Privacy Policy

This privacy policy describes what data is actually processed when you visit this website. We deliberately limit it to what this website actually does, rather than including boilerplate clauses for features it doesn't have. This English page is provided for convenience; the German-language Datenschutzerklärung is the legally binding version.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is NovaSubito GmbH, Gerhart-Hauptmann-Straße 2, 64319 Pfungstadt, Germany, represented by Jan Peter Schäfer, reachable at info@novasubito.com.

2. External Data Protection Officer

Our external Data Protection Officer is Frank Späth. You can contact him at DPO@path-2-green.info.

3. No cookies, no tracking – only technically necessary local storage

This website does not use cookies, analytics or tracking software, or marketing pixels. No user profiles are created. Only two technically necessary values are stored locally in your browser (localStorage): your chosen language and the fact that you have already dismissed our privacy notice. These values contain no personal data, are not transmitted to us or to any third party, and remain solely on your device. They serve only the site functionality you requested and are therefore exempt from consent within the meaning of Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). You can delete these values at any time via your browser settings. Should this practice change in the future, this policy will be updated before activation and, where required, consent will be obtained.

4. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you access the website, the hosting provider automatically processes technical access data (including IP address, date and time of access, page requested, data volume transferred, referrer, browser, and operating system) insofar as this is necessary to deliver the website reliably and securely. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website). The data is not evaluated for marketing purposes or used to build user profiles.

5. Embedded fonts

The typeface used on this website (Space Grotesk) is stored locally on our own server and is not loaded from third-party servers (e.g. Google Fonts). No data is transmitted to font providers when you visit this website.

6. Contact form and email enquiries

When you use our contact form, we process your name, email address, any company and telephone number you optionally provide, the subject, your message, your acknowledged review of this Privacy Policy, and temporarily a pseudonymized hash of your IP address for abuse prevention. We use this information solely to handle and answer your enquiry. The form does not store the enquiry in a database; the message is sent through our hosting provider's mail infrastructure to info@novasubito.com. You may alternatively contact us directly by email. The legal basis is Art. 6(1)(b) GDPR where pre-contractual measures are concerned and otherwise Art. 6(1)(f) GDPR (legitimate interest in handling business enquiries and protecting the form from misuse).

7. Recipients and place of processing

ALL-INKL.COM – Neue Medien Münnich, acting as our hosting processor, receives the access data described in Section 4 and the information submitted through the contact form. The message is subsequently delivered to NovaSubito GmbH's business mailbox in Google Workspace. Within NovaSubito, access is limited to the people who need to handle the enquiry. The information is not disclosed for advertising purposes.

8. Storage period

Server access data (Section 4) is generally deleted by the hosting provider after no more than seven days. The IP hash used to limit automated form submissions is used for no more than ten minutes. Contact enquiries (Section 6) are deleted once they are no longer needed to handle the enquiry and any subsequent business relationship, and at the latest once statutory retention periods expire.

9. Your rights

Under Articles 15–21 GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to the processing of your personal data. To exercise these rights, contact info@novasubito.com. You also have the right to lodge a complaint with a data protection supervisory authority.