffic sources. Data is processed by Google LLC (USA). We have enabled IP anonymization. Legal basis: Art. 6(1)(a) GDPR (consent). Google Ads / Google Tag Manager Used to measure the effectiveness of advertising campaigns and manage tracking tags. Legal basis: Art. 6(1)(a) GDPR (consent). Meta Pixel (Facebook/Instagram) Used to track conversions from Meta advertising and to enable retargeting. Data is processed by Meta Platforms Ireland Ltd. Legal basis: Art. 6(1)(a) GDPR (consent). Hotjar Used to analyze user behavior through heatmaps, session recordings, and feedback tools. Data is processed by Hotjar Ltd. (Malta). Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent to non-essential cookies at any time via our cookie settings. Essential cookies required for the operation of this website are set on the basis of Art. 6(1)(f) GDPR. 5. Contact Form & CRM Processing When you submit an inquiry through our Think With Us contact form, we collect the personal data you provide (e.g. name, email address, company, message content) for the purpose of responding to your inquiry and managing our business relationship. Data submitted through the contact form is processed and transferred through the following systems: OnePage.io — Form collection Zapier, Make (Integromat), n8n — Automated data routing and workflow automation Pipedrive, HubSpot, Salesforce, Google Workspace — CRM and contact management All data transfers are conducted on the basis of data processing agreements with each respective provider. Your data will only be used to process and respond to your inquiry and to maintain our business relationship. Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient business communication). We retain contact data for as long as necessary to fulfill the purpose for which it was collected, and in compliance with applicable statutory retention periods. 6. Third-Party Services & International Transfers Some of the tools listed above involve data transfers to third countries, in particular the United States. These transfers are conducted on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards pursuant to Art. 46 GDPR. 7. AI-Generated Content This website may use AI tools for content creation and image generation. No personal data is used as input for AI-generated content. Any data submitted through contact forms is not used for AI training purposes. 8. Your Rights Under the GDPR, you have the following rights: Right of access — Art. 15 GDPR Right to rectification — Art. 16 GDPR Right to erasure — Art. 17 GDPR Right to restriction of processing — Art. 18 GDPR Right to data portability — Art. 20 GDPR Right to object — Art. 21 GDPR Right to withdraw consent — Art. 7(3) GDPR To exercise any of these rights, please contact us at legal@nelveon.com. You also have the right to lodge a complaint with the competent supervisory authority. The responsible authority for WestendStrategy & Company KG is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Postfach 3163, 65021 Wiesbaden, Germany www.datenschutz.hessen.de 9. Changes to This Policy We reserve the right to update this Privacy Policy at any time. The current version is always available on this page. Continued use of this website following any update constitutes acceptance of the revised policy. For all data protection inquiries: compliance@nelveon.com