Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Website: https://trueintelligence.group

2. General information

We process personal data only where necessary to provide this website securely and reliably, to respond to
communications, and to comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural person.

3. Hosting and server log files

When the website is accessed, the hosting provider may automatically process technical information in server log files.
Depending on the hosting configuration, this may include the visitor’s IP address, date and time of access, requested
URL/file, referrer URL, browser type and version, operating system, device information and similar technical request
data.
This processing is carried out to deliver the website, maintain technical stability and security, detect abuse and
troubleshoot technical errors.
Where applicable, the legal basis is Article 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).
Where processing is necessary to take steps at the request of a data subject prior to entering into a contract, Article

6(1)(b) GDPR may also apply.

4. Cookies and consent management

This website uses a consent management solution to manage cookie and privacy preferences.
Consent tool: CookieYes | GDPR Cookie Consent
Technically necessary cookies or browser storage may be used where required to provide a function expressly
requested by the visitor or to store the visitor’s consent preferences.
Non-essential cookies, scripts or comparable technologies are not activated before the visitor has provided the required
consent.
Where consent is required, the legal basis for accessing or storing information on the visitor’s device is Section 25(1)
TDDDG and, for subsequent processing of personal data, Article 6(1)(a) GDPR. Consent can be withdrawn at any time
through the cookie settings with effect for the future.
Where storage or access is strictly necessary to provide a service expressly requested by the user, Section 25(2)
TDDDG applies.

5. Analytics and marketing

No analytics or marketing tracking tools are intentionally used on this website unless they are expressly listed in this
Privacy Policy.

6. External content, fonts and scripts

The website is configured to avoid unnecessary third-party content being loaded automatically. Where possible, fonts and website assets are hosted locally.
If all fonts/scripts are served locally and no additional external content is loaded, use this sentence:
“The website is configured to avoid unnecessary third-party content being loaded automatically. Where possible, fonts
and website assets are hosted locally.”
If third-party services are loaded, do not use the sentence above by itself. Add the relevant provider, purpose, data
categories, legal basis and any international transfer information.

7. Accessibility widget

The website provides accessibility controls to improve usability. According to the current technical configuration, this feature does not intentionally transmit personal data to an external analytics or advertising provider.
If the accessibility tool operates entirely locally and does not transmit visitor data to an external provider, use:
“The website provides accessibility controls to improve usability. According to the current technical configuration, this
feature does not intentionally transmit personal data to an external analytics or advertising provider.”
If the widget connects to an external service or sets non-essential cookies/storage, Daniel must be informed and this
section must be replaced with the provider-specific privacy information. Where required, the service must remain
blocked until consent is given.

8. Links to Upwork and other external websites

This website contains links to external websites, in particular Upwork. External websites are operated independently
from trueintelligence.group.
When a visitor clicks an external link, the visitor leaves this website. The processing of personal data on the destination
website is governed by the privacy information and terms of the respective provider.
No personal data is intentionally transferred to Upwork merely because an ordinary external text/button link is
displayed. A connection to the external provider is normally established only after the visitor actively follows the link.

9. Contact and project communication

The website does not require visitors to submit sensitive case information through a public website form. Project
enquiries and case engagements are directed to Upwork / secure Upwork Workrooms.
If a visitor contacts the controller directly by email or telephone, the information provided will be processed for the
purpose of handling the enquiry and communicating with the visitor.
Depending on the nature of the enquiry, the legal basis may be Article 6(1)(b) GDPR (contractual or pre-contractual
communication) or Article 6(1)(f) GDPR (legitimate interest in responding to professional enquiries).

10. Data recipients and processors

Personal data may be processed by technical service providers where this is necessary to operate and secure the
website, for example the hosting provider and, where applicable, the consent-management provider.
Where required by law, service providers are engaged under appropriate data-processing arrangements.
Personal data is not sold.

11. International data transfers

If a service provider processes personal data outside the European Union or European Economic Area, such transfers
will only take place where the applicable GDPR requirements for international transfers are met.

12. Storage period

Personal data is stored only for as long as necessary for the respective purpose or for as long as statutory retention
obligations apply.
Technical server log retention depends on the hosting provider and security configuration. Communication data is
retained only for as long as necessary to process the enquiry and, where applicable, to comply with contractual or legal
record-keeping obligations.

13. Rights of data subjects

Subject to the requirements of the GDPR, data subjects may have the following rights:
– right of access (Article 15 GDPR)
– right to rectification (Article 16 GDPR)
– right to erasure (Article 17 GDPR)
– right to restriction of processing (Article 18 GDPR)
– right to data portability (Article 20 GDPR)
– right to object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR)
– right to withdraw consent at any time with effect for the future where processing is based on consent
To exercise these rights, please use the contact details stated above.

14. Right to lodge a complaint

Data subjects have the right to lodge a complaint with a competent data protection supervisory authority.
For a controller established in Hamburg, the competent authority is generally:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
Telephone: +49 40 42854-4040
Email: mailbox@datenschutz.hamburg.de

15. Security

Appropriate technical and organizational measures are used to protect the website and personal data against loss,
misuse, unauthorized access and other security risks to the extent reasonably possible.
16. Changes to this Privacy Policy
This Privacy Policy may be updated where the website, legal requirements or technical services change.
Last updated: September 2026