Privacy Policy
This policy explains which personal data is processed when you visit this website or get in touch with me, for what purpose and on what legal basis under the EU General Data Protection Regulation (GDPR).
1. Controller
Markus Neumann, nmnn ventures OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia
Email: markus@nmnnventures.com
2. Hosting (Webflow)
This website is built with and hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit the site, Webflow and its content delivery partners process technical access data: IP address, date and time of the request, browser type and version, operating system, the page requested and the referring page.
This processing is necessary to deliver the website securely and reliably. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a stable and secure website). Data may be transferred to the USA. Such transfers are based on the EU-U.S. Data Privacy Framework and, where applicable, on the standard contractual clauses in Webflow's Data Processing Addendum.
3. Contact by email
If you contact me by email, I process the data you provide (name, email address, content of your message) in order to answer your enquiry. My mailbox is hosted with Microsoft 365. Legal basis: Art. 6 (1) (b) GDPR (steps prior to entering into a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). I delete enquiries once they have been dealt with, unless statutory retention periods apply.
4. Appointment booking (Microsoft Bookings)
To arrange an introductory call, I use Microsoft Bookings, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. When you book a call, you are asked for your name and email address and can add a note. The appointment is stored in my Microsoft 365 calendar and you receive a confirmation by email, usually with a Microsoft Teams link.
The booking page opens as a separate Microsoft service outside this website. The data is used only to arrange and hold the appointment. Legal basis: Art. 6 (1) (b) GDPR. Microsoft may process data outside the EU. Such transfers are based on the EU-U.S. Data Privacy Framework and standard contractual clauses. Microsoft's own privacy statement applies in addition.
5. exali AG liability seal
The footer of this website shows the liability seal of exali AG, Augsburg, Germany. The graphic of the seal is loaded from the servers of exali AG. For this, your IP address is processed for technical reasons, so that the graphic can be delivered to your browser. If you click on the seal, you leave this website and are forwarded to the servers of exali AG, where exali's own privacy policy applies.
Purpose: the seal provides verifiable information on my professional indemnity insurance. Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest lies in presenting this information to visitors and clients in a transparent and appealing way.
More information: privacy policy of exali AG on the liability seal
6. Cookies and analytics
This website does not use analytics or marketing tools and does not set cookies for tracking or advertising purposes. No user profiles are created.
7. Your rights
You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise your rights, an email to the address above is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the authority at your place of residence.
8. Changes to this policy
I update this policy when the website or the services used change. The current version is always available on this page.
Last updated: October 2026