Privacy Policy

We hereby inform you in accordance with the legal requirements of data protection law (in particular, the BDSG n.F. and the European General Data Protection Regulation ‘GDPR’) about the type, scope, and purpose of the processing of personal data by our company. This data protection declaration also applies to our websites and social media profiles. Regarding the definition of terms such as “personal data” or “processing,” we refer to Art. 4 GDPR.

Name and Contact Details of the Responsible Party

Responsible according to Art. 4 No. 7 GDPR:

nucanoo GmbH
Mittelweg 144
20148 Hamburg, Germany
Managing Director: Mark-Erik Fraser
Commercial Register No.: HRB 164353
Register Court: Amtsgericht Hamburg
Email Address:

Types of Data, Purposes of Processing, and Categories of Data Subjects

Below we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

  • Types of data we process
  • Purposes of processing according to Art. 13 para. 1 c) GDPR: Making the website user-friendly, providing functions and content on the website, uninterrupted and secure operation of our website
  • Categories of data subjects according to Art. 13 para. 1 e) GDPR: Website visitors/users, customers, suppliers, interested parties, employees

The data subjects are collectively referred to as “users.”

Legal Basis for Processing Personal Data

Below we inform you about the legal basis for processing personal data:

  • If we have obtained your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis.
  • If the processing is necessary for the performance of a contract or for pre-contractual measures taken upon your request, Art. 6 para. 1 sentence 1 lit. b) GDPR is the legal basis.
  • If the processing is necessary for the fulfillment of a legal obligation to which we are subject (e.g., statutory retention obligations), Art. 6 para. 1 sentence 1 lit. c) GDPR is the legal basis.
  • If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 sentence 1 lit. d) GDPR is the legal basis.
  • If the processing is necessary for the purposes of legitimate interests pursued by us or a third party, and these interests are not overridden by your interests or fundamental rights and freedoms, Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis.

Disclosure of Personal Data to Third Parties and Processors

Without your consent, we do not generally disclose data to third parties. If this is the case, the disclosure is based on the above-mentioned legal bases, for example, when passing on data to online payment providers to fulfill a contract or due to a court order or legal obligation to disclose the data for law enforcement, hazard prevention, or the enforcement of intellectual property rights. We also use processors (external service providers, for example, for web hosting our websites and databases) to process your data. When data is passed on to processors, it is always done in accordance with Art. 28 GDPR. We carefully select our processors, regularly check them, and have granted ourselves the right to issue instructions regarding the data. Additionally, the processors must have taken suitable technical and organizational measures and comply with the data protection regulations according to the BDSG n.F. and GDPR.

Data Transfer to Third Countries

The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Therefore, your data is primarily processed by companies for which GDPR applies. If processing by third-party services outside the European Union or the European Economic Area takes place, these must meet the special requirements of Art. 44 ff. GDPR. This means the processing takes place on the basis of special guarantees, such as the officially recognized determination by the EU Commission of an adequate level of data protection or the observance of officially recognized special contractual obligations, the so-called “standard contractual clauses.” If we obtain your express consent to the data transfer to the USA due to the ineffectiveness of the so-called “Privacy Shield,” according to Art. 49 para. 1 sentence 1 lit. a) GDPR, we point out the risk of secret access by US authorities and the use of the data for monitoring purposes, possibly without legal remedies for EU citizens.

Deletion of Data and Storage Duration

Unless explicitly stated in this data protection declaration, your personal data will be deleted or blocked as soon as the purpose for storage no longer applies or the consent you have given is revoked, unless further storage is necessary for evidence purposes or there are legal retention obligations against it. These include, for example, commercial retention obligations for business letters according to § 257 para. 1 HGB (6 years) and tax retention obligations for documents according to § 147 para. 1 AO (10 years). When the prescribed retention period expires, your data will be blocked or deleted, unless further storage is necessary for a contract conclusion or contract fulfillment.

Existence of Automated Decision Making

We do not use automated decision-making or profiling.

Provision of Our Website and Creation of Log Files

When you use our website for information purposes only (i.e., no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data:

  • IP address
  • Internet service provider of the user
  • Date and time of access
  • Browser type
  • Language and browser version
  • Content of the request
  • Time zone
  • Access status/HTTP status code
  • Data volume
  • Websites from which the request comes
  • Operating system

This data is not stored with other personal data about you.

These data are used for the purpose of a user-friendly, functional, and secure delivery of our website to you with functions and content as well as their optimization and statistical evaluation. The legal basis for this is our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f) GDPR.

We store this data for security reasons in server log files for a period of days. After this period, they are automatically deleted unless we need to keep them for evidence purposes in case of attacks on the server infrastructure or other legal violations.

