Legal

Privacy Policy / Datenschutzerklärung

nproxima GmbH · Last updated October 2026

1. Introduction and Contact Details

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

nproxima GmbH

Regus, Maximilianstrasse 35 A, 80539 München, Deutschland

Tel.: +49 173 864 9000

Email: [email protected]

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

2. Data Collection When Visiting the Website

2.1 Server Log Files

When you use our website for informational purposes only (i.e. you do not register or otherwise transmit information to us), we only collect the data that your browser transmits to our server. If you wish to view our website, we collect the following data which is technically necessary for us to display our website to you and to ensure stability and security:

  • • Website visited (URL of the requested page)
  • • Date and time of access
  • • Amount of data transferred in bytes
  • • Source/reference from which you reached the page (referrer URL)
  • • Browser type and version used
  • • Operating system used
  • • IP address

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3. Hosting & CDN

Our website is hosted and delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"). Cloudflare operates a global network of servers that delivers the website quickly and protects it against attacks and misuse. When you visit our website, the server log data listed in section 2.1 is processed by Cloudflare on our behalf.

The processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, fast, and efficient provision of our online offer by a professional provider.

We have concluded a data processing agreement (DPA) with Cloudflare in accordance with Art. 28 GDPR. Cloudflare processes the personal data of our website visitors only in accordance with our instructions and does not use it for its own purposes.

Data may be processed on Cloudflare servers outside the EU/EEA, in particular in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). In addition, the EU Standard Contractual Clauses are part of our agreement with Cloudflare. Further information: Cloudflare Privacy Policy.

4. Cookies and Local Storage

We do not use cookies or similar technologies for analytics, advertising, or tracking.

We store the following information on your device:

  • • Consent settings: a cookie ("klaro") that stores your choices in our privacy settings for up to 13 months, so that we do not have to ask again on every visit.
  • • Site preferences: your selected language and colour theme are stored in your browser's local storage. This information never leaves your device.
  • • Security cookies: Cloudflare may set strictly necessary cookies to distinguish legitimate visitors from automated traffic.

Storing this information is strictly necessary to provide the service you have requested and is therefore permitted without consent under § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). Any subsequent processing of personal data is based on Art. 6(1)(f) GDPR.

Embedded YouTube videos are only loaded after you have consented in our privacy settings (Art. 6(1)(a) GDPR, § 25(1) TDDDG); see section 7. You can change or withdraw your consent at any time with effect for the future via the privacy settings.

You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

5. Contacting Us

If you contact us by e-mail, telephone, or via the contact form, your inquiry including all resulting personal data (name, e-mail address, company, telephone number if provided, message text, and any other information you provide) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent, except to the service providers named below who process it on our behalf.

The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6(1)(f) GDPR).

5.1 Contact Form

Contact form submissions are processed by a Cloudflare Worker (Cloudflare, see section 3) and delivered to our mailbox by e-mail using Twilio SendGrid, a service of Twilio Inc., 101 Spear Street, San Francisco, CA 94105, USA. SendGrid also sends you an automatic confirmation of receipt. We have concluded a data processing agreement with Twilio. Twilio is certified under the EU-U.S. Data Privacy Framework; in addition, the EU Standard Contractual Clauses apply.

5.2 Spam Protection (Cloudflare Turnstile)

To protect the contact form against automated abuse, we use Cloudflare Turnstile. Turnstile is only loaded on the contact page. It evaluates technical information about your browser and device (such as IP address and browser characteristics) to determine whether the request was made by a human. The data is not used for advertising or tracking. The processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website and mailbox against spam and abuse. For data transfers to the USA, the information in section 3 applies.

5.3 E-Mail

E-mails to us are received and stored by our e-mail provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft 365), which processes them on our behalf on the basis of a data processing agreement.

The data sent by you to us via contact requests remains with us until you request us to delete it, revoke your consent to the storage, or the purpose for the data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

6. Direct Advertising to Existing Customers

If we have received your e-mail address in connection with the sale of goods or services and you have not objected to this, we reserve the right to regularly send you offers for similar products or services from our range by e-mail in accordance with § 7(3) of the German Act Against Unfair Competition (UWG). The legal basis for the processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in targeted direct advertising.

You may object to this use of your e-mail address at any time by sending a message to the contact details stated above or via the unsubscribe link provided in the advertising e-mail, without incurring any costs other than transmission costs at basic rates.

7. Third-Party Content

The fonts used on this website are hosted on our own servers; no connection to font providers such as Google Fonts is established.

7.1 Tailwind CSS

To display the website, your browser loads the styling framework Tailwind CSS from the content delivery network cdn.tailwindcss.com (Tailwind Labs Inc., USA). In doing so, your IP address and technical browser information are transmitted to the operator of the content delivery network. The processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the correct and consistent display of our website.

7.2 YouTube

We embed videos from YouTube, a service of Google Ireland Limited, in privacy-enhanced mode (youtube-nocookie.com). The videos are only loaded once you have given your consent, either in our privacy settings or by clicking "Allow YouTube & play" on a video (Art. 6(1)(a) GDPR, § 25(1) TDDDG). After loading, YouTube may set cookies and process data, including in the USA. Until then, only a preview image stored on our own server is shown and no data is sent to YouTube or Google. You can withdraw your consent at any time with effect for the future via the privacy settings. Further information: Google Privacy Policy.

8. Links to Other Websites

Our website contains links to other websites, for example to LinkedIn profiles and to the websites of partners and technology providers. Data is only transmitted to these providers once you click a link. From that point on, the privacy policy of the respective provider applies.

9. Rights of the Data Subject

9.1 Your Rights

Under the applicable data protection laws, you have the following rights with regard to your personal data:

  • • Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed by us, and if so, to obtain access to this data and further information about the processing.
  • • Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data concerning you without undue delay. You also have the right to have incomplete personal data completed.
  • • Right to erasure (Art. 17 GDPR): You have the right to request the erasure of personal data concerning you without undue delay, where one of the grounds set out in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the purposes for which it was collected.
  • • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing where one of the conditions set out in Art. 18 GDPR is met, e.g. if you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy.
  • • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and to transmit this data to another controller.
  • • Right to withdraw consent (Art. 7(3) GDPR): If data processing is based on your consent, you have the right to withdraw your consent at any time with effect for the future. The lawfulness of data processing carried out on the basis of the consent prior to the withdrawal remains unaffected.
  • • Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

RIGHT TO OBJECT (Art. 21 GDPR)

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation. This also applies to profiling based on this provision.

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising.

To exercise your right to object, simply send an e-mail to [email protected].

10. Duration of Storage

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

The following general rules apply to the duration of storage:

  • • Consent-based processing: Data processed on the basis of your consent will be stored until you withdraw your consent. Data will be deleted promptly upon withdrawal, unless there is another legal basis that permits further storage.
  • • Contract-based processing: Data processed for the performance of a contract will be stored for the duration of the contractual relationship. After termination of the contract, the data will be stored only to the extent and for as long as required by statutory retention periods (e.g. commercial and tax law retention obligations of 6 or 10 years pursuant to German Commercial Code (HGB) and German Fiscal Code (AO)).
  • • Legitimate interest-based processing: Data processed on the basis of our legitimate interest will be stored until you exercise your right to object. We will then delete the data, unless we can demonstrate compelling legitimate grounds for further processing which override your interests.
  • • Direct advertising: Data processed for direct advertising purposes will be stored until you object to its use for this purpose. Your data will then be removed from the advertising distribution list promptly.