Privacy policy

1. General information

Protecting your personal data is important to us. Below we inform you which personal data we process when you visit our website, for what purposes, and on what legal basis.

Personal data is any data that can be used to identify you personally.

2. Controller

The controller responsible for data processing on this website is:

NK Glanz
Owner: Kourie
Goethestraße 46
10625 Berlin
Germany

Phone: +49 177 2631896
Email: kontakt@nkglanz.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. Hosting

We host our website with the following provider:

Vercel Inc.
440 N Barranca Avenue #4133
Covina, CA 91723
USA

When you visit our website, the hosting provider processes technically required data, in particular server log files, to ensure the secure and stable operation of the website. Processing may take place on servers in the EU and in the United States. Further information on data processing by Vercel is provided in Vercel's privacy notices.

The processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website. Where a data processing agreement is required, it has been concluded with the provider. For transfers to the United States we rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on standard contractual clauses under Art. 46 GDPR.

4. Data collection when visiting the website

Server log files

When you use our website for information only, that is, when you do not actively submit information to us, technically required data that your browser transmits to our server or to our hosting provider is collected automatically. This may include in particular:

• IP address
• date and time of the request
• page or file requested
• referrer URL
• browser type and version
• operating system used
• host name of the accessing computer

This data must be processed in order to deliver the website, ensure system security and detect misuse. The legal basis is Art. 6 (1) (f) GDPR. Server log files are stored only for as long as is necessary for these purposes and are then deleted or anonymised.

Page speed measurement (Vercel Speed Insights)

To safeguard the technical quality of our website we use Vercel Speed Insights, a service of our hosting provider Vercel Inc. (address in section 3). When a page loads, a script reads performance metrics through standard interfaces of your browser (so-called Web Vitals, e.g. how quickly the content is displayed) and sends them to Vercel via our own domain. The following information is processed:

• page visited (address or page path)
• performance metrics of the page and the page element concerned
• type of network connection (e.g. 4G)
• browser, operating system and device type (desktop, tablet or smartphone)
• country from which the page was accessed
• time the measurement was received

According to Vercel, the data is collected anonymously: the measurements are not linked to your IP address or to any identifier, and no information is stored that would allow your visit to be traced across pages or you to be identified. The service sets no cookies and stores nothing on your device. We only see the measurements as aggregated statistics; they are stored only for as long as is necessary for this evaluation.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in detecting and fixing technical problems and in keeping the website fast and stable. For transfers to the United States, the information in section 3 applies. If you do not want the measurement, you can prevent it with a content blocker in your browser; the website remains fully usable.

Fonts and icons (hosted locally)

The fonts and icons used on this website are hosted locally on our server. No connection to third-party servers, such as Google Fonts, is established for this purpose when you visit the website. The processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in a consistent and appealing presentation of our website.

5. Cookies and similar technologies

Our website does not set any cookies. The only thing we store in your browser's local storage (localStorage) is a single entry when you dismiss the cookie notice, so that it is not shown to you again for 30 days. This entry serves solely to carry out your own decision and is permitted without consent under Section 25 (2) no. 2 TDDDG. You can delete it at any time in your browser settings. For details, see our cookie policy.

Because no services requiring consent are used, no consent banner is necessary. Apart from the anonymous page speed measurement described in section 4, we do not use any analytics, tracking or marketing services.

6. Contact

There is no contact form on our website. You can reach us by email, phone or WhatsApp.

If you contact us by email, phone or WhatsApp, your enquiry and all personal data arising from it (e.g. name, contact details, content of the message) are stored and processed by us for the purpose of handling your request. Providing further data is voluntary. A message does not constitute an appointment, a reservation or a contract.

The processing is based on Art. 6 (1) (b) GDPR where your enquiry serves to initiate or perform a contract. In other cases it is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in handling the enquiries addressed to us efficiently.

The data you send us remains with us until the purpose for storage no longer applies, you ask us to delete it, or statutory retention obligations prevent deletion.

7. External links

Our website contains links to external services, currently WhatsApp (for contacting us), Google Maps (for route planning) and our Instagram profile. These are simple links. This means that merely visiting our website does not automatically transmit personal data to these providers; no external plugins or embedded content are loaded. Only when you click on such a link do you leave our website, and the privacy policy of the respective provider applies.

The providers are in particular:

• WhatsApp: WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
• Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
• Google Maps: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Please note that clicking these links may result in the processing of personal data by the respective provider.

8. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of the data processing no longer applies. If you assert a justified request for deletion or withdraw your consent, your data will be deleted, unless statutory retention obligations or other legally permissible grounds for continued storage prevent this.

9. Your rights

Within the framework of the applicable statutory provisions, you have the following rights:

• Right of access under Art. 15 GDPR
• Right to rectification under Art. 16 GDPR
• Right to erasure under Art. 17 GDPR
• Right to restriction of processing under Art. 18 GDPR
• Right to data portability under Art. 20 GDPR
• Right to object to processing under Art. 21 GDPR
• Right to withdraw consent given, with effect for the future

To exercise your rights, you can contact us at any time using the contact details above.

10. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany

www.datenschutz-berlin.de

11. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption.