K2 ESG Partners. Privacy Policy

Effective date: 01.12.2025

K2 ESG Partners ("we", "our", "us") is committed to protecting the privacy of individuals who visit our website and contact us for services. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website k2esgpartners.com ("Site") or communicate with us.

By using our Site, you agree to the terms of this Privacy Policy.

1. What Personal Data We Collect

We may collect the following categories of personal data:

Information you provide directly:

  • Name

  • Email address

  • Phone number

  • Company name

  • Any information included in your inquiry or message

Information collected automatically:

  • IP address

  • Browser type and device information

  • Usage data (pages visited, time on page, referring links)

  • Cookies and similar technologies (see Section 8)

We do not knowingly collect personal data from individuals under the age of 16. If you believe we have collected such data, please contact us immediately so we can take appropriate action.
We do not collect sensitive personal data (e.g., racial, political, health data) unless required for a specific purpose and only with your explicit consent.

2. How We Use Your Data

We use your personal data for the following purposes:

  • Responding to inquiries and contacting you about our services

  • Providing and improving our Site

  • Sending updates, articles, or marketing communications (only with your consent)

  • Meeting legal and regulatory requirements

  • Protecting our rights and ensuring Site security

We do not sell or rent personal data to third parties.

3. Legal Basis for Processing

We process personal data under these GDPR bases:

  • Consent — when you voluntarily submit information or accept cookies

  • Legitimate interest — to operate and improve our business, ensure website security, and respond to your requests

  • Contractual necessity — when processing is required to provide services you requested

  • Legal obligation — when we must retain or disclose information under applicable law

4. Sharing Your Information

We may share your personal data with:

  • Service providers (e.g., website hosting, email providers, analytics tools)

  • Professional advisors (e.g., legal or accounting services, if necessary)

  • Authorities when required by law or legal process

All third-party providers are required to protect your data under GDPR-compliant agreements. We do not share data outside the EEA unless adequate safeguards (e.g., Standard Contractual Clauses - SCCs) are in place.

5. Data Retention

We retain personal data only as long as necessary for:

  • Responding to your inquiry (typically retained for 24 months from last contact for potential follow-up)

  • Providing contracted services (retained for the duration of the contract and a reasonable period thereafter)

  • Legal or regulatory obligations (as required by applicable law)

If no legal retention period applies, data is deleted within 24 months of your last interaction.

6. Your Rights

Under GDPR, you may request:

  • Access to your data

  • Correction of inaccurate data

  • Deletion ("right to be forgotten")

  • Restriction of processing

  • Data portability

  • Objection to processing

  • Withdrawal of consent

To exercise your rights, contact us at: info@k2esgpartners.com. We will respond within one month of receiving your request. You may also lodge a complaint with your local data protection authority.

7. Data Security & Breach Notification

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration. However, no online transmission is completely secure, and we cannot guarantee absolute protection. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required by law, affected individuals promptly.

8. Cookies

Our Site uses cookies and similar technologies to:

  • Ensure essential website functionality (necessary cookies)

  • Improve website performance and user experience (performance cookies)

  • Understand how visitors use our Site (analytics cookies)

  • Tailor content (preference cookies)

We use the following main categories of cookies:

  • Necessary cookies: Essential for the Site to function. They do not require consent.

  • Performance/Analytics cookies: Help us understand visitor behavior (e.g., Google Analytics). These require your consent.

  • Marketing cookies: Used to track visitors across websites (not currently used on our Site).

You can manage or disable cookies in your browser settings. Note that disabling certain cookies may affect Site functionality.

Upon your first visit, you will be presented with a cookie consent banner where you can accept or reject non-essential cookies. For a detailed list of cookies we use, please contact us.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a new effective date. Continued use of the Site after changes indicates your acceptance of the updated Policy.

10. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact: info@k2esgpartners.com