Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can personally identify you. For detailed information on the topic of data protection, please refer to our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice regarding the responsible party" in this privacy policy.

How do we collect your data?

Your data is collected, firstly, when you provide it to us. This could be, for example, data you enter into a contact form. Other data is automatically collected or gathered with your consent when you visit the website through our IT systems. This data mainly consists of technical information (e.g., the internet browser, operating system, or time of the page access). The collection of this data takes place automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive, at any time and free of charge, information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time for more information on this matter.

Analytics and Third-Party Tools

When visiting this website, your browsing behavior may be statistically analyzed. This is primarily done with so-called analytics programs. Detailed information on these analytics programs can be found below.

2. General Information and Mandatory Disclosures

Notice regarding the responsible party

The responsible party for data processing on this website is:

nebty GmbH
c/o BASE Coworking
Blütenstr. 15
80799 Munich
E-mail: info@nebty-id.com

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and according to the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data refers to data that can personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission on the internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Storage Duration

Unless a more specific storage period has been mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons no longer apply.

General Information on the Legal Bases of Data Processing on This Website

If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed according to Art. 9(1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access information on your device (e.g., via device fingerprinting), the data processing is also carried out based on § 25(1) TTDSG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation based on Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest according to Art. 6(1)(f) GDPR.

Recipients of Personal Data

In the course of our business activities, we cooperate with various external parties. In some cases, it is necessary to transfer personal data to these external parties. We only share personal data with external parties if it is required for contract fulfillment, if we are legally obligated to do so (e.g., sharing data with tax authorities), if we have a legitimate interest according to Art. 6(1)(f) GDPR, or if another legal basis permits the transfer of data.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent that has already been given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to Object (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT BASED ON ART. 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING IS FOR THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to Lodge a Complaint

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement.

Right to Data Portability

You have the right to have data that we process based on your consent or in performance of a contract automatically delivered to you or a third party in a commonly used, machine-readable format.

Access, Rectification, and Deletion

Within the framework of the applicable legal provisions, you have the right to request information about your stored personal data at any time, as well as its origin, recipient, and the purpose of data processing. You may also have the right to correct or delete your data. For this purpose and for further questions on personal data, you can contact us at any time.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of its deletion.
• If you have filed an objection under Art. 21(1) GDPR, a balancing of your and our interests must be made. Until it is clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

SSL / TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock icon in your browser line.

Objection to Advertising Emails

We hereby object to the use of contact data published within the framework of the legal notice obligation for sending unsolicited advertising and information material.

3. Data Collection on This Website

Cookies

Our website uses so-called "cookies." Cookies are small data packages that do not cause any harm to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit.

Cookies may come from us (first-party cookies) or third-party companies (third-party cookies). Third-party cookies enable the integration of specific services from third-party companies within websites.

Cookies that are required to carry out the electronic communication process, to provide certain functions requested by you, or to optimize the website are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified. If consent to the storage of cookies and similar recognition technologies was requested, processing is exclusively based on this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); the consent can be revoked at any time.

Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent. The processing of this data is based on Art. 6(1)(b) GDPR.

Inquiry via Email, Phone, or Fax

If you contact us via email, phone, or fax, your inquiry, including all personal data resulting from it, will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent. The processing of this data is based on Art. 6(1)(b) GDPR.

Newsletter Data

If you wish to receive the newsletter offered on the website, we require an email address from you. The processing of the data entered in the newsletter registration form is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of the data at any time, for example, via the "unsubscribe" link in the newsletter.

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR).

We use the following hosting provider(s):

Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen

Cloudflare, Inc.
101 Townsend St
San Francisco, CA 94107, USA

Contract Processing

We have entered into a data processing agreement (DPA) for the use of the above-mentioned services. This is a contract mandated by data protection laws to ensure that these services process the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

4. Analytics and Third-Party Services

Ahrefs Analytics

We use Ahrefs Analytics, a cookieless web analytics service provided by Ahrefs Pte. Ltd. Ahrefs Analytics does not use cookies and does not collect any personally identifiable information. It processes only anonymized, aggregated data about page visits (such as page URL, referrer, browser type, and country) to help us understand how our website is used. No data is transferred to third-party advertising networks. The legal basis is our legitimate interest in analyzing and improving our website (Art. 6(1)(f) GDPR).

Notion

We use Notion, a service provided by Notion Labs, Inc., for contact forms and demo meeting scheduling embedded on our website. When you submit a form or book a meeting via Notion, the information you provide (such as your name, email address, and message) is transmitted to and stored by Notion. Notion processes this data on servers in the United States. We use this data solely to respond to your inquiry or to schedule the requested meeting. The legal basis is the performance of pre-contractual measures or our legitimate interest in providing you with an easy way to contact us (Art. 6(1)(b) and (f) GDPR). For more information, please refer to Notion's privacy policy at notion.so/privacy.

5. Newsletter

Newsletter Data

If you wish to receive the newsletter offered on the website, we require an email address from you and information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. We use this data exclusively for sending the requested information and do not pass it on to third parties. The processing of the data entered in the newsletter registration form is based on your consent (Art. 6(1)(a) GDPR).

Newsletter Shipping to Existing Customers

If you purchase goods or services from us and provide us with your email address, we may subsequently use this email address to send you newsletters about our own similar goods or services. You can unsubscribe from the newsletter at any time. The legal basis for sending the newsletter in this case is Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG.