Privacy Policy

This site is operated from Germany and is subject to the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The authoritative version of this policy is the German Datenschutzerklärung. This English translation is provided for convenience.

1. Data Controller

NDTSS GmbH & Co. KG
Yokohamastraße 3, 20457 Hamburg, Germany
Email: email@ndtss.de

A data protection officer has not been appointed, as we do not meet the thresholds of Art. 37 GDPR / § 38 BDSG. For any data protection matter, please contact us at the email address above.

2. Overview

This website is deliberately kept lean. There is no contact form, no cookies, no tracking, no analytics and no advertising networks. We only process:

• server log data of your visit (technically required)
• an external web font service (Google Fonts) for font delivery
• a small technical entry in your browser's sessionStorage for language selection
• optionally, any voluntary contact you make via email

3. Hosting and Server Log Files

The website is hosted on our own servers in Germany. On every request the web server automatically stores technically necessary access data in log files:

• anonymised / truncated IP address
• date and time of access
• requested URL, referrer URL
• HTTP status code, transferred data volume
• browser identifier (user agent)

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and stable operation of the website). Logs are deleted after 30 days at the latest, or aggregated into anonymous statistics.

4. Google Fonts (External Web Font Service)

To display our typography consistently, we load the font families Michroma, Jost and JetBrains Mono from Google Fonts (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you open a page, your browser establishes a connection to Google's servers and transmits your IP address and user agent to Google. A transfer to the United States cannot be entirely ruled out; Google relies on the EU–US Data Privacy Framework for such transfers.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a visually coherent typographic presentation). Google's information: https://policies.google.com/privacy.

Note: You can block external fonts in your browser settings or via common browser extensions. The site remains fully functional.

5. Local Storage in the Browser (sessionStorage)

On your first visit the site detects whether your browser reports a German language preference, and if so redirects you once to the German version /de/. To avoid repeating that redirect on every click, we store a small technical value (lang-pref) in your browser's sessionStorage. This is not a cookie, no personal data is stored or transmitted, and the entry is automatically deleted at the latest when you close the browser tab.

Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary) resp. Art. 6 (1) (f) GDPR.

6. Contacting Us by Email

If you contact us via the mailto link, the information you provide (email address, name, content of the message) will be stored by us in order to respond to your enquiry. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures or contract performance) resp. Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Data is deleted as soon as it is no longer required for the processing purpose and no statutory retention obligations apply.

7. Recipients and Processors

• Server / data centre providers in Germany (processing under Art. 28 GDPR)
• Google Ireland Limited for the delivery of web fonts (see section 4)

Beyond that, your personal data is not shared with any third parties.

8. Your Rights as a Data Subject

Subject to the statutory requirements, you have the following rights against the controller under the GDPR:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing based on legitimate interests (Art. 21 GDPR)
• right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, contact email@ndtss.de.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR (Art. 77 GDPR). The competent authority for our registered seat is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 7. OG, 20459 Hamburg, Germany
datenschutz-hamburg.de

10. Automated Decision-Making

Automated decision-making, including profiling (Art. 22 GDPR), does not take place on this website.

11. Status of this Privacy Policy

This policy is updated in case of changes to the site or the legal situation. Last update: 2026-07-30.