Privacy Policy

The short version

This website sets no cookies, runs no analytics, and loads no tracking pixels or third-party scripts. Fonts and the hero video are served from our own domain, so your browser does not contact Google or any other font or media host when you visit.

We process personal data in two situations only: when your browser requests a page (server logs) and when you send us a message through the contact form.

Hosting and server logs

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel's infrastructure processes technical data your browser sends: IP address, date and time, the page requested, referrer, and browser and operating system details.

We need this to deliver the site and to keep it secure, for example against abuse and attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Logs are kept only as long as the hosting provider needs them for these purposes and are then deleted.

Contact form

When you use the contact form, we receive the topic you chose, your name, your email address, the company or link you enter, and your message. The form posts this to our server, which forwards it as a message to a private Discord channel that only our team can read. Discord is operated by Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA.

We use this data only to answer you and, if it leads there, to prepare and carry out a contract. The legal basis is Art. 6(1)(b) GDPR for requests aimed at a contract, and Art. 6(1)(f) GDPR for all other requests, our legitimate interest being to reply to messages sent to us.

We delete contact requests once they are fully handled and no follow-up is expected, at the latest 12 months after our last exchange, unless statutory retention duties under German commercial or tax law require us to keep them longer.

The form contains a hidden field that only automated bots fill in. Submissions that fill it are discarded without being forwarded.

Transfers outside the EU

Vercel and Discord are based in the United States. Where a recipient is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission's adequacy decision of 10 July 2023. Otherwise it relies on the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.

Data you entrust to Nova itself

This policy covers the website only. Data that customers process with the Nova service is handled under the customer agreement and its data processing terms.

Your rights

You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), and to data portability (Art. 20).

Where we process data based on legitimate interest, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We then stop, unless we can show compelling legitimate grounds or need the data to establish, exercise or defend legal claims.

To use any of these rights, write to us through the contact form.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin.

No automated decisions

We do not use the data collected on this website for automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes

We update this policy when the website or the law changes. The date at the top always shows the current version.