Privacy policy

As of October 2026

Controller

Nebuluum GmbH, Otto-Heilmann-Straße 18 a, 82031 Grünwald, Germany.
Email: hello@nebuluum.com

Hosting

This site is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technical connection data on our behalf: your IP address, date and time, the page requested and the referring page, and information about your browser and operating system. Cloudflare needs this data to deliver the site, to protect it against attacks and to show us anonymous visitor statistics. Without this data the site cannot be displayed. Legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest is a working, secure website and its visitor statistics. Cloudflare deletes the data once it is no longer needed for these purposes.

Cloudflare is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA rely on the European Commission's adequacy decision (Art. 45 GDPR).

Contact

If you write to us by email or through the contact form, we process your details to answer your enquiry. For the form, these are your name, email address, company if given, and your message. The form runs through Cloudflare (see Hosting). Our mailbox is hosted on a server in Germany. Apart from us, the only recipient is the hosting provider of that server. Writing to us is voluntary. Legal basis is Art. 6 (1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6 (1)(f) GDPR. Our legitimate interest is answering enquiries. We delete the data once your enquiry is settled and no statutory retention obligation applies.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Write to the address above. You also have the right to lodge a complaint with a data protection supervisory authority.

Right to object

Where we process data on the basis of Art. 6 (1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.