Privacy Policy
Last updated: August 2026
We take the protection of your personal data seriously. This policy explains what personal data is processed when you visit nadek.io, on what legal basis, and what rights you have. The German version of this policy is authoritative; this English version is provided for convenience.
1. Controller
The controller responsible for data processing on this website is Nadek UG (haftungsbeschränkt), Friedrichstr. 155, 10117 Berlin, Germany, email: contact@nadek.io. A data protection officer has not been appointed, as none is legally required.
2. Hosting and server log files (Vercel)
This website is hosted by Vercel Inc. (USA). When you visit the site, Vercel automatically processes technical access data: your IP address, browser type and version (user agent), the requested page, date and time of access, response status, and the region of the edge server used. This data is required to deliver the website reliably and securely and to defend against attacks; the legal basis is our legitimate interest in the secure operation of the site (Art. 6(1)(f) GDPR). Access logs are automatically deleted after a short period in line with Vercel's log retention. Vercel acts as our processor under a data processing agreement pursuant to Art. 28 GDPR. Because Vercel processes data in the United States, transfers are safeguarded by the EU Standard Contractual Clauses and Vercel's certification under the EU-U.S. Data Privacy Framework (Art. 45, 46 GDPR).
3. Contact by email (mailbox.org)
You can reach us at contact@nadek.io. If you email us, we process the data you provide (your email address, the subject, the content of your message, and technical mail headers) for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Our mailbox is operated by Heinlein Hosting GmbH (mailbox.org), Berlin, Germany, as our processor under a data processing agreement pursuant to Art. 28 GDPR. The mail servers are located in Germany; no transfer to countries outside the EU/EEA takes place for this processing. We delete correspondence once your enquiry has been dealt with, unless statutory retention obligations require longer storage.
4. No cookies, no tracking
This website sets no cookies and uses no web analytics, no tracking pixels, and no third-party embeds of any kind. Nothing is stored on or read from your device, which is why no cookie consent banner is shown (§ 25 TDDDG). The fonts used are hosted on our own servers — no connection to Google or any other third-party font service is established when you visit this site.
5. Encryption
This website uses TLS encryption (HTTPS) throughout. Data transmitted between your browser and the site cannot be read by third parties in transit.
6. Your rights
You have the right to access your personal data (Art. 15 GDPR), the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). To exercise any of these rights, email contact@nadek.io.
7. Right to object (Art. 21 GDPR)
Where we process personal data on the basis of our legitimate interests (Art. 6(1)(f) GDPR — here: the server log files described in section 2 and, where applicable, email correspondence under section 3), you have the right to object at any time, for reasons arising from your particular situation. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms. We do not process personal data for direct marketing purposes. To object, email contact@nadek.io.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.
9. No automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
10. Changes to this policy
We will update this policy when the website's functionality or legal requirements change, for example if new features are added. The current version is always available on this page.