Privacy Policy

Datenschutzerklärung · Last updated: November 2026

We take the protection of your personal data seriously. This policy explains what personal data is processed when you visit nowaidata.com or contact us, for what purposes, and what rights you have under the EU General Data Protection Regulation (GDPR / DSGVO).

1. Controller

nowaidata UG (haftungsbeschränkt)
Represented by its managing director (Geschäftsführer) Suraj Ramchandra Kumbhar
Rantzaustraße 58, 22041 Hamburg, Germany
Email: info@nowaidata.com
Commercial register: Amtsgericht Hamburg, HRB 197994

We have not appointed a data protection officer, as we are not legally required to do so. For any data protection questions, please contact us using the details above.

2. Overview

This website is designed to process as little personal data as possible:

No cookies are set.
No analytics, tracking or advertising tools are used.
No external fonts, content delivery networks, maps, videos or social media plugins are embedded.
Personal data is processed only through technically necessary server logs and when you contact us.
Our hosting provider is based in the USA and our server is located in a data centre in the USA (see sections 3 and 5).

3. Hosting, email and domain

Hosting provider

This website, our email service (info@nowaidata.com) and the domain name system (DNS) for our domain are provided by:

Namecheap, Inc.
4600 East Washington Street, Suite 300
Phoenix, AZ 85034, USA

The web and email server used for this website is located in a data centre in the United States of America. All data described in sections 3 and 4 (server log files, contact form submissions and emails) is therefore processed on servers in the USA.

We have concluded a data processing agreement with Namecheap in accordance with Art. 28 GDPR. Namecheap processes personal data only on our behalf and in accordance with our instructions. For information on transfers to the USA, see section 5.

Domain registration

Our domain name nowaidata.com is registered with GoDaddy (GoDaddy Operating Company, LLC, USA). GoDaddy acts solely as the domain registrar. Website traffic, contact form submissions and emails are not processed by GoDaddy.

Server log files

Each time you access this website, the server automatically records information that your browser transmits:

IP address of the requesting device
Date and time of the request
Page or file requested and the amount of data transferred
Referring website (referrer URL), if transmitted
Browser type and version, operating system

This data is technically required to deliver the website and to ensure its stability and security (for example, to detect and defend against attacks). The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and error-free provision of the website. Log data is not combined with other data sources and is not used to identify individual visitors. It is stored only for a limited period in line with the hosting provider's log rotation and is then deleted.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the lock symbol in your browser's address bar. When encryption is active, data you send to us cannot be read by third parties while in transit.

4. Contact form and email

If you contact us via the enquiry form or by email, we process the data you provide:

Name, company and email address (required)
Phone number (optional)
Enquiry type, preferred delivery format and your message

Enquiries sent via the form are delivered directly as an email to our mailbox info@nowaidata.com, which is hosted by Namecheap (section 3). The form data is not stored in a database on the web server and is not passed on to any other service.

Purpose and legal basis: we process your data to answer your enquiry. If your enquiry relates to a contract or to pre-contractual steps (for example, a request for a quotation, consulting, engineering, freelance or contracting work, or training services), the legal basis is Art. 6(1)(b) GDPR. In all other cases, the legal basis is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Retention: we delete your data once your enquiry has been fully dealt with and no further contact is expected. If the correspondence leads to a business relationship, statutory retention obligations under German commercial and tax law apply (in particular § 257 HGB and § 147 AO, generally 6 to 10 years). In that case, the data is retained only for those purposes and then deleted.

Providing your data is voluntary. However, we cannot answer your enquiry without the required information.

5. Recipients and transfers to third countries

We do not sell or pass on your personal data to third parties. Data is shared only with our hosting provider Namecheap, which acts as our processor (section 3). If you engage us and we work with specialist delivery partners on your project, we will share your data with them only after informing you, and only to the extent necessary.

Transfer to the USA: because our hosting provider is based in the USA and our server is located in a US data centre, personal data (server log files, contact form submissions and emails) is transferred to and processed in the USA. The USA is a third country within the meaning of the GDPR.

These transfers are based on the EU Standard Contractual Clauses adopted by the European Commission (Art. 46(2)(c) GDPR), which are part of our data processing agreement with Namecheap. Where the recipient is certified under the EU-U.S. Data Privacy Framework, the transfer is additionally covered by the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR).

Please note that, despite these safeguards, US authorities may under certain circumstances have access to data stored in the USA, and that the legal remedies available to you there may differ from those in the EU.

6. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, simply email info@nowaidata.com.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany

7. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

8. Changes to this policy

We may update this privacy policy if our website or services change, or if the legal requirements change. The current version is always available on this page.