Privacy

This English text is a convenience translation. The binding version is the German one.

What this page does with your data — and what it does not. Information under Art. 13 and 14 of the General Data Protection Regulation (GDPR).

1. 01Controller

   Julian Schneider und Nico Rueß GbR
   c/o Autorenglück #84562, Albert-Einstein-Str. 47, 02977 Hoyerswerda, Germany
   hello@notera.studio

   We are not required to appoint a data protection officer: the threshold of § 38 BDSG is not reached, and our work does not consist of large-scale monitoring or the processing of special categories of data. For questions about data protection, please write directly to the address above.

   Full provider details are in the Imprint.

2. 02Opening the page

   When you open this page, our host records the request in a server log. This happens with every request to every website on the internet and cannot be avoided technically. What is stored:

   • your IP address
   • the date and time of the request
   • the file requested and whether it was delivered
   • the page visited before, if your browser sends it
   • browser and operating system

   From these logs we count how many people visited our site and which pages were read. The analysis runs on our own server, with our own software; no provider is involved and nothing leaves this server. What comes out of it are daily totals — no names, no identifiers, no profile and nothing that leads back to you.

   Your IP address is only held in memory while this happens, so that several visits on the same day are not counted twice. Only the number is stored. The logs themselves are automatically deleted after seven days — the daily totals remain, because no address is left in them.

   For this we set no cookies and we read nothing from your device. That is why this site does not ask you for permission — there is nothing we would need it for.

   This page sits on a server of our own, which we rent and run ourselves. It stands in Germany. We share it with nobody, no third-party service runs alongside on it, and nobody but us has access. There is no website builder, no third-party analytics tool and no provider in the background that your data would be passed on to.

   The data centre is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. It provides the machine and the power, not the software — a data processing agreement under Art. 28 GDPR is in place. The servers stand exclusively in Germany; no transfer to a third country takes place.

   Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in operating the site securely

3. 03Fonts

   The three fonts on this page sit on our own server. They are not loaded from Google Fonts. Opening the page therefore creates no connection to fonts.googleapis.com or fonts.gstatic.com, and your IP address is not transmitted to Google.

4. 04Your device

   This page stores two short entries in your browser's storage. They are not cookies: they are not sent with any request, never leave your device and never reach our server.

   • ng.auftritt — remembers for the length of this session that you have already seen the opening scene, so it does not run again on the next click.
   • ng.szene — remembers which motif ran last, so a different one comes on your next visit.

   Neither contains personal data, only a number. You can delete them at any time by removing this site's data in your browser; the page works unchanged afterwards.

5. 05The form

   When you submit the enquiry form, your details travel encrypted to our own server in Germany. There they are turned into an email to our mailbox straight away and then discarded. They are not stored: not in a file, not in a database, and the content appears in no log. There is no form service and no provider in between.

   Transmitted are: message, name, email address, optionally company and phone number, the nature of your enquiry and the page you are writing from. From the moment of delivery your enquiry sits in our mailbox as an ordinary email — for which section 06 applies. We use the details solely to answer your enquiry and delete them once it is settled and no statutory retention period stands in the way.

   To keep machines from misusing the form, our server checks three things: whether a field was filled in that should stay empty, how long the form was open, and how many enquiries recently came from the same IP address. For the last point your IP address sits briefly in our server's memory and is discarded after 24 hours; it is not joined with your enquiry. We do not use a captcha — it would pull third-party scripts onto this page.

   The tick box under the form is your consent to storing these details. You can withdraw it at any time without formality — an email to the address above is enough. The lawfulness of processing up to the withdrawal remains unaffected.

   Legal basis: Art. 6(1)(b) GDPR — steps prior to a contract · and Art. 6(1)(a) GDPR — consent · for the prevention of misuse Art. 6(1)(f) GDPR

6. 06Email

   If you write to us directly, we process your message and sender address in order to answer it. Our mailbox is held by Migadu-Mail GmbH, Rohnen 587, CH-9414 Schachen, Switzerland (commercial register CHE-334.933.960) — this is the only service outside our own server that we use at all.

   Switzerland is not a third country with an unclear level of protection: the European Commission has certified it with an adequacy decision confirming a level of data protection equivalent to that of the EU. A data processing agreement under Art. 28 GDPR is in place. Nothing goes to the USA. The same applies here: only to answer you, no passing on, deleted once settled.

   Legal basis: Art. 6 (1) (b) GDPR — steps prior to entering into a contract · otherwise Art. 6 (1) (f) GDPR

7. 07Your rights

   You have the following rights in relation to us at any time:

   • Access to whether and which data we process about you (Art. 15)
   • Rectification of incorrect details (Art. 16)
   • Erasure (Art. 17)
   • Restriction of processing (Art. 18)
   • Data portability in a common format (Art. 20)
   • Objection to processing that we base on a legitimate interest (Art. 21)

   An informal email is enough. We answer within one month; it costs you nothing.

8. 08Complaint

   If you believe that we are not processing your data lawfully, you can complain to a supervisory authority (Art. 77 GDPR). The authority responsible for us is the one at the place where we work:

   Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information, Baden-Württemberg)
   Heilbronner Straße 35, 70191 Stuttgart, Germany
   poststelle@lfdi.bwl.de

   You may equally turn to the supervisory authority of your place of residence, your place of work, or the place where you believe the infringement took place.

9. 09Limits

   So that there is no doubt — on this page there is not :

   • no passing on and no sale of your data to third parties
   • no transfer to countries outside the EU
   • no automated decision-making and no profiling within the meaning of Art. 22 GDPR
   • no advertising, no newsletter, no further use of your address

   There is no obligation to give us data. Without a message and a return address, however, we cannot answer you.