1. Controller
The controller responsible for the processing of personal data in connection with this website is:
Sascha Martinkus
Spiegelgartenstr. 22
91074 Herzogenaurach
Germany
Email: info@nelatar.com
Telephone: +49 9132 7514210
2. Principle
The protection of personal data is important to us.
NELATAR.com is currently designed with data minimisation in mind. In particular, we currently do not use our own analytics, marketing or advertising tracking services on this website.
Personal data is processed only to the extent necessary to provide the website, ensure its security or respond to a contact request initiated by you.
3. Provision and hosting of the website
This website is provided through Netlify infrastructure.
Provider:
Netlify, Inc.
101 2nd Street
San Francisco, CA 94105
USA
When the website is accessed, technically necessary data must be processed so that the requested content can be delivered to your device and the stability and security of the service can be ensured.
This may include in particular:
- IP address
- date and time of access
- requested page or file
- amount of data transferred
- browser type and browser version
- operating system
- referrer information
- technical connection and device information
The processing is carried out for the purpose of technically providing the website, ensuring stability, analysing errors and maintaining website security.
The legal basis is Article 6(1)(f) GDPR.
Our legitimate interest lies in the secure, reliable and technically functional provision of our online offering.
We currently do not carry out our own personal web analytics on the basis of this access data.
4. Use of Netlify and third-country transfers
Netlify is a provider based in the United States.
As part of providing the website, personal data may therefore be processed outside the European Union or the European Economic Area.
Netlify states that it participates in the EU-U.S. Data Privacy Framework. In addition, Netlify provides contractual safeguards for international data transfers, including the European Commission's Standard Contractual Clauses.
Further information is available in the official Netlify Privacy Statement and in the official Netlify Data Processing Agreement.
5. Retention period for technical access data
We ourselves currently do not store personal visitor profiles and do not operate our own access tracking.
Technically necessary data may be processed by Netlify as part of hosting in accordance with its applicable technical, security-related and contractual retention rules.
The retention period depends on the type of technical data concerned, its processing purpose and the applicable security and retention requirements.
As a general rule, data is not processed for longer than necessary for the respective purpose, unless statutory obligations require further storage.
6. Contact by email
If you contact us using the email address provided on this website, the personal data you transmit will be processed in order to handle your request and, where applicable, reply to it.
This may include in particular:
- name
- email address
- content of your message
- other information voluntarily provided by you
Depending on the content of your request, processing is carried out on the basis of Article 6(1)(b) GDPR where the communication serves to initiate or perform a contractual or business relationship.
For general enquiries, processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of incoming enquiries and communication with interested parties, consumers and businesses.
The data will be deleted as soon as it is no longer required for handling the respective enquiry and no statutory retention, evidence-related or other legitimate reasons require further storage.
Email and infrastructure service providers used by us may act as recipients or processors for the technical operation of our email communication.
The website itself currently does not contain a contact form. Clicking an email link merely addresses the email program configured on your device or the email service used by you.
7. Cookies and access to end devices
According to the current technical status, this website does not use its own analytics, marketing or advertising cookies.
We also currently do not use technologies that store information on your end device or access information stored there for analytics or marketing purposes.
For this reason, no consent banner for marketing or analytics purposes is currently used.
If the technical scope of the website changes in the future, we will check before using corresponding technologies whether consent under Section 25 TDDDG and the applicable data protection rules is required.
8. Analytics and marketing
In particular, the following are currently not used on this website:
- Google Analytics
- Meta Pixel
- TikTok Pixel
- other advertising or retargeting pixels
- personal web analytics
We currently do not create visitor profiles for marketing purposes.
9. External fonts
The fonts used on this website are displayed locally or through system fonts available on the respective device.
No font files are currently loaded from services such as Google Fonts or comparable external font providers when the website is visited.
10. External media and social media content
The website currently does not embed externally hosted videos, social media feeds or comparable content that would automatically transmit data to the corresponding platforms merely by accessing the page.
Links to external platforms may be offered in the future as ordinary links. Only when you actively open such a link do you leave NELATAR.com, and the privacy policies of the respective external provider apply.
11. Artificial intelligence in the development of NELATAR
Artificial intelligence systems may be used to support the conception, language editing, research support, translation, technical development and design of NELATAR and this website.
These currently include AI tools from OpenAI, for example ChatGPT and Codex.
These AI systems are not part of the publicly provided website.
During a normal visit to NELATAR.com, there is no direct interaction between the visitor and the AI systems used during development.
During normal access, the website does not automatically transmit visitor input or personal visitor data to ChatGPT, Codex or comparable generative AI tools.
Further information about our use of artificial intelligence can be found on the AI Transparency page.
12. Automated decisions and profiling
In connection with visiting this website, there is currently no solely automated decision-making with legal or similarly significant effects within the meaning of Article 22 GDPR.
There is also no personal profiling of website visitors by NELATAR.
13. Recipients of personal data
Personal data may, where necessary for the respective purpose, be transferred in particular to the following categories of recipients:
- hosting and infrastructure service providers
- email and communication service providers
- technical service providers, where their involvement is necessary
- authorities or other bodies where there is a statutory obligation to do so
NELATAR currently does not disclose personal data for advertising purposes and does not sell personal data.
14. Your rights
Where the statutory requirements are met, you have in particular the following rights:
- right of access pursuant to Article 15 GDPR
- right to rectification pursuant to Article 16 GDPR
- right to erasure pursuant to Article 17 GDPR
- right to restriction of processing pursuant to Article 18 GDPR
- right to data portability pursuant to Article 20 GDPR
- right to object pursuant to Article 21 GDPR
Where processing is based on consent, you may withdraw consent you have given at any time with effect for the future.
The withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
15. Objection to processing based on legitimate interests
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right, under the statutory requirements, to object to this processing on grounds relating to your particular situation.
To exercise your rights, you can contact us at:
16. Right to lodge a complaint with a data protection supervisory authority
You have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority.
For non-public controllers based in Bavaria, the competent authority is generally:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de
17. Obligation to provide personal data
When merely visiting the website, there is no contractual or statutory obligation to actively provide us with additional personal data.
Certain technical information is, however, required so that a website can be delivered over the internet.
When contacting us, you generally decide yourself which additional information you provide.
18. Changes to this privacy policy
We reserve the right to update this privacy policy if the website, the services used or the legal requirements change.
Before introducing new analytics, marketing, form, newsletter, AI or other data-processing functions, we will check whether this privacy policy and, where applicable, consent management need to be adjusted.
Last updated: August 2026