Privacy notice

1. Controller

Please use these contact details for privacy questions or to exercise your rights.

2. Website and hosting

We operate this website on a virtual server provided by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Enquiries submitted through the forms are also stored there. Hetzner supplies the infrastructure and may access personal data in the course of operations and technical support.

Serving the website requires connection data, including your IP address, the requested page or file and the time of the request. Depending on your browser, browser and operating system information and the previously visited page may also be transmitted.

Processing serves delivery and secure, reliable operation of the website. Its legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing our website and protecting it from disruption and abuse.

The website application and upstream web server do not retain access logs of individual page visits. Connection data is processed to serve the respective request. The contact application does not store your IP address together with your enquiry.

See Hetzner’s privacy notice and data processing information.

3. Contact and subscription enquiries

When you submit a form, we process your name, company or project name where supplied, email address, selected interest and message. We also store the enquiry time, an internal reference, the originating website section and your selected communication language.

Campaign pages additionally record supplied company size, budget assessment, offer and available campaign identifiers from the advertising link (source, medium, campaign and variant). These help us handle relevant enquiries and understand the source of enquiries and subsequent orders. They are stored only with a submitted enquiry. We do not use advertising cookies or cross-browser identifiers for this purpose.

Subscription enquiries include your chosen plan and initial task. We use these details to agree the collaboration, price and possible start with you. An enquiry does not activate a subscription.

We use your information to understand your project, respond and, where appropriate, prepare a consultation or proposal. Enquiries are stored in our contact database and accessed by those handling them or providing the required technical operations. Submitting a form does not subscribe you to a newsletter.

Where your enquiry prepares or fulfils a contract with you, Article 6(1)(b) GDPR applies. For business representatives and other enquiries, Article 6(1)(f) GDPR applies; our legitimate interest is responding to business enquiries and communicating with prospects and customers.

You are not legally obliged to provide these details. Required fields let us identify and process your enquiry; we cannot reply by email without a reachable email address. You may alternatively contact us directly by email or phone.

After submission we send an automatic acknowledgement to your email address and notify our team through Google Workspace. The acknowledgement may include the personal AI introduction described below. We store your selected language to provide this communication in German or English.

4. Email through Google Workspace

We use Google Workspace for business email, provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Google processes sender and recipient addresses, subjects, message contents, any attachments and technical delivery data to provide and protect email communication.

Article 6(1)(b) GDPR applies to communication preparing or fulfilling a contract with you. Article 6(1)(f) GDPR applies to communication with business representatives and other business enquiries; our legitimate interest is handling them reliably.

Data may also be processed outside the EU and EEA, particularly by Google LLC in the USA. Google LLC is certified under the EU–US Data Privacy Framework; covered transfers rely on the European Commission’s adequacy decision. For other transfers without an adequacy decision, Google’s processing terms provide standard contractual clauses and, where applicable, additional safeguards.

See the Cloud Data Processing Addendum, transfer information and Workspace subprocessors. You may also request information about applicable safeguards from us.

The retention criteria below also apply to email. Without optional measurement consent, visiting our website or submitting a form does not connect your browser to Google Ads.

5. Retention

We retain enquiries while processing them and during related exchanges or concrete contract negotiations. Afterwards we delete the data when it is no longer needed for those purposes.

We retain information longer where legally required or necessary to establish, exercise or defend legal claims. In those cases use is restricted to the applicable retention purpose. Data is then deleted when those purposes cease. Statutory retention relies on Article 6(1)(c) GDPR. Retention for legal claims relies on Article 6(1)(f) GDPR; our legitimate interest is protecting our legal claims and ability to defend them.

Google Analytics: optional visitor and event statistics

With your separate permission for Google Analytics, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure our public website. Events include page views, campaign sources, arrivals from ads, enquiry button clicks, the start of enquiries and assistant conversations, views of our offer section and successfully saved enquiries. Technical browser, device and connection information is processed. Google states that GA4 does not log or store IP addresses. Realtime reports may be delayed by a few minutes.

We do not send names, email addresses or email hashes, phone numbers, form or chat content to Analytics. Internal areas and personal link routes are excluded. Page URLs are limited to paths and validated campaign parameters; only the origin of the referring website is sent. Ad click identifiers are included only with additional Google Ads measurement permission. Enquiries count only after successful storage. Random enquiry identifiers prevent duplicates in browser session storage and are not sent to Analytics as user identifiers.

Analytics uses cookies including _ga and _ga_, with a default lifetime of up to two years. Our consent expires after 180 days. User and event data follow the retention setting of the property; aggregated reports may be retained longer. The existing Google Ads link supports combined reporting. Personalized advertising and Google Signals are disabled for this integration. Analytics permission is not remarketing permission.

