Privacy Policy

Last updated: 11 September 2026

Controller

Nucez Software

Bjarne Arik Fomferra

Im Windfeld 36

32130 Enger

Germany

[email protected]

A data protection officer has not been appointed, as there is no legal obligation to do so. Please direct privacy enquiries to the email address above.

Overview of processing

On this website I process the following types of data:

  • Master data (name, company)
  • Contact data (email address)
  • Content data (entries in the contact form)
  • Usage data (pages visited, access times)
  • Meta and communication data (IP address, browser identification)

Those affected are visitors to the website, communication partners as well as business and contractual partners. The purposes are the provision of the website, answering enquiries, security measures and the initiation and fulfilment of contracts.

Legal bases

Processing takes place on the basis of the GDPR, in particular:

  • Consent (Art. 6 (1) (a) GDPR), where you have granted it
  • Performance of a contract and pre-contractual measures (Art. 6 (1) (b) GDPR)
  • Legal obligation (Art. 6 (1) (c) GDPR), such as retention obligations under commercial and tax law
  • Legitimate interests (Art. 6 (1) (f) GDPR), such as secure and stable operation of the website

Hosting

This website runs on a virtual server operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, located in Germany. IONOS processes data on my behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The legal basis for its use is Art. 6 (1) (f) GDPR, my legitimate interest in secure and reliable provision.

Delivery via Cloudflare

The website is delivered via the network of Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany. The parent company is Cloudflare, Inc., based in the USA. Cloudflare acts as a processor on my behalf pursuant to Art. 28 GDPR and processes technical connection data such as IP address, time of the request, address requested and browser identification in order to fend off attacks and speed up delivery. The legal basis is Art. 6 (1) (f) GDPR, my legitimate interest in secure, available and fast operation. A transfer of data to the USA cannot be ruled out in this process. It is safeguarded by standard contractual clauses and Cloudflare's certification under the EU-US Data Privacy Framework. More information: https://www.cloudflare.com/en-gb/privacypolicy/

Server log files

When the website is accessed, data that your browser transmits is automatically collected: page accessed, time, amount of data transferred, referrer, browser type and shortened IP address. The legal basis is Art. 6 (1) (f) GDPR, my legitimate interest in secure and stable operation. The data is deleted after 7 days at the latest.

Security measures

I use state-of-the-art technical and organisational measures to protect your data:

  • TLS encryption for all communication between browser and server
  • HTTP Strict Transport Security (HSTS), so that only encrypted connections are used
  • X-Frame-Options against clickjacking as well as referrer policy and permissions policy to restrict browser functions
  • Delivery of all scripts and fonts from my own server, no external content delivery networks

Contacting me

If you write to me by email or via the contact form, I process your name, email address, optionally your company and the content of your message in order to handle the enquiry. The form is transmitted directly to my server and delivered to me by email; no external form service is used. To prevent spam, your IP address is used server-side for a short time for rate limiting. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR. The details may be stored in my customer records and are deleted as soon as they are no longer needed and no statutory retention periods apply.

Newsletter

If you sign up for my newsletter, I process your email address and your chosen language to occasionally send you posts on development, operations and my own products. Sign-up uses a double opt-in process: you first receive an email with a confirmation link, and only after clicking it are you added to the list. To prove your consent, I store the time of sign-up and confirmation. The data is stored in a database on my server in Germany, no external newsletter service is used. To prevent abuse, your IP address is briefly used server-side for rate limiting but not stored. The legal basis is your consent under Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every email or by sending an informal message. Your address is then deleted. Unconfirmed sign-ups are not used for sending.

Email processing via Google Workspace

For email traffic, including the delivery of messages from the contact form to my address [email protected], I use Google Workspace provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the content and metadata of your email (sender, recipient, subject, time, message content) on my behalf as a processor pursuant to Art. 28 GDPR. The legal basis is Art. 6 (1) (b) GDPR for contract-related communication, otherwise Art. 6 (1) (f) GDPR, my legitimate interest in reliable email infrastructure. Processing in the USA cannot be ruled out. It is safeguarded by standard contractual clauses and Google's certification under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy

Cookies and browser storage

This website does not set any cookies for analysis or advertising purposes. For the selected colour scheme (light or dark), only your browser's local storage (localStorage, key "theme") is used. This information does not leave your device and remains stored until you delete it in your browser.

Fonts and scripts

The website is built with the PHP framework CodeIgniter 4. The font (Open Sans) and the JavaScript of this website are delivered exclusively from my own server. No external content delivery networks, no Google Fonts and no external JavaScript libraries from third-party servers are used.

Analysis and tracking

No reach measurement or tracking takes place. No analysis tools such as Google Analytics are used and no data is transmitted to third parties for analysis purposes.

External links

This website contains simple links to external sites, for example to my products. When this website is accessed, no data is transferred to the linked providers. Social media plugins or embedded third-party content are not used. Open Graph metadata (title, description, preview image) in the source code is only retrieved when you actively share a link on a platform.

Retention periods

Personal data is only stored for as long as is necessary for the respective purpose:

  • Contact enquiries without a contract: 6 months after completion of the enquiry
  • Contract data: 10 years after the end of the contract
  • Invoice data: 10 years (§ 147 AO, § 257 HGB)
  • Newsletter sign-up: until you unsubscribe
  • Server log files: 7 days
  • Local browser storage: until deleted by you

After the periods expire, the data is routinely deleted or blocked.

Your rights

Under the GDPR you have the following rights:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability in a common format (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

An informal email to the address above is sufficient. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de.

Withdrawal of your consent

Insofar as processing is based on your consent, you can withdraw it at any time. An informal email to the address above is sufficient. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Objection to advertising emails

The use of the contact data published in the imprint to send unsolicited advertising is hereby prohibited. In the event of unsolicited advertising, for example spam email, I reserve the right to take legal action.

Changes to this privacy policy

I reserve the right to adapt this privacy policy so that it complies with current legal requirements or reflects changes to my services. The updated version then applies to your next visit.