Privacy Policy

This privacy policy describes what data is actually processed when you visit this website. We deliberately limit it to what this website actually does, rather than including boilerplate clauses for features it doesn't have. This English page is provided for convenience; the German-language Datenschutzerklärung is the legally binding version.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is NovaSubito GmbH i.G., Gerhart-Hauptmann-Straße 2, 64319 Pfungstadt, Germany, represented by Jan Peter Schäfer, reachable at kontakt@novasubito.com.

2. No cookies, no tracking, no analytics

This website does not use cookies, analytics or tracking software, or marketing pixels. No user profiles are created. Should this change in the future, this policy will be updated before activation and, where required, consent will be obtained.

3. Hosting and server log files

This website is hosted by Render Services, Inc. (Render.com). When you access the website, the hosting provider automatically processes technical access data (including IP address, date and time of access, page requested, browser used), as is technically necessary for any web server to deliver the site reliably and securely. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website). This access data is not combined with other data sources and is not used to build user profiles.

4. Embedded fonts

The typeface used on this website (Space Grotesk) is stored locally on our own server and is not loaded from third-party servers (e.g. Google Fonts). No data is transmitted to font providers when you visit this website.

5. Contacting us by email

If you contact us via the “mailto” link provided on this website, your own email application opens; the message you write is sent directly by your email provider to our address, kontakt@novasubito.com. This website itself stores no form data, since no contact form is used. We process the information in your email solely to handle your inquiry (Art. 6(1)(b) GDPR, pre-contractual measures) and delete it once your inquiry has been fully handled and no statutory retention obligations apply.

6. Recipients and transfers to third countries

The only recipient of the access data described in Section 3 is our hosting provider, acting as data processor. Render Services, Inc. may use infrastructure outside the EU/EEA; in that case, any transfer takes place only on the basis of appropriate safeguards within the meaning of Art. 44 et seq. GDPR (in particular EU Standard Contractual Clauses). No further disclosure to third parties takes place.

7. Storage period

Server access data (Section 3) is retained briefly under our hosting provider's default settings for security and error-analysis purposes, then automatically deleted. Email inquiries (Section 5) are deleted once no longer needed, and at the latest once statutory retention periods expire.

8. Your rights

Under Articles 15–21 GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to the processing of your personal data. To exercise these rights, contact kontakt@novasubito.com. You also have the right to lodge a complaint with a data protection supervisory authority.