Last updated: September 2026

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Taha Abdelmalek – Nexsafya
Heinz-Fangman-Straße 2–6
42287 Wuppertal
Germany

Email: info@nexsafya.de

Phone: 0202-51987408
Phone: +49 202 29566689

2. General Information on Data Processing

We generally process the personal data of our users only to the extent necessary to provide a functional website, our content, and our services.

The processing of personal data is carried out in particular on the basis of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

The legal bases for processing may include, in particular:

• Article 6(1)(a) GDPR – consent
• Article 6(1)(b) GDPR – processing necessary for the performance of a contract or for taking steps prior to entering into a contract
• Article 6(1)(c) GDPR – compliance with a legal obligation
• Article 6(1)(f) GDPR – legitimate interests

Where we rely on legitimate interests under Article 6(1)(f) GDPR, these interests include, in particular, ensuring the secure, technically reliable, and efficient provision of our website and services.

3. Provision of the Website and Server Log Files

Whenever our website is accessed, information from the accessing device is automatically processed by the web server.

This may include, in particular:

• IP address of the accessing device
• Date and time of access
• Page or file accessed
• Amount of data transferred
• Browser used and browser version
• Operating system of the accessing device
• Referrer URL
• Technical information relating to the use of the website

The processing of this data is necessary to provide the website technically, ensure its stability and security, and detect and prevent potential attacks or misuse.

The legal basis for this processing is Article 6(1)(f) GDPR.

Server log files are stored only for as long as necessary for the purposes stated above and are subsequently deleted or anonymized, unless statutory retention obligations or legitimate reasons require longer storage.

4. Hosting

Our website is hosted by Hostinger.

Depending on the specific contractual and technical configuration, hosting and related technical services may be provided by companies within the Hostinger group, including:

HOSTINGER operations, UAB
Švitrigailos str. 34
LT-03230 Vilnius
Lithuania

Hostinger may process technical access data generated when the website is provided and used.

The processing is carried out for the technical provision, security, and stability of our website.

Where Hostinger processes personal data on our behalf, the processing is carried out on the basis of an appropriate data processing agreement or Data Processing Addendum (DPA) in accordance with Article 28 GDPR.

Further information on data protection at Hostinger can be found in Hostinger’s current Privacy Policy.

5. Contact by Email or Contact Form

If you contact us by email or through a contact form, we process the personal data you provide.

This may include, in particular:

• Name
• Email address
• Telephone number
• Content of your message
• Other information voluntarily provided by you

The data is processed solely for the purpose of handling and responding to your inquiry and, where applicable, for taking pre-contractual measures or performing a contract.

The legal basis is:

• Article 6(1)(b) GDPR, where the inquiry is related to a contract or pre-contractual measures;
• Article 6(1)(f) GDPR, where processing is necessary to handle a general inquiry.

The data provided will be deleted once the purpose of processing no longer applies and there are no statutory retention obligations or other legal grounds requiring continued storage.

6. Appointment Scheduling via Microsoft Bookings

We may use Microsoft Bookings, a service provided by Microsoft Corporation, to arrange and manage appointments.

When you schedule an appointment with us through Microsoft Bookings, personal data provided by you during the booking process may be processed.

This may include, in particular:

• Name
• Email address
• Telephone number
• Appointment details
• Requested appointment date and time
• Any additional information voluntarily provided as part of the booking

The processing is carried out to schedule, manage, and conduct the requested appointment.

The legal basis is Article 6(1)(b) GDPR where the appointment is related to an inquiry, pre-contractual measure, or contractual relationship.

Where consent is required, processing is based on Article 6(1)(a) GDPR.

Microsoft processes personal data within its Microsoft 365 services in accordance with its applicable privacy policies and contractual data protection agreements.

Further information about Microsoft’s data protection practices can be found in Microsoft’s Privacy Statement:

https://privacy.microsoft.com/en-us/privacystatement

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small text files that are stored on your device or that access information already stored on your device.

Technically Necessary Cookies

Technically necessary cookies may be required to ensure that the website operates properly, provide essential functions, or maintain website security.

Where the requirements of the applicable law are met, consent is not required for technically necessary cookies.

The processing of personal data associated with technically necessary cookies may be based on Article 6(1)(f) GDPR where necessary for the secure and functional provision of the website.

Non-Essential Cookies

Cookies or similar technologies used for purposes such as analytics, marketing, or tracking, which are not technically necessary, will only be used where required after obtaining your prior consent.

Where applicable, consent for storing or accessing information on your device is obtained in accordance with the applicable provisions of the German Telecommunications-Telemedia Data Protection Act (TDDDG). Where personal data is processed on the basis of consent, the legal basis is Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future through the available cookie settings.

8. Disclosure of Personal Data

We only disclose personal data to third parties where there is a legal basis for doing so.

This may be the case where:

• You have expressly consented to the disclosure;
• Disclosure is necessary for the performance of a contract;
• We are legally required to disclose the data;
• Disclosure is necessary to protect our legitimate interests;
• Service providers process personal data on our behalf.

Where we use data processors, they are contractually obligated to comply with the requirements of Article 28 GDPR.

Such service providers may include providers of hosting, technical infrastructure, communication, and appointment scheduling services.

9. Your Rights

Subject to the applicable legal requirements, you have the following rights:

Right of Access – Article 15 GDPR

You have the right to request information about whether and which personal data we process about you.

Right to Rectification – Article 16 GDPR

You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.

Right to Erasure – Article 17 GDPR

You may request the deletion of your personal data under the conditions provided by law.

Right to Restriction of Processing – Article 18 GDPR

You have the right to request restriction of the processing of your personal data under the conditions provided by law.

Right to Data Portability – Article 20 GDPR

Under the conditions provided by law, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller.

Right to Object – Article 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where such processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.

The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise any of your rights, you may contact us informally at:

Taha Abdelmalek – Nexsafya
Heinz-Fangman-Straße 2–6
42287 Wuppertal
Germany

Email: info@nexsafya.de

10. Right to Lodge a Complaint with a Supervisory Authority

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR or other applicable data protection laws.

The competent supervisory authority for North Rhine-Westphalia is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)

Kavalleriestraße 2–4
40213 Düsseldorf
Germany

Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de

Website: https://www.ldi.nrw.de

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, destruction, manipulation, unauthorized access, or other unlawful processing.

Our security measures are regularly reviewed and, where necessary, improved in accordance with technological developments and available technical capabilities.

12. Data Retention

We generally retain personal data only for as long as necessary for the respective processing purpose.

In addition, statutory retention obligations may apply. In such cases, the relevant data will be stored for the duration of the statutory retention period and subsequently deleted unless another legal basis permits or requires continued storage.

13. External Links

Our website may contain links to websites and online services operated by third parties.

When you access such an external link, you leave our website. The respective operator of the external website is solely responsible for the processing of personal data carried out on that website.

We recommend reviewing the privacy policies of the respective third-party providers.

14. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to the further development of our website, our services, or changes in legal or regulatory requirements.

The current version published on this website shall apply.

Last updated: September 2026