The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. GA4 measurement is not activated without Analytics permission. Your choice is stored separately from Ads, Clarity and blog statistics under nited.measurement-consent.v6. Previous choices do not enable Analytics. Change your choice at any time via Cookie settings. Withdrawal stops our event tracking, deletes accessible Analytics cookies and reloads the page.

Google may process data in the US. See Google's privacy policy, data processing terms and GA4 privacy information for recipients, transfers and safeguards.

Google Ads: optional measurement and enhanced conversions

Only after you select “Google Ads” or “Accept all”, we load the Google tag for Google Ads, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It processes technical connection and browser information, page URLs and, where available, advertising click identifiers (gclid, gbraid or wbraid). Cookies including _gcl_au and _gcl_aw help attribute enquiries to ad clicks and generally last up to 90 days.

Only after an enquiry has been successfully saved do we send a conversion event with a random request identifier to prevent duplicate counting. For enhanced conversions, we also normalize the email address you entered and hash it with SHA-256 in your browser before sending the hash to Google. Google can match it against signed-in Google account data to attribute enquiries to advertising interactions and improve measurement. Hashing pseudonymizes the address; it does not make it anonymous. We do not transmit your name, phone number, conversation or form content for this measurement. The email address is not sent to Google Ads in plain text for this purpose. We do not store the email or its hash in cookies or local browser storage for this measurement. We do not use personalized advertising or automatic on-page detection of customer data for this purpose.

The basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG for access to your device. Without consent, this Google tag does not load and the enquiry form remains usable. Earlier cookie choices do not enable the enhanced measurement: we ask again with the updated notice. Your choice, notice version, timestamp and expiry are stored locally under nited.measurement-consent.v6 for 180 days. Request identifiers already reported are stored under nited.ads-sent.v1 for the browser session. You may withdraw consent for the future through “Cookie settings”; the page reloads to remove running measurement scripts.

Google may process data in the USA. See Google’s privacy policy, the Google Ads Data Processing Terms and how Google uses information from partner sites for recipients, international transfers and safeguards. Withdrawal does not affect prior processing.

6. Language preference and website content

Google Ads cookies are used only with your consent, as described in the measurement section above. If you explicitly choose a language or dismiss a language suggestion, we store that preference locally in your browser under “nited-language”. You can remove it through your browser’s site-data settings. The language of the URL you open determines the displayed page; your browser language may be used to suggest the alternative without redirecting you automatically.

Fonts, images and interface assets are served locally. External links connect you to their respective providers when you follow them; their own privacy notices apply.

7. AI and decisions

AI-assisted handling of subsequent replies

We use Google Gemini to prepare follow-up questions and an internal prototype plan. We submit your chosen enquiry content, subsequent written replies and previous substantive correspondence. Separate contact fields and callback numbers are not added to this follow-up context. Your message text may nevertheless contain personal information. Please do not include passwords or sensitive data that are unnecessary for planning.

Replies, progress, open questions and internal drafts are stored with your enquiry. Drafts undergo internal review and do not constitute an order or binding commitment. Sections 3, 5 and 8 describe the purposes, legal bases, retention and your rights. You may ask for a person to handle further clarification.

The optional project assistant sends your chat entries and the current page context to Google’s Gemini API. Separate contact fields are not sent with the chat. Please do not include confidential information.

If you voluntarily request a callback by our AI assistant, we store the supplied telephone number, the consent wording and version, and the consent time with your enquiry. This option is not preselected. You may withdraw consent for the future by email.

After submission, Google Gemini prepares a personal initial response for the confirmation screen and acknowledgement email. We send your name, optional company or project name and only the enquiry content you selected. Email and telephone fields are not sent to Gemini for this purpose. The response is stored with your enquiry. If the service is unavailable, we acknowledge receipt without an AI introduction.

The chat remains in browser memory during the open page visit; our application does not save it as a chat profile. Before submission you choose an editable summary or the entire conversation. Only the selected content is stored with your contact details as an enquiry. An optional phone number is used for your requested initial consultation. You may edit the draft before submitting. AI suggestions and time estimates are non-binding guidance and do not replace joint project planning.

When you request an assessment in the requirements builder, selected requirements and your current project description are sent to Gemini. Name, email and other separate contact fields are not included. Do not include confidential or unnecessary personal information in the description.

This optional assessment helps you prepare an enquiry. It provides suggestions and provisional timing. We do not store it separately as a customer profile. A suggestion is stored with your enquiry only if you include it in the submitted text. To limit use, we retain aggregate minute and day counters without names, contents, IP addresses or user identifiers.

