Privacy Policy

Data controller

Managing Director (Geschäftsführer): Mahdi Ekhbari
Commercial register: Amtsgericht Essen, HRB 29275
VAT identification number (USt-IdNr.): DE318934921

Website access and server logs

When you visit this website, our hosting provider IONOS may process technical connection data, including IP address, date and time of access, requested page, browser information and error information, to deliver the website and maintain security. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in reliable, secure website operation). The precise log fields and retention period depend on the IONOS hosting configuration and should be confirmed with IONOS.

Business inquiries and quotations

If you contact us by email, we process the information you provide, such as your name, company, contact details, product requirements and message, to respond and prepare quotations. The legal basis is Art. 6(1)(b) GDPR where the request concerns pre-contractual measures with you as an individual, or Art. 6(1)(f) GDPR for other business correspondence. Statutory retention obligations may additionally apply under Art. 6(1)(c) GDPR.

Quotation request form

The quotation form on this website prepares an email in your own email application (mailto link). It does not submit the entered form fields to our website server. Your email application and its provider process the message when you choose to send it; we receive and process the resulting email through our IONOS-hosted business mailbox.

Hosting, email and recipients

We use IONOS for website hosting and business email. IONOS may process technical website data and email data on our behalf as a service provider. Information may also be disclosed where required by law or necessary to handle an inquiry. Any sub-processors, processing locations, transfers outside the EEA and applicable safeguards must be verified against the relevant IONOS contract and service configuration.

Cookies and browser storage

The website code does not include Google Analytics, advertising trackers or optional marketing cookies. It uses your browser's local storage to remember your language selection (gdf-language) and whether you have dismissed the cookie information notice (gdf-cookie-notice-dismissed). These preferences remain until you clear the relevant browser data. The notice is informational and is not a consent mechanism. Any cookies or storage set by the hosting infrastructure or future integrations must be assessed separately.

Retention and security

We retain inquiry and business correspondence only for as long as needed to process the request and, where applicable, comply with statutory retention obligations. Hosting logs are retained according to the configured IONOS service settings; the exact period must be verified. We take appropriate security measures in line with the risks of the processing.

Your GDPR rights

Subject to the applicable requirements, you have rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with future effect. You may complain to a data protection supervisory authority, including the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (LDI NRW). Contact us at contact@nutshell-gmbh.com.

Changes to this notice

We update this privacy notice when our services or data-processing practices change.