This Privacy Policy explains how JGMG Consulting Limited ('we', 'us', 'our') collects, uses, stores, and protects personal data when you visit our website, contact us, subscribe to our newsletter, or engage with our services. We are committed to handling your data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Austrian data protection law.

1. Data Controller
The data controller responsible for your personal data is:
JGMG Consulting Limited
77 Camden Street Lower, Dublin 2, D02 XE80, Ireland
Registered in Ireland

Austrian branch:
JGMG Consulting Limited Zweigniederlassung Oesterreich
Leopoldsgasse 26/26, 1020 Vienna, Austria

Email: office@jgmgconsulting.com
Website: www.jgmgconsulting.com

JGMG Consulting Limited is the registered legal entity and data controller. The Austrian branch (Zweigniederlassung Österreich) operates as part of the same legal entity and is not a separate legal person under Irish or Austrian law. All data processing activities are carried out under the responsibility of the Irish registered company.

If you have any questions about this policy or wish to exercise your rights, please contact us at the email address above.

2.1 When you visit our website
We collect technical data automatically when you access our website, including:

• IP address (anonymised where possible)

• Browser type and version

• Operating system

• Pages visited, time spent, and referral source

• Device type

This data is collected via Google Analytics (see Section 6) and Cloudflare (our hosting and security provider). It is used to understand how visitors use our site and to improve our content and performance.

2.2 When you contact us
When you submit an enquiry via our contact form or email us directly, we collect:

• Your name

• Your email address

• Your message and any additional information you choose to share

This data is used solely to respond to your enquiry and, where relevant, to follow up in connection with a potential engagement.

2.3 When you subscribe to our newsletter
When you sign up for our newsletter, Beyond the Gantt, we collect:

• Your email address

We use Mailchimp to manage newsletter subscriptions and delivery. By subscribing, you consent to your email address being stored and processed by Mailchimp on our behalf (see Section 6).

2.4 When you become a client
In the course of providing consulting services, we may collect and process additional personal data, including professional contact details, information shared during engagements, and data necessary for invoicing and contract management. The legal basis for this processing is the performance of a contract (Article 6(1)(b) GDPR).
 
3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 GDPR:

• Consent (Art. 6(1)(a)): For newsletter subscriptions and non-essential cookies (e.g. Google Analytics).

• Contract performance (Art. 6(1)(b)): For processing data necessary to deliver our consulting services.

• Legitimate interests (Art. 6(1)(f)): For website analytics (to improve our site), security (via Cloudflare), and responding to enquiries from prospective clients.

• Legal obligation (Art. 6(1)(c)): Where required by Austrian or EU law, including tax and accounting obligations.

 
4. How We Use Your Data
We use your personal data for the following purposes:

• To respond to your enquiries and communicate with you

• To deliver and improve our consulting services

• To send our newsletter, Beyond the Gantt, to subscribers who have opted in

• To analyse website usage and improve our online presence

• To maintain the security and performance of our website

• To comply with legal and regulatory obligations

• To manage client relationships and contractual obligations

We do not use your data for automated decision-making or profiling.
 
5. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Enquiry and contact data: retained for up to 2 years after last contact, unless an engagement follows.

• Client data: retained for 7 years following the end of an engagement, in line with Austrian commercial and tax law.

• Newsletter subscriber data: retained until you unsubscribe. You may unsubscribe at any time via the link in each newsletter.

• Website analytics data: retained as per Google Analytics default settings (up to 14 months for user-level data, where applicable).

After the applicable retention period, your data is securely deleted or anonymised.
 
6. Third-Party Data Processors
We work with the following trusted third-party service providers who process personal data on our behalf. All processors are contractually bound to handle data in accordance with GDPR:

6.1 Google Analytics
We use Google Analytics to analyse website traffic and user behaviour. Google Analytics uses cookies to collect anonymised usage data. Data may be transferred to and processed in the United States by Google LLC. Google participates in the EU-U.S. Data Privacy Framework, providing an adequate level of protection.
You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

6.2 Mailchimp (The Rocket Science Group LLC)
We use Mailchimp to manage our newsletter mailing list and send email communications. Your email address is stored on Mailchimp's servers, which are located in the United States. Mailchimp participates in the EU-U.S. Data Privacy Framework. A Data Processing Agreement is in place between JGMG Consulting Limited and Mailchimp.
For more information, see Mailchimp's Privacy Policy at mailchimp.com/legal/privacy.

6.3 Cloudflare Inc.
Our website is hosted and protected via Cloudflare, which provides DNS, CDN, and security services. Cloudflare may process technical data (including IP addresses) to protect our website against malicious traffic and ensure performance. Cloudflare is certified under the EU-U.S. Data Privacy Framework.
For more information, see Cloudflare's Privacy Policy at cloudflare.com/privacypolicy.
We do not sell, rent, or share your personal data with any third parties for marketing purposes.
 
7. International Data Transfers
Some of our third-party processors (Google, Mailchimp, Cloudflare) are based in the United States. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Reliance on adequacy decisions issued by the European Commission

• EU-U.S. Data Privacy Framework certification

• Standard Contractual Clauses (SCCs) where applicable

 
8. Cookies
Our website uses cookies — small text files stored on your device — to enable certain functionality and to collect analytics data.

Essential cookies
Required for the website to function (e.g. security cookies set by Cloudflare). These cannot be disabled.

Analytics cookies
Set by Google Analytics to help us understand how visitors use our site. These are only placed with your consent.

You can manage your cookie preferences through your browser settings or via our cookie consent banner. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
 
9. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:

• Right of access (Art. 15): to obtain a copy of the personal data we hold about you.

• Right to rectification (Art. 16): to correct inaccurate or incomplete data.

• Right to erasure (Art. 17): to request deletion of your data, subject to legal retention obligations.

• Right to restriction (Art. 18): to request that we limit processing of your data in certain circumstances.

• Right to data portability (Art. 20): to receive your data in a structured, machine-readable format.

• Right to object (Art. 21): to object to processing based on legitimate interests or for direct marketing.

• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.
   

To exercise any of these rights, please contact us at office@jgmgconsulting.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):
Datenschutzbehörde
Barichgasse 40–42, 1030 Wien, Austria
Email: dsb@dsb.gv.at  ·  Website: dsb.gv.at
 
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• Encrypted data transmission (HTTPS/TLS) across our website

• Cloudflare security and DDoS protection

• Access controls limiting who can access personal data within our organisation

• Regular review of our data handling practices

Despite these measures, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Datenschutzbehörde in accordance with GDPR requirements.
 
11. Children's Data
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.
 
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the effective date at the top of this document. We encourage you to review this policy periodically.
Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
 
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

JGMG Consulting Limited
77 Camden Street Lower, Dublin 2, D02 XE80, Ireland (registered in Ireland)

Austrian branch:
JGMG Consulting Limited Zweigniederlassung Österreich
Leopoldsgasse 26/26, 1020 Vienna, Austria
Email: office@jgmgconsulting.com
Website: www.jgmgconsulting.com