Privacy Policy

1. Data Controller

2. Data We Collect

2.1 Contact Form

When you submit our contact form, we collect:

• Name
• Email address
• Company (optional)
• Message content

2.2 Server Log Files

Our web server automatically collects:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Accessed pages

IP addresses are stored in full to enable investigation of security incidents, detect attacks, and ensure platform integrity.

3. Legal Basis and Purpose

4. Data Storage and Retention

Location: All data is stored exclusively in the AWS European Sovereign Cloud (ESC) in Brandenburg, Germany (eusc-de-east-1).

Retention:

• Contact form submissions: 90 days (automatically deleted after expiration)
• Server logs: 90 days for security purposes (automatically deleted after expiration)

5. Data Processing

We do not sell or share your personal data with third parties for marketing purposes.

Your data is processed and stored using secure cloud infrastructure services. We have data processing agreements in place with our service providers to ensure GDPR compliance and data protection.

Data access is restricted to authorized Nuvibit employees who need it to respond to your inquiry.

6. Your Rights (GDPR)

You have the following rights regarding your personal data:

To exercise your rights, contact us at: privacy@nuvibit.com

7. Right to Complain

You have the right to lodge a complaint with a supervisory authority:

8. Security

We implement appropriate technical and organizational measures:

• TLS/HTTPS encryption for all data transmission
• Data stored exclusively in AWS European Sovereign Cloud
• Regular security audits and updates
• Access controls and authentication
• Encryption at rest for stored data

9. Analytics

This website uses Umami Analytics, a privacy-focused analytics solution that:

• Does not use cookies
• Does not collect personal data
• Does not track users across websites
• Anonymizes all visitor data
• Is GDPR compliant by design

Umami collects only anonymized, aggregated data such as:

• Page views
• Referrer sources
• Browser type and version
• Device type (desktop, mobile, tablet)
• Country (based on anonymized IP)

Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) in understanding website usage to improve user experience. No consent banner is required as no personal data or cookies are used.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at this URL. Material changes will be indicated by updating the date at the top of this policy.