Privacy Policy

This is a courtesy translation. The legally binding version is the German original. We hereby inform you in accordance with the legal requirements of data protection law (in particular, the BDSG n.F. and the European General Data Protection Regulation GDPR) about the type, scope, and purpose of the processing of personal data by our company. Regarding the definition of terms such as personal data or processing, we refer to Art. 4 GDPR.

Name and Contact Details of the Responsible Party

Responsible according to Art. 4 No. 7 GDPR:

nucanoo GmbH
Mittelweg 144
20148 Hamburg, Germany
Managing Director: Mark-Erik Fraser
Commercial Register No.: HRB 164353
Register Court: Amtsgericht Hamburg
Email Address: Loading email

Types of Data, Purposes of Processing, and Categories of Data Subjects

Below we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

1. Types of data we process

Inventory data, contact data, content data, usage data, meta/communication data.

2. Purposes of processing according to Art. 13 para. 1 c) GDPR

Making the website user-friendly, providing functions and content on the website, uninterrupted and secure operation of our website.

3. Categories of data subjects according to Art. 13 para. 1 e) GDPR

Website visitors/users, customers, suppliers, interested parties, employees. The data subjects are collectively referred to as users.

Legal Basis for Processing Personal Data

Below we inform you about the legal basis for processing personal data:

  1. If we have obtained your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis.
  2. If the processing is necessary for the performance of a contract or for pre-contractual measures taken upon your request, Art. 6 para. 1 sentence 1 lit. b) GDPR is the legal basis.
  3. If the processing is necessary for the fulfillment of a legal obligation to which we are subject, Art. 6 para. 1 sentence 1 lit. c) GDPR is the legal basis.
  4. If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 sentence 1 lit. d) GDPR is the legal basis.
  5. If the processing is necessary for the purposes of legitimate interests pursued by us or a third party, and these interests are not overridden by your interests or fundamental rights and freedoms, Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis.

Disclosure of Personal Data to Third Parties and Processors

Without your consent, we do not generally disclose data to third parties. If this is the case, the disclosure is based on the above-mentioned legal bases, for example, due to a court order or legal obligation to disclose the data for law enforcement, hazard prevention, or the enforcement of intellectual property rights.

We also use processors to process your data. Web hosting for this website is provided by Domain-Factory (a brand of GoDaddy Europe), a German hosting provider with servers located in Germany. When data is passed on to processors, it is always done in accordance with Art. 28 GDPR. We carefully select our processors, regularly check them, and have granted ourselves the right to issue instructions regarding the data.

Data Transfer to Third Countries

The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Therefore, your data is primarily processed by companies for which GDPR applies. If processing by third-party services outside the European Union or the European Economic Area takes place, these must meet the special requirements of Art. 44 ff. GDPR. This means the processing takes place on the basis of special guarantees, such as the officially recognized determination by the EU Commission of an adequate level of data protection (e.g. under the EU-US Data Privacy Framework) or the observance of officially recognized special contractual obligations, the so-called standard contractual clauses.

We note that this website does not integrate any third-party services that would require data transfer to third countries. No external analytics, tracking, or advertising services are used.

Deletion of Data and Storage Duration

Unless explicitly stated in this data protection declaration, your personal data will be deleted or blocked as soon as the purpose for storage no longer applies or the consent you have given is revoked, unless further storage is necessary for evidence purposes or there are legal retention obligations against it.

Existence of Automated Decision Making

We do not use automated decision-making or profiling.

Provision of Our Website and Creation of Log Files

When you use our website for information purposes only (i.e., no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data:

  • IP address
  • Internet service provider of the user
  • Date and time of access
  • Browser type
  • Language and browser version
  • Content of the request
  • Time zone
  • Access status/HTTP status code
  • Data volume
  • Websites from which the request comes
  • Operating system

This data is not stored with other personal data about you. These data are used for the purpose of a user-friendly, functional, and secure delivery of our website to you with functions and content as well as their optimization and statistical evaluation. The legal basis for this is our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f) GDPR.

For security purposes, we store this data in server log files for a period of 14 days. After this period, the data is automatically deleted unless we need to retain it as evidence in the case of attacks on the server infrastructure or other legal violations.

Cookies

This website does not use cookies. Neither technically necessary nor analytical or advertising-related cookies are set. A cookie banner is therefore not required.

No Integration of External Services

This website deliberately does not integrate any third-party services. No external fonts (e.g. Google Fonts), no analytics or tracking tools (e.g. Google Analytics), no content delivery networks (CDN), no social media plugins, and no external advertising services are used. All content — including fonts, stylesheets, and scripts — is loaded exclusively from our own server. As a result, no data is transmitted to third parties when you visit this website.

Contact via Email

If you contact us by email, the data you provide (e.g. your email address, your name if applicable, and your message) will be stored by us to process your inquiry and for follow-up questions. This data will not be shared without your consent. The processing of this data is based on Art. 6 para. 1 sentence 1 lit. b) GDPR (pre-contractual measures) or Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest in processing your inquiry). Your data will be deleted once your inquiry has been fully processed and no statutory retention obligations apply.

Rights of the Data Subject

Objection or revocation against the processing of your data

If the processing is based on your consent according to Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR, you have the right to revoke the consent at any time. The legality of the processing carried out based on the consent until the revocation remains unaffected.

Right to Information

You have the right to information about your personal data stored by us according to Art. 15 GDPR.

Right to Rectification

You have the right to correct inaccurate or complete correct data according to Art. 16 GDPR.

Right to Deletion

You have the right to delete your data stored by us according to Art. 17 GDPR, unless statutory or contractual retention periods or other statutory obligations or rights to further storage oppose this.

Right to Restriction

You have the right to restrict the processing of your personal data if one of the conditions in Art. 18 para. 1 lit. a) to d) GDPR is met.

Right to Data Portability

You have the right to data portability according to Art. 20 GDPR, which means that you can receive the personal data stored by us about you in a structured, commonly used, and machine-readable format, or request the transmission to another controller.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

Data Security

To protect all personal data transmitted to us and to ensure that the data protection regulations by us and our external service providers are complied with, we have taken appropriate technical and organizational security measures. Therefore, all data between your browser and our server is transmitted encrypted via a secure SSL connection.

Last updated: March 21, 2026