Tharivum Advisory

Data protection

Privacy Policy

1. Controller

The controller responsible for processing personal data in connection with this website is:

Tharivum Advisory
Balamurugan Sukumar
Rosenweg 22
38446 Wolfsburg
Lower Saxony, Germany

Telephone: +49 174 8455794
Email: contact@tharivum.com

2. Hosting and delivery of the website

This website is hosted through Netlify. The service provider is Netlify, Inc., 101 2nd Street, San Francisco, California 94105, USA.

When you access this website, technical data may be processed to deliver, operate, protect and troubleshoot the website. This may include the IP address, date and time of access, requested page or file, referring page, browser type and version, operating system, device information, response status and similar technical information.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically efficient provision of the website, prevention of misuse and investigation of technical or security incidents.

Netlify acts as a service provider or processor where it processes personal data on our behalf. Netlify's applicable data-processing terms form part of its self-service contractual terms. Because Netlify is based in the United States, personal data may be processed outside the European Economic Area. Where required, such transfers are protected by an adequacy decision, including the EU-U.S. Data Privacy Framework for certified recipients, and/or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Further information is available in Netlify's privacy documentation: Netlify Privacy Statement .

3. Contact by email

You may contact us using the following addresses:

When you contact us, we process the information you provide, such as your name, email address, organization, message and any attachments, in order to handle and respond to your enquiry.

Where your enquiry relates to a prospective or existing contract, processing is based on Article 6(1)(b) GDPR. For general business communication and relationship management, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to communicate with interested parties, customers, partners and other business contacts. Where retention is required by law, Article 6(1)(c) GDPR also applies.

4. Email service provider

Business email is provided through Google Workspace. Depending on the applicable contractual setup, the service provider may be Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and/or affiliated Google entities.

Google processes email and related account data to provide, secure and maintain the Google Workspace services. Google Workspace is used under contractual data-processing terms. Personal data may be processed outside the European Economic Area. Where required, international transfers are protected by an adequacy decision and/or appropriate safeguards such as Standard Contractual Clauses.

Further information is available in Google's privacy documentation: Google Privacy Policy .

5. Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected. General enquiries are normally deleted after they have been finally handled, unless continued retention is needed for a business relationship, the establishment, exercise or defence of legal claims, or compliance with statutory retention obligations. Contractual and business records may be retained for the periods required by applicable commercial and tax law.

6. Cookies, analytics and embedded third-party content

The current version of this website does not use analytics or advertising trackers, does not set non-essential marketing cookies and does not embed third-party videos, maps, social-media feeds or externally hosted web fonts. A consent banner is therefore not used for the current website configuration.

Technically necessary functions of the hosting infrastructure may be used where required to deliver and protect the website. This policy will be updated before analytics, advertising, embedded media, a contact form or other additional tracking technologies are introduced.

7. External links

This website may contain links to external websites or services, including LinkedIn. No personal data is transmitted to the external provider merely because a standard text link is displayed. When you follow an external link, the privacy terms of the respective provider apply.

8. Recipients

Personal data may be made available to hosting, email, IT-support, professional advisory or other service providers where this is necessary for the purposes described above and permitted by law. Service providers processing personal data on our behalf are contractually bound in accordance with applicable data- protection requirements.

Data may also be disclosed where required by law, to protect legal rights or to establish, exercise or defend legal claims.

9. Your rights

Subject to the applicable legal requirements, you have the right to:

  • obtain information about personal data processed concerning you;
  • request rectification of inaccurate or incomplete data;
  • request erasure of personal data;
  • request restriction of processing;
  • receive data you provided in a structured, commonly used and machine-readable format;
  • object to processing based on legitimate interests; and
  • withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.

You also have the right to lodge a complaint with a competent data-protection supervisory authority.

10. Competent supervisory authority

The supervisory authority responsible for private-sector organizations based in Lower Saxony is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
Telephone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de

11. Automated decision-making

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place through this website.

12. Changes to this Privacy Policy

This Privacy Policy may be updated when the website, service providers or processing activities change. The version published on this website is the current version.

Last updated: July 2026