Privacy policy

In short

This website uses no cookies, no analytics and no tracking, and it loads nothing from third-party servers. Fonts and all other files are served from our own hosting. The only personal data processed are the technical connection data every web server needs to deliver a page, and whatever you send us when you write to us.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Represented by the managing director, Tim Michalek.

Hosting and server log data

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the website through its global network, usually from the data centre closest to you. When you visit the website, Cloudflare automatically processes the data your browser transmits, in particular:

• IP address
• date and time of the request
• the page or file requested
• referrer URL, if your browser sends one
• browser type, version and operating system (user agent)

This processing is necessary to deliver the website, to keep it secure and stable, and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable provision of our website. The data are not merged with other data sources and are deleted by Cloudflare after a short period, unless they are needed to investigate a security incident.

We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR. Data may be processed in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has found an adequate level of data protection (Art. 45 GDPR). In addition, the agreement includes the EU standard contractual clauses.

Contacting us by email

If you contact us by email, we process the data you provide (such as your name, email address and the content of your message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR otherwise; our legitimate interest lies in responding to enquiries addressed to us. We delete the data once your enquiry has been dealt with, unless statutory retention obligations require us to keep them longer.

Links to other websites

Our website links to our profiles on LinkedIn, YouTube and Instagram. These are plain links: no data is sent to these services until you click one. Once you do, the privacy policy of the respective provider applies.

Encryption

This website is delivered exclusively over an encrypted connection (TLS), so that data you transmit cannot be read by third parties.

Your rights

You have the right

• to access the personal data we hold about you (Art. 15 GDPR),
• to have inaccurate data corrected (Art. 16 GDPR),
• to have your data erased (Art. 17 GDPR),
• to restrict processing (Art. 18 GDPR),
• to data portability (Art. 20 GDPR),
• to object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

To exercise any of these rights, write to info@nocturasys.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

No obligation to provide data

You are not obliged to provide us with personal data. Without the connection data described above, however, the website cannot be delivered to you. We do not use automated decision-making or profiling.

Changes to this policy

We will update this privacy policy when the website or the legal requirements change. The current version is always available on this page.