Legal
Privacy
We limit the processing of personal data on this website to what is necessary for secure operation and direct communication.
1. Controller
Northwind – Payroll Service & HR Consulting GmbHClaus-von-Stauffenberg-Weg 1c
21684 Stade
Germany
Phone: +49 4141 800 669 0
Email: kontakt@northwind-hr.de
2. Hosting and server logs
This website is provided through Vercel. When you access the website, technically necessary information may be processed, including IP address, date and time, requested page, amount of data transferred, referrer, browser type, operating system and request status. This data is used to deliver the website securely and reliably, analyse errors and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website. The recipient or processor is Vercel Inc., USA. Data may therefore be processed in third countries. According to Vercel, suitable safeguards include the EU-US Data Privacy Framework and Standard Contractual Clauses.
Further information: Vercel privacy notice.
3. Cookies, analytics and advertising
We currently do not use analytics or advertising services on this website. The website itself does not set non-essential cookies and does not use Google Analytics or comparable tracking technologies.
4. Contact and contact form
If you contact us through the contact form, by email or by phone, we process the information you provide to handle your enquiry and any follow-up questions. The contact form asks for your name, business email address, company, optional phone number, number of employees, required service, preferred start date and message.
The form sends your details solely as an email to Northwind. They are not stored in a website database or sent to CRM or marketing services. We use Resend, a service provided by Plus Five Five, Inc., USA, as a processor for technical email delivery. Data may be processed in the USA. According to the provider, the EU-US Data Privacy Framework and Standard Contractual Clauses are used as safeguards. Further information: Resend privacy notice.
The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is appropriate communication with prospective customers, customers and business partners.
We delete the data once the enquiry has been dealt with, unless statutory retention obligations or other legal grounds require us to retain it.
5. External links
Links to the Northwind HCM application or other external websites only transfer data after you follow the relevant link. The privacy notice of the destination website applies to processing there.
6. Your rights
Subject to the statutory conditions, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with future effect.
You may also lodge a complaint with a data protection supervisory authority, in particular the authority responsible for your usual place of residence, your place of work or the place of the alleged infringement.
7. Security and updates
We use encrypted HTTPS connections and appropriate technical safeguards. We update this notice when the website or legal requirements change.
Last updated: September 2026