Last Updated: November 2025 
Company: M365Consult (a division of M365Group) 
Registered Address: 
Čiekurkalna 2. līnija 49A – 3, LV-1026 Rīga, Latvia 
Email: info@m365consult.com 
Phone: +49 152 03824573 

Introduction 
M365Consult (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. 
This Privacy Policy explains how we collect, process, and store personal information through our website (for example, www.m365consult.com) and through our Microsoft-focused consulting and recruitment services in the DACH region and EMEA. 
This Policy specifically covers: 

• Consultants and candidates whom we introduce or hire for client projects and roles in the DACH region; and 
• Remote contractors and freelance consultants engaged from around the world for M365Consult’s own internal core team and projects. 
  We comply with the EU General Data Protection Regulation (GDPR), the Latvian Personal Data Processing Law, and other applicable European data protection regulations. 
  By using our website or services, you acknowledge this Privacy Policy and the practices described here. 

Who we are 
M365Consult is a Microsoft-focused consulting and recruitment agency that supports organizations across the DACH region and EMEA with Microsoft 365, Azure, Dynamics and related technology expertise. 
We operate under M365Group, a technology and human capital ecosystem company. For the purposes of this Privacy Policy, M365Consult (M365Group) generally acts as the data controller for personal data processed in relation to our consulting and recruitment activities. 

Data we collect 
We collect only the personal data necessary to provide our services effectively, lawfully, and transparently. 

Candidate and Consultant Data 

• Name and contact details (email, phone, address). 
• CV/resume, profile, employment history, education. 
• Professional certifications (e.g., Microsoft, Azure, Dynamics). 
• References and right‑to‑work documents where required by law. 
• Interview, assessment, and skills‑profiling information. 
• Project engagement information for consultants (e.g., roles, availability, rates, timesheets and deliverable history where relevant). 

Client and Prospect Data 

• Company name, address, and contact details. 
• Job role descriptions, project scopes and hiring or consulting requirements. 
• Contract, purchase order, payment, and invoicing data. 
• Contractual correspondence, meeting notes, and account management information. 

Website and Marketing Data 

• Cookies and analytics (e.g., IP address, browser type, device, approximate location, pages visited). 
• Analytics and advertising identifiers from tools such as Google Analytics or LinkedIn Insights, where enabled. 
• Newsletter sign‑up details and engagement with campaigns (opens, clicks, unsubscribes). 

We do not intentionally collect special categories of personal data (such as health data, religious or political beliefs) unless this is strictly necessary, permitted by law, and you have given explicit consent. 

How we use your data 
We process your personal data for the following purposes: 

• Providing Microsoft consulting, advisory and project services. 
• Providing recruitment and talent services, including matching candidates and consultants to client opportunities. 
• Managing our business relationship with you (contracts, billing, support, communications). 
• Managing our talent and expert network, including future suitable roles or projects. 
• Operating, securing and improving our website and online services. 
• Providing relevant professional content, event invitations, and marketing communications, where permitted. 
• Meeting legal, tax, accounting and compliance obligations. 

We never sell your personal data to third parties. 

Legal basis for processing 
We rely on the following legal bases under GDPR Article 6 to process personal data: 

• Contractual necessity (Art. 6(1)(b) GDPR): 
  To perform or enter into a contract with you, for example consulting engagements, statements of work, or recruitment services for candidates, consultants and clients. 
• Legal obligation (Art. 6(1)(c) GDPR): 
  To comply with applicable laws, such as employment, right‑to‑work, bookkeeping and tax regulations. 
• Legitimate interest (Art. 6(1)(f) GDPR): 
  To operate and grow our consulting and recruitment business, maintain professional relationships, manage our expert and client network, and improve our services, provided these interests are not overridden by your rights and freedoms. 
• Consent (Art. 6(1)(a) GDPR): 
  For optional activities such as certain marketing communications, newsletters or specific talent‑pool registrations. You may withdraw consent at any time by contacting privacy@m365consult.com or using the unsubscribe options provided. 

Data retention 
We retain personal data only for as long as necessary for the purposes described above or as required by law: 

• Candidate and consultant data: typically up to 24 months after the last meaningful interaction (such as an application, call, or email), unless you expressly agree to a longer retention for future opportunities or a longer period is required by law. 
• Client and prospect data: for the duration of the relationship and for any additional period required for legal, tax, and accounting purposes. 
• Consulting project data: for the duration of the engagement and any additional statutory retention period for contracts, statements of work, and financial records. 
• Marketing data: until you unsubscribe, withdraw consent, or we determine it is no longer accurate or necessary. 

After these periods, personal data is securely deleted, anonymized, or aggregated wherever feasible. 

Data sharing and transfers 
We may share limited personal data with carefully selected third parties where necessary: 

• Clients: for candidate and consultant introductions, project proposals, interviews, or project delivery. 
• Technology and cloud partners: such as Microsoft 365, Azure, CRM and collaboration platforms used to provide our services. 
• Service providers: including email, web hosting, IT, compliance, accounting and legal services that support our operations. 
• M365Group entities: other companies within M365Group (for example, M365Recruit) where needed to deliver cross‑border or combined consulting and recruitment services, subject to appropriate safeguards and intra‑group agreements. 
• Authorities and regulators: where we are legally required to do so, for example tax authorities or supervisory authorities. 

Where data is transferred outside the European Economic Area (EEA), we ensure an adequate level of protection through mechanisms such as EU Standard Contractual Clauses (SCCs) or equivalent safeguards, in line with GDPR. 

Data security 
We implement appropriate technical and organizational measures to protect personal data, including secure cloud infrastructure, access controls, and staff awareness measures. No system is 100% secure; however, M365Consult takes reasonable and proportionate steps to safeguard personal information. 

Your rights 
Under GDPR you have rights including access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent (where applicable). To exercise these rights, contact us using the details under “Contact information”. You also have the right to lodge a complaint with your local supervisory authority. 

Cookies policy 
Our website uses cookies and similar technologies to enable core functionality, analyze traffic, and, where applicable, personalize content and advertising. You can manage cookies via your browser settings or any cookie banner on our website. 

Marketing and communication 
We may send professional content, news, event invitations, or market insights related to Microsoft consulting and recruitment, particularly for the DACH region and EMEA. You can opt out at any time via unsubscribe links or by contacting us. 

Third‑party links 
Our website may include links to third‑party sites (for example, Microsoft, LinkedIn, partners). M365Consult is not responsible for the privacy practices, content or security of those websites. 

Children’s privacy 
Our services and website are not directed at individuals under 18 years of age, and we do not knowingly collect personal data from children. 

Policy updates 
We may update this Privacy Policy from time to time, for example to reflect legal, technical, or business changes. Updated versions will be posted with a new “Last Updated” date and, where appropriate, we may notify you through other channels. 

Contact information 
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: 

Email: info@m365consult.com 
Postal address: 
M365Consult (M365Group) 
Čiekurkalna 2. līnija 49A – 3 
LV‑1026 Rīga 
Latvia 

Phone: +49 152 03824573