Privacy policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Nadarasa Holding GmbH
Weißdornweg 12 a
28876 Oyten
Germany
Email: info@nadarasa-holding.de
Phone: 0151 11503161

We have not appointed a data protection officer because, in our assessment, the requirements of Art. 37 GDPR and § 38 of the German Federal Data Protection Act (BDSG) are not met. For any data protection questions, please contact us directly at the email address above.

This website does not use a contact form that transmits data to our server. The contact button simply opens your own email application with a pre-filled recipient address; your message only leaves your device once you send it through your own email or phone provider, not through this website.

If you do contact us by email or phone, we process the data you voluntarily provide (e.g. name, contact details, message content) solely to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into a contract, and otherwise our legitimate interest in handling enquiries efficiently under Art. 6(1)(f) GDPR. Providing your data is voluntary; without it, we cannot process your enquiry. We delete this data once your enquiry has been fully dealt with and no statutory retention obligations apply.

Incoming emails are received through the mail servers of our email provider, one.com.

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes technically necessary server logs (including IP address, page requested, and the time and browser type of access) to deliver the website reliably and securely. The legal basis is our legitimate interest in the reliable and secure operation of the website under Art. 6(1)(f) GDPR. These server logs are deleted automatically after a short period, unless they are needed for longer to defend against attacks.

Because Vercel Inc. is based in the USA, a third country within the meaning of the GDPR, this involves a transfer of personal data to the USA. Vercel states that it is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as a basis for an adequate level of data protection (adequacy decision under Art. 45 GDPR); Vercel additionally provides the EU Standard Contractual Clauses under Art. 46 GDPR.

This website does not use analytics, marketing or tracking cookies. No website tracking takes place and no user profiles are created. Fonts are embedded locally, and no content from third-party providers (e.g. font services, maps or videos) is loaded. Only the technically necessary server logs described in section 4 are processed.

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

You have the following rights against us at any time regarding your personal data:

• Access to the data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise these rights, please contact us at the email address above.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). As Nadarasa Holding GmbH is based in Lower Saxony, this is the Data Protection Commissioner of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.