Privacy policy

1. Data controller

EU representative (Art. 27 GDPR)

2. Data we collect

2.1 Contact form

When you submit our contact form, we collect:

• Name
• Email address
• Company (optional)
• Message content

2.2 Server log files

Our web server automatically collects:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Pages accessed

IP addresses are stored in full to enable investigation of security incidents, detection of attacks, and integrity of the platform.

2.3 Language preference

When you open the start page, our server reads the language preference your browser sends with the request (the Accept-Language header) and forwards you to the German version of the page if German is preferred. This happens in memory while the request is handled. We do not store a cookie, we do not use local storage, and no language profile is created. You can switch language at any time using the DE/EN control in the navigation.

3. Legal basis and purpose

Contact form (Art. 6(1)(a) GDPR — consent). We process contact form data based on your consent in order to respond to your inquiry and communicate about our services.

Server logs (Art. 6(1)(f) GDPR — legitimate interest). We process server log data based on our legitimate interest in ensuring the security, stability, and functionality of this site.

4. Storage location and retention

All data is stored exclusively in the AWS European Sovereign Cloud (ESC) in Brandenburg, Germany (region eusc-de-east-1).

Retention:

• Contact form submissions — 90 days, automatically deleted after expiry.
• Server logs — 90 days, automatically deleted after expiry.

5. Data sharing

We do not sell or share your personal data with third parties for marketing purposes.

Data is processed and stored using secure cloud infrastructure services. We have data processing agreements in place with our service providers to ensure GDPR compliance.

Access is restricted to authorised Nuvibit employees who need it to respond to your inquiry.

6. Your rights

You have the following rights regarding your personal data:

• Right to access (Art. 15) — request a copy of your personal data.
• Right to rectification (Art. 16) — correct inaccurate data.
• Right to erasure (Art. 17) — request deletion of your data.
• Right to data portability (Art. 20) — receive your data in a structured format.
• Right to object (Art. 21) — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw at any time. Prior processing remains lawful.

To exercise any of these rights, contact privacy@nuvibit.com.

7. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority.

Switzerland. Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch.

Germany. State data protection authorities and the Federal Commissioner — bfdi.bund.de.

8. Security

We apply the following technical and organisational measures:

• TLS/HTTPS encryption for all data in transit.
• Data stored exclusively in the AWS European Sovereign Cloud.
• Encryption at rest for stored data.
• Least-privilege access controls and authentication.
• Regular security audits and updates.

9. Analytics

This site uses Umami Analytics, a privacy-focused analytics solution that does not use cookies, does not collect personal data, does not track users across websites, and anonymises all visitor data.

Umami collects only anonymised, aggregated data such as:

• Page views
• Referrer source, including campaign parameters (utm_*) in the link you used
• Browser type and version
• Device type (desktop, mobile, tablet)
• Country, derived from anonymised IP

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in understanding website usage to improve user experience. No consent banner is required as no personal data or cookies are used.

10. Changes to this policy

We may update this policy from time to time. The current version is always available at this URL. Material changes are indicated by updating the date in the title block above.

11. Contact

For questions about this policy or our data processing: