Privacy policy
This policy explains which personal data is processed when you visit this website or send an enquiry. Personal data is information relating to an identified or identifiable person.
1. Controller
The controller responsible for processing personal data on this website is:
Rebecca Natterer, nTech
Weiherstraße 16
89352 Ellzee
Germany
Email: [email protected]
Phone: +49 15510 660188
2. Website delivery and hosting
This website runs on server infrastructure provided by Hetzner Online GmbH, Gunzenhausen, Germany. When you visit, your IP address, the requested address and technical connection information must be processed so that the content can be delivered to your browser.
Technical logs are generated for operation, troubleshooting and security. Web server access logs are limited to timestamps, response status, response duration and technical request identifiers. They do not normally contain IP addresses, full page addresses or browser identifiers. Such information may be included in error or security logs when technical problems occur.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to provide this website securely and reliably and to detect faults or attacks. Operational logs are overwritten automatically according to their size. Data relating to a specific security incident may be retained until it has been resolved and, where applicable, to establish, exercise or defend legal claims.
Further information: Hetzner privacy policy.
3. Cloudflare: website delivery and protection
I use Cloudflare, Inc., San Francisco, USA, to deliver and protect this website. Cloudflare acts as a reverse proxy, so requests are first processed through its infrastructure. In particular, this may involve IP addresses, requested addresses, timestamps, connection and browser information, and security-related information. Contact form submissions also pass through this infrastructure.
The service is used for reliable delivery, encryption and protection against attacks. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is secure operation with minimal disruption. Cloudflare may use technically necessary security cookies to prevent abusive access, for example to remember a completed security check. Where storing or accessing information on your device is strictly necessary for this purpose, the legal basis is section 25(2)(2) of the German TDDDG.
Data may be processed in the USA and other countries outside the EU or EEA. For transfers from the EU, Cloudflare refers in particular to its certification under the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. Information about transfer mechanisms, subprocessors and safeguards can be found in the Cloudflare data processing terms and in the Cloudflare privacy policy.
4. Contact form, email and phone
When you write to me using the contact form, I process your name, email address, subject and message. Providing the platform you use is optional. Without the required contact and project details, I cannot handle your enquiry through the form. If you contact me by email or phone, I process the information you provide.
I use this data to answer your enquiry and, where applicable, prepare a quote or collaboration. If your enquiry concerns a contract or steps before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is Article 6(1)(f) GDPR; my legitimate interest is to handle your message.
The form uses Contact Form 7. In the current configuration, no additional collection of form messages is stored in the WordPress database. The message is sent by email and processed in the mailbox used. Acknowledging the privacy information in the form does not constitute consent to advertising.
I use Gandi SAS, Paris, France, for email delivery and the mailbox. Gandi processes, in particular, email addresses, message content and technical delivery information. Further information can be found in the Gandi privacy policy.
Enquiry data is deleted once the enquiry has been handled and there is no further reason to retain it. If we work together, the data may become part of the contract documentation. Statutory retention obligations, particularly for business and tax documents, and the establishment, exercise or defence of legal claims may require longer storage.
5. Cookies and browser storage
In its WordPress configuration, this website does not set analytics or advertising cookies during an ordinary visit by a person who is not logged in, and does not store visitor data in local storage or session storage. Technically necessary login and session cookies may be used to log in to and manage the protected WordPress backend. Section 3 explains possible Cloudflare security cookies.
Whether information may be stored on or accessed from your device is governed by section 25 of the German TDDDG. Under section 25(2) TDDDG, storage or access that is strictly necessary for a service explicitly requested by you does not require consent. The subsequent processing of personal data is also subject to the relevant legal bases under the GDPR.
6. Fonts, images and external links
Fonts, website images and project previews are delivered through this website. No fonts are loaded from Google Fonts. Image optimisation with EWWW Image Optimizer takes place locally on the server; the plugin’s cloud optimisation and additional image CDN are not used.
Links to other websites are ordinary links. The linked pages are only accessed when you open the respective link. Their operators are responsible for data processing on those pages. This website does not embed external maps, videos or Google reCAPTCHA elements.
7. No analytics or advertising services
This website does not use additional services to measure visits, create usage profiles or deliver personalised advertising. Analytics tools such as Google Analytics or Cloudflare Web Analytics are not integrated.
8. Recipients and security
Only people and technical service providers who need personal data for the relevant purpose have access to it, in particular for hosting, technical administration and email processing. Data is only shared with other recipients where necessary to handle the matter, where a legal basis exists or where there is a legal obligation.
The website is delivered over encrypted HTTPS. The connection to the email service also uses transport encryption. This does not automatically provide end-to-end encryption for emails. Please do not use the general contact form to send particularly sensitive information that is not needed for your enquiry.
9. Your rights
Subject to the statutory conditions, you have the right to access your personal data (Article 15 GDPR), to rectification (Article 16 GDPR), to erasure (Article 17 GDPR) and to restriction of processing (Article 18 GDPR). Under the conditions of Article 20 GDPR, you also have the right to data portability.
Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21 GDPR). I will then stop processing the data concerned unless there are compelling legitimate grounds or grounds relating to the establishment, exercise or defence of legal claims.
If processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. To exercise your rights, simply send a message to the contact address given above.
You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly in your place of habitual residence, your workplace or the place of the alleged infringement. For non-public bodies in Bavaria, the competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA).
Last updated: 11 October 2026