Privacy Policy

1. Overview

We take the protection of your personal data seriously. This policy explains what data we process when you use this website, why we do so, and what rights you have. Processing is carried out in accordance with the GDPR and the German Federal Data Protection Act (BDSG).

2. Controller

The controller for data processing on this website is the provider named in the Imprint. You can reach us using the contact details given there.

3. Hosting

This website is hosted on servers located in Germany. Our hosting provider processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Server log files are processed to operate and secure the service on the basis of our legitimate interest (Art. 6 (1)(f) GDPR).

4. Server log files

When you visit this site the web server temporarily records technical data: the requesting IP address in shortened form, date and time, the page requested, the referring page, and your browser and operating system. This data is used solely to operate the site securely and reliably, is not merged with other data sources, and is deleted or anonymised after a short retention period.

5. Cookies

This site sets one strictly necessary cookie ("nds_session") when you use the contact form or log in to the client portal. It holds a random identifier so the server can protect your form or login against cross-site request forgery. It contains no tracking data, is not shared with third parties, and expires when you close your browser. Because it is technically required, no consent banner is shown for it. A second cookie ("nds_locale") stores only your chosen display language (EN or DE).

6. Contact form and project enquiries

When you send an enquiry through the contact form or project calculator we process the data you enter (such as name, company, email, phone, budget, and your message) to respond to your request and, where applicable, to prepare an offer. The legal basis is Art. 6 (1)(b) GDPR (steps prior to a contract) and Art. 6 (1)(a) GDPR (your consent). We keep this data until your request has been fully dealt with and then in line with statutory retention periods.

7. Spam protection

To protect our forms from automated abuse we use a privacy-friendly bot-detection check. It evaluates technical signals of your request to tell humans and bots apart. The legal basis is our legitimate interest in preventing spam and attacks (Art. 6 (1)(f) GDPR).

8. Client portal

If you have a client account we process your account data, tickets, messages, uploaded files, and invoice data to provide the portal and manage our contractual relationship (Art. 6 (1)(b) GDPR). Access is limited to you and authorised staff. Data is retained for the duration of the contract and the applicable statutory periods thereafter.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on consent you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority — for Lower Saxony this is the State Commissioner for Data Protection (LfD Niedersachsen).

10. Contact for data protection matters

For any question about your data or to exercise your rights, contact us at contact@nds-webdesign.de.