Privacy Policy

Last updated: July 2025

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Robert Alexander Massinger
NUTSHELL Solutions
Grünwalder Str. 71
81547 München
Germany

Email: info@nutshell-solutions.de

2. General Information on Data Processing

We only process personal data of our users insofar as this is necessary to provide a functional website and our content and services. The processing of personal data of our users regularly takes place only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of data is permitted by law.

3. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Art. 6(1)(a) GDPR — Consent of the data subject
• Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR — Compliance with a legal obligation
• Art. 6(1)(f) GDPR — Legitimate interest (e.g. website security)

4. Hosting

This website is hosted by One.com. The hosting provider processes data arising in connection with the hosting contract on our behalf. The servers are located in the European Union.

Provider: One.com Group AB, Kalvebod Brygge 24, 1560 København V, Denmark.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the reliable operation of the website).

5. Server Log Files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• IP address (anonymised)
• Time of the server request

This data is not merged with other data sources. Storage is based on Art. 6(1)(f) GDPR to ensure trouble-free operation.

6. Contact Form

When you send us enquiries via the contact form, your details from the form (name, email address, optionally phone number, subject, message) are stored for the purpose of processing the enquiry and in case of follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in processing enquiries).

Retention period: Your data will be deleted after the enquiry has been fully processed, unless statutory retention obligations apply.

Technical measures: The contact form uses a honeypot method to protect against automated abuse (spam). No cookies or external services are used for spam prevention. Transmission is encrypted via HTTPS/TLS. The email is sent via SMTP/TLS.

7. Cookies

This website uses no tracking cookies and no advertising cookies. Only a technically necessary session cookie for the contact form (rate limiting) is set, which is automatically deleted when the browser is closed.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against abuse).

8. External Services and Third Parties

This website does not load any external resources from third parties. No external fonts (e.g. Google Fonts), no external CDNs, no analytics tools (e.g. Google Analytics), no social media plugins and no advertising services are integrated.

All CSS files, JavaScript files and fonts are loaded locally from our server. No data is shared with third parties.

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. An encrypted connection can be recognised by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

10. Your Rights as a Data Subject

You have the following rights with regard to the personal data concerning you:

• Right of access (Art. 15 GDPR) — You may request information about your personal data processed by us.
• Right to rectification (Art. 16 GDPR) — You may request the immediate rectification of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You may request the deletion of your data stored by us.
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) — You may object to the processing of your data at any time.
• Right to withdraw consent (Art. 7(3) GDPR) — You may withdraw consent given at any time with effect for the future.

To exercise your rights, please contact: info@nutshell-solutions.de

11. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR.

Competent supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
www.lda.bayern.de

12. Updates to This Privacy Policy

This privacy policy is currently valid as of July 2025.

Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can always be accessed on this page.