Privacy
1. Privacy at a glance
The essentials
This website sets no cookies, uses no tracking and no analytics tools, and loads no third-party content – no external fonts, scripts, maps or videos. All files are served from our own web space. There are no forms.
General information
The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Controller”.
How do we collect your data?
Some data is collected when you provide it to us, for example when you contact us by email or phone.
Other data is collected automatically by our host’s IT systems when you visit the website. This is technical data (e.g. browser, operating system or time of access), see “Server log files”.
What do we use your data for?
The technical data is collected solely to ensure that the website is delivered correctly and securely. Your user behaviour is not analysed.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data and, under certain circumstances, the restriction of its processing. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time about this and any other questions on data protection.
2. Hosting
This website is hosted by an external service provider (host). The personal data generated when you visit this website is processed on the host’s servers. This is the data listed under “Server log files”.
We use the host in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Our host processes your data only to the extent necessary to fulfil its service obligations and follows our instructions regarding this data.
We use the following host:
Uberspace
represented by Jonas Pasche
Kaiserstr. 15
55116 Mainz, Germany
Data processing agreement
We have concluded a data processing agreement (DPA) with the provider named above. This agreement, required by data protection law, ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Data protection
We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
NuFlo s.à r.l.
50 Am Kiem
L-8538 Hovelange
Luxembourg
Phone: +352 621 530008
Email: contact@nuflo.eu
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you submit a justified request for deletion, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in that case, deletion takes place once these reasons no longer apply.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing (objection under Art. 21(2) GDPR).
Right to lodge a complaint with the supervisory authority
In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged breach. The authority responsible for us is the Luxembourg Commission nationale pour la protection des données (CNPD), cnpd.public.lu. This right exists without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing, and where applicable a right to correction or deletion of this data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data, in particular
- while you contest the accuracy of the data we hold and we are verifying it,
- if the processing was or is unlawful and you request restriction instead of deletion,
- if we no longer need your data but you need it to establish, exercise or defend legal claims,
- while, after an objection under Art. 21(1) GDPR, it has not yet been determined whose interests prevail.
If you have restricted processing, this data may – apart from being stored – only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.
SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser’s address bar starting with “https://” and by the lock icon in your browser bar.
Objection to advertising emails
We hereby object to the use of contact data published as part of our legal notice obligation for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising, for example through spam emails.
4. Data collection on this website
No cookies, no tracking, no third-party content
This website does not store cookies or any other data on your device. No analytics or tracking services are used. Fonts, graphics and scripts are loaded exclusively from our own web space; no connection is made to third-party servers.
The site contains links to other websites (e.g. nuflo.eu, LinkedIn, GitHub). Only when you click such a link do you leave our website; from then on, the privacy policy of the respective provider applies.
Server log files
The host of these pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:
- browser type and version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. The data is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free and secure provision of our website – for this, the server log files must be recorded.
Enquiries by email or phone
If you contact us by email or phone, your enquiry including all resulting personal data (name, enquiry) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR).
The data you send us remains with us until you ask us to delete it or the purpose for storing it no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.