Privacy Policy
Effective as of October 9, 2025
Introduction
We protect your personal data. Here we explain briefly and clearly which data we process, why we do so, and how you can exercise your rights.
Controller
Arpaci Seferaj Jaddi GbR (operating under "Nulara")
Eckardtstraße 10, 44263 Dortmund
Email: info@nulara.de
Processing of Personal Data
The provision of personal data is voluntary. However, without certain information (e.g., email address), some functions or responses cannot be provided.
3.1 Website Visit
When you visit our website, your browser sends technical data to our servers. This includes IP address, date and time, accessed address, referrer, and information about browser and operating system. We store this data temporarily in log files to operate the website securely, find errors, and defend against attacks. Once the purpose is achieved, we delete the log data. The transmission is encrypted via SSL/TLS. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in security, stability, and administration).
3.2 Contact Form
If you contact us via the form, we process your name, email address, and message. Technical metadata such as IP and timestamp also arise. We use this data only to respond to your request. Afterwards, we delete it unless there is another reason against it. The legal basis is Art. 6(1)(a) GDPR (consent).
3.3 Email Contact
If you send us an email, we process your sender address and the content of your message to respond. Email communication is technically never completely risk-free. We delete the data when it is no longer needed. The legal basis is Art. 6(1)(a) GDPR (consent); if the communication serves contract initiation or fulfillment, Art. 6(1)(b) GDPR.
3.4 Newsletter
If you subscribe to the newsletter, we store your email address and send you news about products, services, and updates. We use double opt-in: After registration, you confirm by email. Registration and confirmation times as well as IP address are logged. We evaluate openings and clicks anonymously to improve content. You can unsubscribe at any time; afterwards, we delete your data unless you have consented to further use or there is a legally permitted retention. Data processing is based on your consent according to Art. 6(1)(a) GDPR. You can revoke your consent at any time by clicking the unsubscribe link at the end of each newsletter or sending us a message to newsletter@nulara.de.
3.5 Sharing with Partners and External Service Providers
For the professional or technical processing of your request and to provide our services, we may involve selected partners from the areas of artificial intelligence and IT. If necessary, we forward a request in full to a specialized company. With some partners, there is joint controllership according to Art. 26 GDPR. You can exercise your rights with us and with the respective partner; the central contact point is info@nulara.de. You can obtain a current list of the partners used upon request. Sharing for other purposes does not take place. The legal basis is, depending on the occasion, Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract/contract initiation), and Art. 6(1)(f) GDPR (legitimate interest in efficient and high-quality processing).
Hosting and Email Services Provider
The provider that provides our servers so that the website is online and we can receive and send emails is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Privacy policy: https://www.hetzner.com/de/legal/privacy-policy/. There is a data processing agreement with Hetzner (Art. 28 GDPR). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, functional operation of web and email infrastructure); for email communication regarding contracts, additionally Art. 6(1)(b) GDPR.
Analytics Tools
5.1 Microsoft Clarity
To improve our online presence and analyze user behavior, we use the Microsoft Clarity service and, if applicable, Microsoft Advertising. The provider of this service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity helps us understand how visitors interact with our website. For this purpose, movements and interactions on the page are analyzed, e.g., in the form of heatmaps and so-called session replays, which enable anonymous playback of usage. Based on these evaluations, we can continuously improve the usability, security, and effectiveness of our website and make marketing measures more targeted. To collect this information, cookies and comparable tracking technologies are used, including from third parties. These make it possible to recognize returning visitors and assign usage patterns. Processing begins only after you have given us your consent. In the context of using Microsoft Clarity, the following data in particular can be processed: IP address, approximate geographic position (country, region), information about browser and device, time of access, usage behavior (pages accessed, clicks, scroll movements, mouse activity, entries made). A transfer of personal data to third countries, especially to the USA, may occur. The data transfer is based on Art. 45 and 46 GDPR; Microsoft uses standard contractual clauses for this purpose, among other things. Further information can be found at: https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses. Processing is based on Art. 6(1)(a) GDPR, i.e., exclusively with your consent. We ourselves do not store any analytics data. According to Microsoft, the following storage periods apply: Session recordings: 30 days, Favorited sessions: 13 months, Heatmaps: 13 months. Detailed information about storage periods can be found at: https://learn.microsoft.com/de-de/clarity/setup-and-installation/data-retention. Microsoft's privacy policy is available at: https://privacy.microsoft.com/de-de/privacystatement.
5.2 Google Analytics
To evaluate website visits and optimize our content, we use Google Analytics, an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to collect and statistically evaluate data on website usage. The information generated is usually transferred to Google servers and processed there. Tracking only takes place after your consent. The following data in particular can be processed: anonymized IP address, browser and device properties, operating system, referrer URL, time of access, pages visited and duration of visit, general location data (country level). Google Analytics is operated with activated IP anonymization. This means that your IP address is shortened within the member states of the EU or the EEA before it is further processed. A transfer of personal data to servers in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework and is thus recognized as bound to an adequate level of data protection. The legal basis for processing is Art. 6(1)(a) GDPR. You can revoke your consent at any time via the cookie settings. Google stores analytics data usually for 14 months, after which they are deleted or anonymized. Further information can be found in Google's official privacy documents: Privacy Policy: https://policies.google.com/privacy, Information on Google Analytics: https://support.google.com/analytics/answer/6004245.
Cookies
We use cookies for basic functions of the website and - after consent - for analysis. We only set non-essential cookies after your selection in the cookie banner. You can change your decision at any time in the cookie settings. The legal basis for necessary cookies is Art. 6(1)(f) GDPR (legitimate interest in operation and security) and for analytics cookies Art. 6(1)(a) GDPR (consent).
Disclosure to Third Parties
Your data is only disclosed if you have consented, it is necessary for contract fulfillment or pre-contractual steps, there is a legal obligation, or legitimate interests outweigh and no opposing rights exist. The legal basis is, depending on the occasion, Art. 6(1)(a), (b), (c), or (f) GDPR.
Your Rights
8.1 Access: You can request information about the personal data stored about you.
8.2 Rectification: You can have incorrect data corrected and incomplete data completed.
8.3 Erasure: You can request the deletion of your data if the legal requirements are met.
8.4 Restriction: You can have processing restricted if the legal requirements are met.
8.5 Notification obligation: We inform recipients of rectification, erasure, or restriction, where possible. You can request information about these recipients.
8.6 Data portability: You can receive the data you provided in a common, machine-readable format and have it transferred to another controller, as far as technically feasible.
8.7 Withdrawal of consent: You can withdraw consent at any time with effect for the future. The lawfulness of processing until withdrawal remains unaffected.
8.8 Complaint: You can file a complaint with a data protection supervisory authority.
The legal bases for these rights arise from Art. 15 to 21 GDPR.
Right to Object
You can object to processing based on legitimate interests if reasons arise from your particular situation. We will then no longer process the data unless there are compelling legitimate grounds or the processing serves the establishment, exercise, or defense of legal claims. Contact: info@nulara.de. Legal basis: Art. 21 GDPR.
Changes
We adapt these notices when our offers change or legal requirements make this necessary. The current version can be found on our website at (https://www.nulara.de/privacy-policy).