Legal

Privacy Policy / Datenschutzerklärung

1. Introduction and Contact Details

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

nproxima GmbH

Sudetenstrasse 32, 85622 Feldkirchen, Deutschland

Tel.: +49 173 864 9000

Email: contact@nproxima.ai

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

2. Data Collection When Visiting the Website

2.1 Server Log Files

When you use our website for informational purposes only (i.e. you do not register or otherwise transmit information to us), we only collect the data that your browser transmits to our server. If you wish to view our website, we collect the following data which is technically necessary for us to display our website to you and to ensure stability and security:

  • • Website visited (URL of the requested page)
  • • Date and time of access
  • • Amount of data transferred in bytes
  • • Source/reference from which you reached the page (referrer URL)
  • • Browser type and version used
  • • Operating system used
  • • IP address (anonymized where possible)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders, inquiries, or payment information that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3. Hosting & CDN

Our website is hosted on servers located exclusively within the European Union. The hosting provider processes the personal data transmitted via this website on our behalf. This is done for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR).

We have concluded a data processing agreement (DPA) with our hosting provider in accordance with Art. 28 GDPR. This is a contract required by data protection law that ensures our hosting provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. The hosting provider does not use your data for its own purposes.

All data processing takes place on servers within the European Union. No data is transferred to third countries outside the EU/EEA.

4. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device by your browser. They do not cause any damage and are used to make our offer more user-friendly, effective, and secure.

We use the following types of cookies:

  • • Session cookies: These are temporary cookies that are stored in your browser's memory until you close your browser and they are automatically deleted. Session cookies are used, for example, to maintain session state and enable core functionality of the website.
  • • Persistent cookies: These remain stored on your device for a predetermined period or until you actively delete them. Persistent cookies enable us to recognise your browser when you next visit our site and to provide a personalised experience.

The legal basis for the use of cookies is as follows:

  • • For cookies that are strictly necessary for the provision of the service: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
  • • For cookies that require your consent (e.g. analytics or marketing cookies): Art. 6(1)(a) GDPR (consent). You may revoke your consent at any time with effect for the future.
  • • For cookies used on the basis of our legitimate interest (e.g. to analyse the reach and performance of our website): Art. 6(1)(f) GDPR (legitimate interest).

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

5. Contacting Us

If you contact us by e-mail, telephone, or via a contact form, your inquiry including all resulting personal data (name, e-mail address, message text, and any other information you provide) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

The data sent by you to us via contact requests remains with us until you request us to delete it, revoke your consent to the storage, or the purpose for the data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions -- in particular statutory retention periods -- remain unaffected.

6. Use of Customer Data for Direct Advertising

6.1 Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis.

We use the so-called double opt-in procedure for newsletter registration. This means that after you have registered, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within a reasonable period, your information will be automatically deleted. In addition, we store the IP addresses you use, as well as the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The legal basis for the processing of data after newsletter registration by the user is Art. 6(1)(a) GDPR if the user has given consent.

You may revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time with effect for the future. You can unsubscribe by clicking the link provided in every newsletter e-mail, or by sending a message to the contact details stated above.

6.2 Direct Advertising to Existing Customers

If we have received your e-mail address in connection with the sale of goods or services and you have not objected to this, we reserve the right to regularly send you offers for similar products or services from our range by e-mail in accordance with § 7(3) of the German Act Against Unfair Competition (UWG). The legal basis for the processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in targeted direct advertising.

You may object to this use of your e-mail address at any time by sending a message to the contact details stated above or via the unsubscribe link provided in the advertising e-mail, without incurring any costs other than transmission costs at basic rates.

7. Rights of the Data Subject

7.1 Your Rights

Under the applicable data protection laws, you have the following rights with regard to your personal data:

Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed by us, and if so, to obtain access to this data and further information about the processing.
Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data concerning you without undue delay. You also have the right to have incomplete personal data completed.
Right to erasure (Art. 17 GDPR): You have the right to request the erasure of personal data concerning you without undue delay, where one of the grounds set out in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing where one of the conditions set out in Art. 18 GDPR is met, e.g. if you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy.
Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and to transmit this data to another controller.
Right to withdraw consent (Art. 7(3) GDPR): If data processing is based on your consent, you have the right to withdraw your consent at any time with effect for the future. The lawfulness of data processing carried out on the basis of the consent prior to the withdrawal remains unaffected.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

RIGHT TO OBJECT (Art. 21 GDPR)

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation. This also applies to profiling based on this provision.

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising.

To exercise your right to object, simply send an e-mail to contact@nproxima.ai.

8. Duration of Storage

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

The following general rules apply to the duration of storage:

  • • Consent-based processing: Data processed on the basis of your consent will be stored until you withdraw your consent. Data will be deleted promptly upon withdrawal, unless there is another legal basis that permits further storage.
  • • Contract-based processing: Data processed for the performance of a contract will be stored for the duration of the contractual relationship. After termination of the contract, the data will be stored only to the extent and for as long as required by statutory retention periods (e.g. commercial and tax law retention obligations of 6 or 10 years pursuant to German Commercial Code (HGB) and German Fiscal Code (AO)).
  • • Legitimate interest-based processing: Data processed on the basis of our legitimate interest will be stored until you exercise your right to object. We will then delete the data, unless we can demonstrate compelling legitimate grounds for further processing which override your interests.
  • • Direct advertising: Data processed for direct advertising purposes will be stored until you object to its use for this purpose. Your data will then be removed from the advertising distribution list promptly.