Privacy Notice
Effective: 2026-10-15. Law applied: GDPR (Regulation 2016/679). Draft pending legal review.
Controller
ReTHINKING WORKS, LLC (RTW), a TANTUM Global company (https://tantum.com/), a US-based company, 334 West Front Street, Media, PA 19063, USA. Privacy contact / DPO: rtw@rethinkingworks.com.
Data, purposes and legal bases
- Strategy management assessment: name, email, company sector, questionnaire answers and any comments you type. Purpose: compute your score, generate recommendations and a PDF report, and let you open the result through a unique link. Legal basis: your consent (art. 6(1)(a)), given with the checkbox on the form. Retention: [CONFIRM retention period, e.g. 24 months], or until you delete the data with the "Delete my data" button on the result page.
- Processors and transfers: OpenAI (USA) receives your answers, the scores, your sector and comments to write the recommendation text (name and email are not sent). Hosting by Vercel (USA). Database: Railway (PostgreSQL). Transfers outside the EEA rely on [CONFIRM: standard contractual clauses / EU-US Data Privacy Framework]. Please do not put confidential information in the comments.
- Server logs (IP address, time, browser) are kept briefly by the hosting provider for security and operation (legitimate interest, art. 6(1)(f)).
Cookies
This site sets no cookies and uses no analytics, advertising or tracking storage, so there is no cookie banner. If that changes, we will ask for your consent first.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time, using the delete button or by emailing rtw@rethinkingworks.com. We reply within one month. You may complain to your supervisory authority. The site is not directed at children. Recommendations are generated by AI and produce no decisions with legal effect about you.
Security and breaches
All traffic uses HTTPS. Personal-data reads by internal systems are logged. Breaches that put your rights at risk are notified to the supervisory authority within 72 hours and to you where required.