Cookies

We use so-called cookies during your visit to our website. Cookies are small text files that your internet browser stores on your computer. When you visit our website again, these cookies provide information to automatically recognize you. This information is used to optimize our offerings and make it easier for you to access our site. Cookies are categorized into the following types:

  • Necessary, essential cookies: Essential cookies are cookies that are absolutely necessary for the operation of the website, e.g., for logins, shopping carts, or user input regarding the language of the website.
  • Session cookies: Session cookies are needed to recognize multiple uses of an offer by the same user (e.g., if you have logged in to determine your login status). When you visit our site again, these cookies provide information to automatically recognize you. The information obtained in this way is used to optimize our offers and make it easier for you to access our site. If you close the browser or log out, the session cookies are deleted.
  • Persistent cookies: These cookies remain stored even after you close the browser. They serve to store the login, range measurement, and marketing purposes. These are automatically deleted after a specified duration that can vary depending on the cookie. In the security settings of your browser, you can delete the cookies at any time.
  • Third-party cookies (especially from advertisers): You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that you may then not be able to use all functions of this website. Please refer to the respective data protection declarations of the third-party providers for more information on these cookies.

Data categories: User data, cookie, user ID (including the visited pages, device information, access times, and IP addresses).

Processing purposes: The information obtained in this way is used to optimize our web offers technically and economically and to provide you with easier and more secure access to our website.

For the multilingualism of our website

We use the Polylang program. Polylang is a product of WP SYNTEX, 28, rue Jean Sebastien Bach, 38090 Villefontaine, France. Polylang cookies are set exclusively to recognize and retain the language used or selected by the user. These cookies are stored for one year and then deleted. The legal basis for this is Art. 6 para. 1 lit. f GDPR. For more information on data protection compliance, please see here: https://polylang.pro/doc/is-polylang-compatible-with-the-eu-cookie-law/

Consent with Consent Technology

Our website uses the consent technology of CookieYes to obtain your consent to store certain cookies in your browser or to use certain technologies and to document these in compliance with data protection regulations. The provider of this technology is CookieYes Limited of 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom (hereinafter “CookieYes”). When you enter our website, a CookieYes cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. These data are not passed on to CookieYes. The collected data will be stored until you delete the CookieYes cookie yourself in your browser or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. The use of the CookieYes consent technology is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Legal bases: If we process your personal data with the help of cookies based on your consent (“opt-in”), then Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement, and economic operation of the website, and in that case, Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis. The legal basis is also Art. 6 para. 1 sentence 1 lit. b) GDPR, if the cookies are set to initiate a contract, e.g., for orders.

Storage period/deletion: The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of data collection for the provision of the website, this is the case when the respective session is ended. Cookies are otherwise stored on your computer and transmitted from it to our site. Therefore, you as the user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Already stored cookies can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent. Here you will find information on deleting cookies by browser:

Objection and “Opt-out”

You can generally prevent the storage of cookies on your hard drive by selecting “do not accept cookies” in your browser settings. However, this may result in a limited functionality of our offers. You can object to the use of cookies by third-party providers for advertising purposes through an “opt-out” via this American website (https://optout.aboutads.info) or this European website (http://www.youronlinechoices.com/de/praferenzmanagement/).

Rights of the Data Subject

Objection or revocation against the processing of your data: If the processing is based on your consent according to Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR, you have the right to revoke the consent at any time. The legality of the processing carried out based on the consent until the revocation remains unaffected. If we base the processing of your personal data on the balancing of interests according to Art. 6 para. 1 sentence 1 lit. f) GDPR, you can object to the processing. This is the case if the processing is not necessary, in particular, to fulfill a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask for an explanation of the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling legitimate reasons based on which we will continue the processing. You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise the right to object free of charge. You can inform us of your advertising objection at the following contact details:

nucanoo GmbH
Mittelweg 144
20148 Hamburg, Germany
Managing Director: Mark-Erik Fraser
Commercial Register No.: HRB 164353
Register Court: Amtsgericht Hamburg
Email Address:

Right to Information

You have the right to information about your personal data stored by us according to Art. 15 GDPR. This particularly includes information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage period, the origin of your data, if it was not collected directly from you.

Right to Rectification

You have the right to correct inaccurate or complete correct data according to Art. 16 GDPR.

Right to Deletion

You have the right to delete your data stored by us according to Art. 17 GDPR, unless statutory or contractual retention periods or other statutory obligations or rights to further storage oppose this.

Right to Restriction

You have the right to restrict the processing of your personal data if one of the conditions in Art. 18 para. 1 lit. a) to d) GDPR is met:

  • If you dispute the accuracy of your personal data for a period that allows the controller to verify the accuracy of the personal data;
  • the processing is unlawful, and you oppose the deletion of the personal data and instead request the restriction of their use;
  • the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise, or defense of legal claims; or
  • if you have objected to processing according to Art. 21 para. 1 GDPR and it is not yet determined whether the legitimate reasons of the controller outweigh your reasons.

Right to Data Portability

You have the right to data portability according to Art. 20 GDPR, which means that you can receive the personal data stored by us about you in a structured, commonly used, and machine-readable format, or request the transmission to another controller.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority in particular in the member state of your place of residence, your workplace, or the location of the alleged infringement.

Data Security

To protect all personal data transmitted to us and to ensure that the data protection regulations by us and our external service providers are complied with, we have taken appropriate technical and organizational security measures. Therefore, all data between your browser and our server is transmitted encrypted via a secure SSL connection.