Privacy policy

Controller: Nexaro UG (haftungsbeschränkt), based in Viersen, Germany. Contact: hallo@nexaro.de.

Hosting: Cloudflare Pages. No tracking cookies are set without your consent.

Audience measurement with Cloudflare Web Analytics: We use Cloudflare Web Analytics provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The service is cookieless and does not use fingerprinting. Only aggregated reach data is collected (page visited, referrer, country, anonymised usage metrics such as Web Vitals). No device- or user-level profile is created. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in needs-based design and statistical evaluation of this website).

Usage analytics with Microsoft Clarity (only with consent): If you have agreed in the cookie notice, we use Microsoft Clarity, a service of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA), to analyse usage behaviour — including clicks, scrolling, and pseudonymised session recordings and heatmaps. Clarity sets cookies and processes usage data for this purpose. The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer; processing carried out before withdrawal remains lawful. More information: https://learn.microsoft.com/clarity/setup-and-installation/privacy-disclosure

Data transfer to the USA: As Cloudflare and Microsoft are based in the USA, a transfer to the USA cannot be excluded. Both providers are certified under the EU-U.S. Data Privacy Framework; additionally Standard Contractual Clauses are in place (Art. 46(2)(c) GDPR). More information: https://www.cloudflare.com/privacypolicy/

Contact by email or form: If you contact us by email or via the contact form, we process your details (name, company, email address, content of the inquiry) to handle the inquiry and any follow-up questions. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding). Data is deleted once it is no longer required for this purpose and no statutory retention obligations apply.

Your rights: You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). You may also lodge a complaint with a data protection supervisory authority; for NRW: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

Objection and privacy questions: please write to hallo@nexaro.de.