Last updated: 08.02.2026
Path Düsseldorf GmbH takes the protection of personal data seriously. This Data Privacy Policy explains how personal data is processed when you visit our website or interact with us in the context of our professional activities, in accordance with the General Data Protection Regulation (GDPR / DSGVO), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and other applicable data-protection laws.
The controller responsible for data processing pursuant to Art. 4(7) GDPR is:
Path Düsseldorf GmbH
Geschäftsführer: K. Hakan Hasserbetci
c/o 360 Workspace
Gerresheimer Straße 86
40233 Düsseldorf
Germany
Email: support@pathdusseldorf.com
We process personal data only where permitted by law and only for specified, explicit, and legitimate purposes. Personal data is processed in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality as set out in Art. 5 GDPR.
When you access our website, technical data may be processed automatically by our hosting provider to ensure the secure and reliable operation of the website. This data may include:
This data is processed exclusively for technical, security, and operational purposes and is not used to identify individual users.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation)
Our website does not provide contact forms and does not require visitors to actively enter personal data.
If you contact us voluntarily via email, we will process the personal data you provide (such as your email address, name, and message content) solely for the purpose of responding to your enquiry or initiating professional communication.
Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures)
Art. 6(1)(f) GDPR (legitimate interest in professional communication)
Our website does not use cookies, analytics tools, tracking technologies, or marketing services.
No cookie banner is displayed, as no cookies requiring consent under applicable data-protection law are used.
Further details are provided in our separate Cookies Policy.
In the course of our professional activities, we process personal data of business contacts, including clients, client representatives, training participants, and partners.
Such data may include names, professional contact details, organisational roles, and communication records. Processing is limited to what is necessary for:
Legal bases:
Art. 6(1)(b) GDPR
Art. 6(1)(c) GDPR
Art. 6(1)(f) GDPR
Depending on the specific engagement, Path Düsseldorf GmbH may act as:
Where personal data of a client’s employees or end customers is processed, such processing takes place strictly within the scope of the mandate and under the responsibility of the respective client as controller, unless otherwise contractually agreed.
Path Düsseldorf GmbH collaborates with freelance consultants and advisory board members worldwide. These individuals are not employees.
Personal data is processed for the purposes of contractual cooperation, coordination, communication, and compliance with legal, accounting, and tax obligations.
Legal bases:
Art. 6(1)(b) GDPR
Art. 6(1)(c) GDPR
Art. 6(1)(f) GDPR
When we organise or deliver training sessions, workshops, or professional events, we may process personal data of participants, such as names, professional contact details, attendance information, and certification-related records.
Processing is limited to what is necessary for training delivery, documentation, and professional follow-up.
Legal bases:
Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR
Due to the international scope of our consulting, governance, and training activities, personal data may be transferred to recipients located outside the European Union or the European Economic Area (EEA), including clients, partners, or consultants operating internationally.
Such transfers are carried out only where permitted under Chapter V GDPR and only when appropriate safeguards are in place. These safeguards may include, in particular:
Where required, transfer risk assessments are considered to evaluate the legal environment of the recipient country and the effectiveness of the implemented safeguards.
Path Düsseldorf GmbH does not transfer personal data to third countries for marketing, profiling, or advertising purposes.
Personal data is retained only for as long as necessary to fulfil the respective processing purpose or to comply with statutory retention obligations. Data is deleted or anonymised once retention is no longer required.
Data subjects have the following rights under the GDPR:
Requests may be addressed to:
📧 support@pathdusseldorf.com
Data subjects have the right to lodge a complaint with a supervisory authority. The competent authority for Path Düsseldorf GmbH is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Path Düsseldorf GmbH implements appropriate technical and organisational measures (TOMs) in accordance with Art. 32 GDPR to ensure a level of security appropriate to the risk.
These measures include, in particular:
Security measures are designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure, taking into account the nature, scope, context, and purposes of processing.
We reserve the right to update this Data Privacy Policy where necessary to reflect legal, regulatory, or operational changes.
