Privacy.

1. Controller

Lukas Richter (NordApps)
Jahnstraße 3
85302 Gerolsbach
Germany
[email protected]

2. Hosting and server logs

NordApps runs the website on a self-administered server. The underlying infrastructure is provided by ZAP-Hosting GmbH & Co. KG, Krokusweg 9a, 48165 Münster, Germany. On each visit, the web server records the IP address, time, requested address, data volume, server status and any browser and referrer information sent by the browser. Logs are used for operation, security and troubleshooting and are deleted after approximately six weeks. The legal basis is the legitimate interest in secure operation (Article 6(1)(f) GDPR).

Cloudflare DNS and possible future proxy use

The domain’s DNS records are managed through Cloudflare, Inc. The website at nordapps.de and www.nordapps.de is currently delivered directly by our own server; the Cloudflare proxy is not enabled for these addresses. Our server keeps the logs described above.

If NordApps enables the Cloudflare proxy in the future, website requests would first pass through Cloudflare’s network before reaching our server. Cloudflare could then process the IP address, requested URL, time, HTTP headers, and browser and device information to deliver the website and detect attacks or automated abuse. Such use would be based on our legitimate interest in the availability and security of the website (Article 6(1)(f) GDPR).

If the proxy is enabled in the future, Cloudflare could display a security check for suspicious requests and set a necessary cookie such as cf_clearance. Passing such a check would not reliably prove that a human made the request. The associated security and traffic figures would likewise not be a reliable count of human visitors alone.

Cloudflare may also process data outside the European Economic Area, including in the United States. Its Data Processing Addendum describes processing as a service provider and international transfers; further information is in Cloudflare’s Privacy Policy and its explanation of security cookies. Cloudflare DPA · Privacy · Security cookies

3. Contact form

When you submit the form, NordApps stores your name, email address, project description and the browser identifier sent by your browser as an enquiry record on its own server. Your name, email address and message are also sent over an encrypted SMTP connection to the NordApps mailbox [email protected] at Apple iCloud Mail. If sending fails, the enquiry remains stored on our server. During a temporary database failure, it may be held in a protected emergency store on the same server and later transferred to the database. The data is used to handle your enquiry, not for advertising.

Processing is based on the consent you give when submitting the form (Article 6(1)(a) GDPR) and, for enquiries about a potential contract, on pre-contractual steps (Article 6(1)(b) GDPR). You may withdraw consent for the future at any time. Enquiries currently have no automatic deletion period. Records remain until they are specifically deleted; applicable retention duties are assessed case by case. Please use the address above to request access or deletion.

To limit automated submissions, the server processes a checksum of the IP address and timestamps. Only timestamps from the preceding hour are considered for rate limiting.

4. Contact by email

If you email NordApps directly, your message and contact details are stored to handle the enquiry. Incoming email for the NordApps domain is currently delivered through Apple iCloud Mail. The basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR for other messages.

Apple privacy information

5. Cookies and audience measurement

The contact page uses a necessary session cookie with a random identifier to protect the form. It is set as a session cookie without a fixed expiry date. The public pages of this new website currently load no audience measurement or advertising trackers. Fonts are loaded locally.

Older analytics and security records from the previous website remain in the protected NordApps portal. There is currently no automatic deletion for those records. Before an earlier change, contact records could be linked to visit data; existing links were not automatically removed by that change. Where prior consent was given, these records may include full IP addresses and approximate location data. You may email NordApps for access, objection or deletion. This new public website does not create such links.

6. Your rights

You may request access to personal data, correction, deletion or restriction of processing. Depending on the legal basis, you may also have rights to data portability and objection. You may withdraw consent for the future at any time. You also have the right to complain to a data protection supervisory authority. To exercise your rights, email [email protected].

7. Encrypted transmission

The website is served over HTTPS, encrypting data in transit between your browser and the server.