Privacy Policy

Version: July 2026 · Draft – have reviewed by counsel before publication [PLEASE VERIFY/COMPLETE]

Convenience translation. The German version (Datenschutzerklärung) is legally authoritative.

1. Controller

neonotu GmbH [PLEASE VERIFY/COMPLETE], Edelsbergstraße 8, 80686 Munich, Germany, e-mail: kontakt@IHRE-DOMAIN.de [PLEASE VERIFY/COMPLETE]

2. Website visits

When you visit this website, the web server automatically processes server log data (IP address, date/time, requested file, browser type) to deliver the website and ensure security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Log data is deleted after 14 days at the latest [PLEASE VERIFY/COMPLETE].

3. Cookies

We only use technically necessary cookies and comparable storage technologies (e.g. to store your cookie choice in your browser's local storage). Legal basis: Section 25(2) TDDDG and Art. 6(1)(f) GDPR. Optional cookies (e.g. statistics) are set only with your consent (Art. 6(1)(a) GDPR); we currently do not use any such services [PLEASE VERIFY/COMPLETE].

4. Order form

When you place an order, we process the company, contact, and payment data you provide as well as the uploaded verification documents. Purposes: initiation and performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, in particular commercial and tax retention duties and identification duties under anti-money-laundering law (Art. 6(1)(c) GDPR). For SEPA direct debit, we process your bank details (IBAN, account holder) to collect payment; the data is transmitted to our bank [PLEASE VERIFY/COMPLETE].

5. Map (OpenStreetMap)

The "Building" page embeds a map by OpenStreetMap (OpenStreetMap Foundation, UK). When the map loads, your IP address is transmitted to OSMF servers. Legal basis: Art. 6(1)(f) GDPR.

6. Retention

Contract and invoice data is stored for the statutory retention periods (6 or 10 years under German commercial and tax law). Verification documents under anti-money-laundering law are retained for 5 years after contract end. Other data is deleted once its purpose no longer applies.

7. Your rights

You have the rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). Consent may be withdrawn at any time with effect for the future. You may lodge a complaint with a supervisory authority; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach, Germany.

8. Data security

Your data is transmitted using TLS encryption. Uploaded documents are stored with restricted access and made available only to authorized staff.