Privacy Policy
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can personally identify you. Detailed information can be found in the privacy policy below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Controller" section below.
How do we collect your data?
Some data is collected because you provide it to us - for example, data you enter into the contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website, primarily technical data (e.g., internet browser, operating system, or time of page access). Technical collection begins automatically as soon as you enter this website.
What do we use your data for?
Some data is collected to ensure error-free provision of the website. Other data is used for audience measurement or, with your consent, to analyze use of the website. If you contact us through the form or another channel, we process the data you provide to handle your inquiry and, where applicable, take steps prior to entering into a contract.
What rights do you have regarding your data?
You have the right to receive free information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request the correction, deletion, or restriction of processing of this data. You also have the right to lodge a complaint with the competent supervisory authority. Feel free to contact us at any time regarding this or any other questions about data protection.
Hosting
Host: Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA
This website is hosted externally. Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, metadata, communication data, and other data generated through a website. External hosting is used to take steps prior to and perform contracts with prospective and existing clients (Art. 6(1)(b) GDPR) and based on our legitimate interest in providing this website securely, quickly, and efficiently (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR forms part of our agreement with Netlify. For transfers to the United States, the agreement provides appropriate safeguards, including the European Commission's Standard Contractual Clauses.
Controller
Name: Giuseppe De Nuzzo
Business name: denutec
Address: Schubertstraße 11, 85139 Wettstetten, Germany
Phone: 01721794982
Email: info@denutec.com
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Retention period
Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for its processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g., retention periods under tax or commercial law).
Legal basis for data processing
If your data is required for the performance of a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. If we are legally obligated to process data, we rely on Art. 6(1)(c) GDPR. Otherwise, processing takes place on the basis of our legitimate interest under Art. 6(1)(f) GDPR. The legal basis applicable in each individual case is stated in the respective sections of this privacy policy.
Recipients of personal data
As part of our business activities, we work with external service providers, in particular our hosting provider and the provider of our contact form (see below). We only share personal data if this is necessary for the performance of a contract, if we are legally obliged to do so, or if there is a legitimate interest in the disclosure. A data processing agreement (DPA) exists or will be concluded with all processors we engage.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected.
Right to object to data processing (Art. 21 GDPR)
Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged violation.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
Access, rectification, and erasure
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, if applicable, a right to rectification or erasure of this data. Feel free to contact us at any time regarding this.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. This right exists in particular in the following cases:
- If you dispute the accuracy of your personal data stored with us, for the duration it takes to verify this.
- If the processing was/is unlawful and you request restriction instead of erasure.
- If we no longer need the data, but you need it to assert, exercise, or defend legal claims.
- If you have objected under Art. 21(1) GDPR, for as long as it is not yet clear whose interests prevail.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock icon in your browser line.
Objection to promotional emails
We object to the use of contact details published as part of our legal notice for sending unsolicited advertising and informational materials. We reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.
Cookies and browser storage
After you make a selection in the privacy bar, this website stores the technically necessary “denutec_consent” cookie. It contains only the choice “necessary” or “analytics”, applies to the entire website, and is deleted after no more than 180 days. This prevents us from asking for your decision on every page view. Netlify Web Analytics operates independently without a client-side analytics script and without local or session storage. The optional interaction analytics described below is activated only when “analytics” is selected.
Server log files
When this website is accessed, Netlify automatically collects technical access data. This may include browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address. We do not combine this data with other data sources.
Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, efficiently, and without technical errors.
Netlify Web Analytics
We use Netlify Web Analytics for server-side audience measurement. The analysis is based on requests that Netlify already processes when delivering this website. No additional analytics script is executed in your browser.
The data evaluated includes page views, different visitors based on IP addresses, approximate locations, pages visited, referring sources, resources not found (404 errors), and bandwidth used. We use this information to assess the website's reach, content, and technical quality.
Processing is based on our legitimate interest in privacy-conscious audience measurement and improving our website pursuant to Art. 6(1)(f) GDPR. The service provider is Netlify, Inc., USA. According to Netlify, appropriate safeguards, in particular the European Commission's Standard Contractual Clauses, are used for transfers to third countries. Under the Netlify Free plan currently used, analytics data is available to us for one day.
Optional interaction analytics
If you select “Allow analytics” in the privacy bar, we additionally record individual usage events: clicks on contact links, starting, successfully submitting or abandoning the contact form, and the rounded visible duration of individual page sections. The page path, language, time and, where applicable, the section name or link placement are processed.
Form entries such as name, email address, company, topic and message are not included in analytics. We do not store IP addresses or full user agents for this analysis. Events are transmitted and stored using Netlify Functions and Netlify Blobs provided by Netlify, Inc., USA. Stored events are automatically deleted no later than 30 days after collection.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can change your choice at any time for the future using “Cookie settings” in the footer.
Contact form
If you send us inquiries via the contact form, the information you provide in the form - name, email address, company (if applicable), topic, and message - will be stored and processed to handle your inquiry. Beyond the service providers named in this privacy policy, we only disclose this data where there is a legal basis to do so.
For technical processing, we use Netlify Forms, a service provided by our hosting provider Netlify, Inc., USA. Your form entries are transmitted to us through Netlify's systems and stored in our protected project area. Netlify processes this data as a service provider under the applicable contractual and data protection terms. According to Netlify, appropriate safeguards, in particular the European Commission's Standard Contractual Clauses, are used for transfers to third countries.
Processing takes place on the basis of Art. 6(1)(f) GDPR (legitimate interest in effectively handling your inquiry) or Art. 6(1)(b) GDPR if your inquiry relates to the initiation of a contract. The data remains with us until you request its deletion or the purpose for storage no longer applies; statutory retention periods remain unaffected.
Inquiries by email or phone
If you contact us by email or phone, your inquiry, including all resulting personal data (name, contact details, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent. Processing takes place on the basis of Art. 6(1)(b) or (f) GDPR. The data remains with us until you request its deletion or the purpose for storage no longer applies.
Google Workspace, Gmail, Google Drive, and Google Meet
We use Google Workspace with Gmail, Google Drive, and Google Meet for business email communication, storing and jointly editing files, and holding audio and video conferences. The provider for customers established in Germany is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland.
The data processed may include names, email addresses, contact details, communication content, files, appointment and meeting information, and technical connection data. Audio and video data as well as chat messages may also be processed during video conferences. We do not record or automatically transcribe meetings by default.
Processing is necessary to take steps prior to entering into a contract and to perform contracts under Art. 6(1)(b) GDPR and is based on our legitimate interest in efficient business communication and collaboration under Art. 6(1)(f) GDPR. Where consent is required, processing is based on Art. 6(1)(a) GDPR.
A data processing agreement under Art. 28 GDPR has been concluded with Google in the form of the Cloud Data Processing Addendum. Google may use subprocessors outside the European Union. The contractual framework provides appropriate safeguards for required transfers to third countries, in particular the European Commission's Standard Contractual Clauses. Data is deleted when the purpose of processing no longer applies and no statutory or contractual retention obligations prevent deletion.
More information: Google Privacy Policy
Web fonts
This website uses the Archivo Expanded, Geist, and Geist Mono typefaces. The font files are served locally from our own server; no connection to Google's servers or any other third party is made. As a result, no personal data, in particular no IP address, is transmitted to Google or any other font provider.
Source: eRecht24