Privacy policy

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is TODO: legal name (e.g. Nonnina UG (haftungsbeschränkt)), TODO: street and number, TODO: postcode and city, Germany. Email: TODO: privacy@nonnina.eu.

2. Visiting the website

When you open a page, your browser sends technical data that our hosting provider records in server logs: IP address, date and time, the page requested, the referring page and your browser and operating system.

We need this to deliver the website and keep it secure. Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR). The hosting provider keeps these logs for a short period and then deletes them.

We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors.

Our fonts are stored on our own server. Your browser does not connect to Google or any other font provider.

3. Joining the waitlist

If you join the waitlist we store:

• your email address (required)
• whether you are a family member, helper, care service or other (required)
• your city (optional)
• your message (optional)

We use this only to tell you about Nonnina's launch and, if you wrote to us, to answer you. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by email; this does not affect what we did before.

We keep your sign-up until you withdraw, until we no longer need it, and at the latest 24 months after you signed up. Then we delete it.

To prevent abuse, the form counts sign-up attempts per IP address. The IP address is held only in memory for one minute and is not stored. Legal basis: our legitimate interest in protecting the form (Art. 6(1)(f) GDPR).

4. Cookies

We use two small cookies: one remembers the language you choose, the other remembers your answer to the cookie notice. We do not use cookies for analytics or advertising. Details are in our cookie policy.

5. Who receives your data

We use two service providers who process data on our behalf, under data processing agreements (Art. 28 GDPR):

Both companies are based in the USA, so access from the USA cannot be ruled out. Transfers rely on the EU Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses (Art. 46(2)(c) GDPR).

We do not sell your data or share it with anyone else, unless we are legally required to.

6. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR)
• have it corrected (Art. 16) or deleted (Art. 17)
• restrict its processing (Art. 18)
• receive it in a portable format (Art. 20)
• object to processing based on our legitimate interest (Art. 21)
• withdraw your consent at any time, with effect for the future (Art. 7(3))

Write to TODO: privacy@nonnina.eu. You can also complain to a data protection authority, in particular in the country where you live or work. The authority responsible for us is: TODO: data protection authority of the federal state where the operator is based.

7. Other points

You are not required to give us any data. Without an email address you cannot join the waitlist; the rest of the website works as usual.

We do not make decisions about you based solely on automated processing.

We protect data in transit with TLS encryption and limit access to the people who need it.

We will update this policy when our website or the law changes. The date at the top shows the current version.