Privacy

Who is responsible

Nicolas Kaftan, trading as Sightline, Fettstraße 36, 20357 Hamburg, Germany, is the controller. Contact: hello@sightline-advisory.com or +49 151 1599 2706.

Website delivery and security

The production website uses Vercel Inc., USA, for hosting. Requests to the website involve technical information such as IP address, access time, requested resource and browser information. This enables delivery, fault investigation and protection against misuse.

Processing is based on our legitimate interest in operating a secure, reliable business website under Article 6(1)(f) GDPR. Vercel acts as a processor. Its Data Processing Addendum sets out processing terms and safeguards for international transfers, including standard contractual clauses where applicable. See also Vercel’s privacy notice.

Technical information is retained only as needed for operation, security and legal requirements. Information relevant to a security incident may be kept while that incident is investigated or legal claims are addressed.

Cookies, fonts and external services

This website does not use analytics, advertising trackers, tracking cookies or browser storage. Fonts and images are served with the site. There are no embedded forms, videos or booking tools. External references are ordinary links: opening them takes you to the relevant provider’s website and privacy arrangements.

Enquiries and correspondence

When you contact us, we use your contact details and the information you supply to respond, discuss an assignment or carry out agreed work. Pre-contractual or contractual enquiries are handled under Article 6(1)(b) GDPR. Other professional correspondence is handled under Article 6(1)(f), reflecting our interest in responding and maintaining business relationships.

Our business mailbox is hosted by checkdomain GmbH, Germany. Delivery and spam protection involve message content, addressing details and technical connection data. More information is in checkdomain’s privacy notice. Correspondence is also handled in our Outlook email application.

We retain correspondence while it is needed for the enquiry or engagement, and longer where statutory retention duties or legal claims require it. Otherwise it is deleted. Information needed to discuss or deliver work must be provided for that purpose; you are under no obligation to make an enquiry.

Your rights

Subject to the GDPR’s conditions, you can request access, correction, deletion, restriction and portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your situation. Where processing is based on consent, you can withdraw it for the future.

You can complain to a data-protection supervisory authority, including the Hamburg Commissioner for Data Protection and Freedom of Information or the authority where you live or work. We do not make automated decisions with legal or similarly significant effects on you.

Updates

This notice reflects the website and service arrangements described above and will be updated if they change.

Last updated: 25 October 2026.