Privacy Policy

1. Privacy at a glance

General information

The following information provides a concise overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information is provided in this Privacy Policy.

Data collection on this website

Who is responsible for collecting data on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details are provided in the section titled “Controller”.

How do we collect your data?

Some data is collected when you provide it to us, for example when you contact us by email.

Other data is collected automatically or after you have given consent when you visit the website. This primarily comprises technical data such as browser, operating system, and time of access. This data is collected automatically when you access the website.

What do we use your data for?

Some data is collected to ensure the website functions correctly. Data submitted in connection with inquiries or prospective contracts may also be processed to respond to those inquiries and take pre-contractual steps.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge. You may also request correction or deletion of this data, withdraw consent with future effect, request restriction of processing in certain circumstances, and lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding these rights or other privacy questions.

2. Hosting

We host this website with the following provider:

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (“Hetzner”).

Details are available in Hetzner’s privacy policy: https://www.hetzner.com/legal/privacy-policy/.

Hetzner is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where consent is requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG insofar as the consent covers storing cookies or accessing information on the user’s device. Consent may be withdrawn at any time.

Data processing agreement

We have concluded a data processing agreement with the provider named above. This agreement ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General and mandatory information

Data protection

We take the protection of your personal data seriously and treat it confidentially in accordance with applicable data protection law and this Privacy Policy.

When you use this website, various items of personal data may be collected. This Privacy Policy explains what data we collect, how we use it, and the purposes of that processing.

Please note that data transmitted over the internet, including email communication, may be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Nouma Autonomy GmbH
Fürther Straße 246c, c/o NKubator
90429 Nuremberg, Germany

Email: info@nouma-autonomy.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Storage period

Unless a more specific retention period is stated in this Privacy Policy, your personal data remains with us until the purpose for processing no longer applies. If you submit a legitimate deletion request or withdraw consent, your data will be deleted unless other legally permitted grounds require its continued storage. In that case, deletion takes place once those grounds no longer apply.

Legal bases for processing

Where you have consented to processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR for special categories of data. Express consent to transfers to third countries is based on Article 49(1)(a) GDPR. Access to or storage of information on your device is additionally based on Section 25(1) TDDDG where applicable. Processing required for a contract or pre-contractual steps is based on Article 6(1)(b) GDPR; processing required by law is based on Article 6(1)(c) GDPR; and processing based on our legitimate interests is based on Article 6(1)(f) GDPR.

Recipients of personal data

We work with external service providers in the course of our business. Personal data is shared only where necessary to perform a contract, fulfil a legal obligation, pursue a legitimate interest, or where another legal basis permits the transfer. Processors receive data only on the basis of a valid data processing agreement.

Withdrawal of consent

You may withdraw consent at any time. The lawfulness of processing carried out before withdrawal remains unaffected.

Right to object in specific cases under Article 21 GDPR

Where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then cease processing the personal data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

Right to lodge a complaint

If you believe that the GDPR has been infringed, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format. Direct transfer to another controller is provided only where technically feasible.

Access, correction, and deletion

Within the scope of applicable law, you have the right to obtain information about your stored personal data, its origin and recipients, and the purpose of processing. You may also have the right to request correction or deletion.

Right to restriction of processing

You have the right to request restriction of processing in the following cases:

• If you dispute the accuracy of your personal data, for the period needed to verify its accuracy.
• If processing is unlawful and you request restriction instead of deletion.
• If we no longer need the data but you require it to establish, exercise, or defend legal claims.
• If you have objected under Article 21(1) GDPR while the balance of interests is being assessed.

Where processing has been restricted, the data may, apart from storage, be processed only with your consent, to establish, exercise, or defend legal claims, to protect the rights of another person, or for important reasons of public interest.

Unsolicited advertising emails

We object to the use of contact details published as part of our legal notice for unsolicited advertising and information materials. We reserve the right to take legal action in the event of unsolicited promotional information, including spam emails.

4. Data collection on this website

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. It is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website; server log files must be collected for this purpose.

Contact by email

If you contact us by email, your inquiry, including all personal data arising from it (e.g. name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for pre-contractual steps. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) where requested; consent may be withdrawn at any time.

The data you send to us in contact inquiries remains with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.