Request access

Privacy policy

As of: August 2026

We take the protection of your personal data seriously. This statement explains the nature, scope and purpose of processing on this website in accordance with the General Data Protection Regulation (GDPR). This is a translation of the German version; in case of doubt, the German version applies.

1. Controller

The controller within the meaning of the GDPR is Hans-Jörg Nolden for Nolden & Nolden GbR.

Nolden & Nolden GbR
Gracht 127
45470 Mülheim an der Ruhr
Germany

Email: [email protected]

2. When you visit the website

When the website is accessed, technically necessary access data is processed by our hosting and processing partners (e.g. date and time, page requested, amount of data transferred, browser type and version, and the IP address).

The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Hosting is provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, as a processor; a data processing agreement (DPA) is or will be concluded for this purpose.

3. Request-access form

When you use the “Request access” form, we process the data you provide in order to review your request and get in touch with you:

  • Name and business email address
  • Company and role
  • Market/region and your project description
  • Your consent to be contacted and — optionally — your consent to receive product updates

4. Purposes and legal bases

  • Handling your access request and contacting you: your consent (Art. 6(1)(a) GDPR) or performance of pre-contractual measures (Art. 6(1)(b) GDPR).
  • Optional product updates: your separate consent (Art. 6(1)(a) GDPR), revocable at any time with effect for the future.
  • Operation and security of the website: legitimate interest (Art. 6(1)(f) GDPR).

5. Recipients and processors

We use an email delivery service to deliver the form messages; operation and delivery of the website take place via hosting and processing partners. They process data on our behalf and on our instructions.

As processors we use in particular Hetzner Online GmbH (hosting) and an email delivery service for sending the form messages. Data is not disclosed for advertising purposes.

6. Transfers to third countries

Processing generally takes place within the EU/EEA. Transfers to third countries are not envisaged; should they become necessary, they will only take place on the basis of appropriate safeguards (e.g. EU standard contractual clauses).

7. Storage period

We store your request data for as long as necessary to process it and delete it at the latest 12 months after final processing, unless statutory retention obligations apply.

8. Cookies and tracking

This website uses no marketing or tracking cookies, no third-party analytics or retargeting services (e.g. Google Analytics, Matomo, Plausible), and no session replay. Your theme and language preferences are stored solely locally in your browser (localStorage) and are not transmitted to us.

9. First-party analytics (cookieless)

We run a privacy-friendly, cookieless audience measurement exclusively on our own server. No cookies are set, no data is shared with third parties, and no IP addresses are stored.

To distinguish visits we compute a daily-rotating, anonymous counter (a hash of the date, a coarse device indicator, and a server secret). Because the date is part of the hash, recognition beyond the calendar day is impossible. We only record aggregate information such as pages viewed, source/referrer, coarse device type and — where available — the country of origin. The legal basis is our legitimate interest in statistically analysing and improving our offering (Art. 6(1)(f) GDPR).

10. Your rights

Under the GDPR you have the right to:

  • Access (Art. 15), rectification (Art. 16) and erasure (Art. 17)
  • Restriction of processing (Art. 18) and data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent given, with effect for the future (Art. 7(3))

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular the authority responsible for us:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
www.ldi.nrw.de

12. Changes

We update this privacy policy if data processing changes. The version published here at the time applies.