Your selected language is used to request German or English output. Google processes submitted content to provide the AI service and may temporarily log it for safety and abuse prevention. Processing may take place outside the EU. See the Gemini API terms and linked privacy terms. The bases for handling pre-contractual and business enquiries are described in section 3.

We do not make solely automated decisions based on your website use or enquiry that have legal or similarly significant effects on you.

Optional blog reading statistics

Selecting “Blog statistics” or “Accept all” in the central cookie dialog enables our optional blog reading statistics. Only after this permission, our own server counts its view, reaching 75% after at least 30 seconds, and a click towards an enquiry. We store article, version, event and day. A random identifier for the open page prevents duplicate counting; it is not stored in cookies or browser storage and is not linked to a person. These identifiers expire after 30 days and are removed when the next event is processed; daily totals remain.

Reading statistics contain no IP addresses, device information, contact details or calculator inputs and are not sent to Google or social networks. Ordinary connection processing is described in the hosting section. Your choice lasts for 180 days and can be withdrawn through “Cookie settings”. “Reject all” disables reading statistics too. Earlier permission covering only Google Ads is not treated as permission for reading statistics. Enquiries submitted via an article retain its source marker with the enquiry, independently of optional reading statistics.

8. Your rights

Subject to the applicable legal requirements, you may request access, rectification, erasure or restriction of processing of your personal data. You also have a right to data portability where its conditions are met.

Where processing relies on consent, you may withdraw it at any time for the future without affecting the lawfulness of earlier processing. No separate consent is required to process the general contact enquiry described here.

You may complain to a supervisory authority, particularly where you usually live or work or where an alleged infringement took place. For companies based in Lower Saxony, the authority is the State Commissioner for Data Protection of Lower Saxony, Postfach 221, 30002 Hannover, Germany; email: poststelle@lfd.niedersachsen.de.

See the General Data Protection Regulation.

Microsoft Clarity: heatmaps and session replays

Only after you select “Microsoft Clarity” or “Accept all”, we use Microsoft Clarity to understand how visitors use our public pages and where enquiries stop. Microsoft processes technical visit information, page URLs, device and browser information, clicks, scrolling and mouse movements. Heatmaps show aggregated interaction; session replays reconstruct visits. This does not measure eye movements.

We mask form entries, chat content and enquiry summaries. Our internal workspace and personal link routes are excluded. Please do not put personal information in page URLs. Microsoft may process data in the USA. See Microsoft’s privacy statement and Clarity retention information.

The basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG for access to your device. Clarity uses cookies including _clck (visitor recognition, generally one year) and _clsk (session grouping, generally one day). Our choice expires after 180 days. You can withdraw through “Cookie settings”; the page reloads to stop loaded measurement scripts. Earlier consent versions do not activate Clarity. We do not send contact data as custom identifiers or enable advertising consent for Clarity.

Prototype offer and your choices

Google Ads, Microsoft Clarity and our blog statistics can be enabled separately via Cookie settings; “Accept all” enables all three. Optional purposes are initially off. The assistant and forms work without these permissions.

For the once-per-visit prototype offer, session storage records whether it was shown, its random offer reference and fixed expiry, and whether an enquiry was saved (nited.prototype-seen.v1, nited.prototype-offer.v1, nited.inquiry-saved.v1). This functional state prevents repeated interruptions and a restarting timer; it is not used for advertising measurement. The server records the batch, displayed availability and 30-minute window. When you enquire, the offer conditions, entry page and chosen contact method become part of your enquiry and internal assistant context. Unclaimed offer records are removed after 90 days on the next offer request. Closing a tab does not submit chat or contact data.

Newsletter and €500 starting benefit

If you expressly subscribe, we store your email, language, source page and the wording and time of your consent. After email confirmation you receive project insights, practical AI ideas and offers approximately 1–2 times monthly. The legal basis is Article 6(1)(a) GDPR. Every newsletter includes an unsubscribe option; your other inquiries are unaffected.

Confirmation uses a random link valid for 48 hours. We use our existing email infrastructure and document registration, confirmation and withdrawal. Our newsletter uses no open-tracking pixels or individual click tracking.

After confirmation we store your personal discount code and a pseudonymous functional cookie for 180 days so the website can display your discount. Registration alone is not a project inquiry or paid subscription. New customers receive €500 off the first paid month of Standard or Premium; regular prices apply thereafter. The earned discount remains after unsubscribing. An inquiry using the same email records the benefit in its context. Please use the contact details above for questions or deletion requests.