Privacy Policy | NuVio Labs

1. Hosting

Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Personal data collected on this website is processed on Vercel's servers. Data transfer to the US is based on the EU Standard Contractual Clauses in accordance with Art. 46 GDPR. Further information on data protection at Vercel can be found at: https://vercel.com/legal/privacy-policy

2. Contact Form

When you use the contact form, your details (name, email address, optionally company, project type, your message and, optionally, how you heard about us) are transmitted to our server in encrypted form, checked there and then forwarded to us by email. The email also contains the language in which you use the website and the date and time of the enquiry. Your IP address, cookies or analytics identifiers are not part of the email. The contents of the form are not transmitted to analytics services and are not stored temporarily in your browser. For sending, we use the email service Resend of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, as a processor. Resend processes the email including its content and the related metadata. According to the provider, this data is stored in the USA, and email and log data is retained for 30 days. According to the provider, the transfer to the USA is based on the EU-U.S. Data Privacy Framework and on EU Standard Contractual Clauses. Further information from the provider: https://resend.com/legal/privacy-policy and https://resend.com/security/gdpr To protect against abuse, we limit the number of enquiries per internet connection. For this purpose, when you submit the form, a hash of your IP address is kept together with a counter for at most 10 minutes in a database (Upstash Redis) or in the server's memory and is then deleted automatically. The form also contains a field that is invisible to visitors and is used to detect automated spam submissions. We store your enquiry in our email inbox in order to handle it and for any follow-up questions. Beyond that, it is not shared with third parties. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is aimed at concluding a contract, and otherwise Art. 6 (1) (f) GDPR. Our legitimate interest lies in answering enquiries and in protecting the form against abuse. Alternatively, you can write to us directly by email. A WhatsApp number is also given in the legal notice; if you use that channel, the terms of WhatsApp Ireland Ltd. apply.

3. Responsible Entity

The entity responsible for data processing on this website is: Axel Schurer NuVioLabs Nimweger Straße 3 47559 Kranenburg Germany Email: contact@nuviolabs.de

4. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us, this site uses SSL or TLS encryption.

5. Server Log Files

The provider of the pages automatically collects and stores information in server log files (e.g. browser type/version, OS, referrer URL, host name, time, IP address). These data are not combined with other data sources. The basis for data processing is Art. 6 (1) (f) GDPR.

6. Cookies and browser storage

This website stores only a small amount of information in your browser. Without consent, this is limited to information required for a function you have requested: – Cookie "NEXT_LOCALE": stores the selected language. If you change the language using the language switcher, it is kept for up to 12 months, otherwise until the end of the browser session. – "nuvio-theme" (localStorage): stores whether you have chosen light or dark mode. – "nuvio_consent_v1" (localStorage): stores your choice in the cookie settings (see section 8). – "nuvio:journal-likes" (localStorage): only created if you mark a journal article with "Like", and contains the identifiers of the marked articles so that an article is not accidentally counted more than once. The localStorage entries remain until you delete them in your browser. If you mark an article with "Like", your browser sends the article's identifier to our server. The server merely increments a counter per article in a database (Upstash Redis); no personal data is stored there. To protect against accidental repeated clicks, the server temporarily keeps your IP address together with the time of your last click in memory. This information is not stored in a database and is discarded at the latest when the respective server instance restarts. The legal basis for this storage is Section 25 (2) no. 2 TDDDG, and for the related processing Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the settings and functions you have chosen. Google Analytics cookies are only set if you have consented to analytics (see sections 8 and 9). Vercel Web Analytics and Vercel Speed Insights do not set cookies (see section 7). No marketing or advertising cookies are used.

7. Vercel Web Analytics and Vercel Speed Insights

Vercel Web Analytics With your consent, we use Vercel Web Analytics, a service provided by Vercel Inc., USA, to evaluate use of the website statistically. Vercel Web Analytics belongs to the "Analytics" category in the cookie settings and is enabled or disabled together with Google Analytics. Without your consent, the measurement script is not loaded. Measurement works without cookies. However, the measurement script checks whether an entry "__va_attribution" exists in your browser's local storage (localStorage). Such an entry is only created if a website passes user or group identifiers to Vercel; this website does not do so, which means the measurement stores no data on your device. The following is recorded per page view: timestamp, the address called up, referring page, filtered query parameters, approximate location (country, region, city), device type, operating system and browser including versions, and the version of the measurement script. To distinguish visits, a value is derived from the technical details of your request. According to the provider, the data is not associated with any individual or IP address, and the association of a visit is discarded after 24 hours. Recognition over longer periods or across other websites is therefore not possible. In addition, for selected interactions – clicks on enquiry buttons (general and in the pricing section), starting to fill in the contact form, submitting the contact form, successful acceptance or failure of sending, and clicks on the email address – we send an event to Vercel Web Analytics. It only contains the name of the interaction and technical information about the position of the element or a technical error code, no contents of the contact form. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw it at any time via "Cookie settings" in the footer. From the moment of withdrawal, no further data is transmitted to Vercel Web Analytics. The lawfulness of processing carried out before the withdrawal remains unaffected. Further information from the provider: https://vercel.com/docs/analytics/privacy-policy Vercel Speed Insights Regardless of your choice in the cookie settings, we use Vercel Speed Insights from the same provider to measure the actual loading performance of the website for real visitors. Recorded are the route and address of the page, network speed, browser, device type, operating system, the country as a two-letter code, the measured Web Vitals values including the element they relate to, and the timestamp and version of the measurement script. Speed Insights does not set cookies and does not store or read any data on your device. According to the provider, measurement takes place without reference to any individual or IP address. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website quickly and without technical errors. Further information from the provider: https://vercel.com/docs/speed-insights/privacy-policy

8. Consent management (cookie settings)

We store your choice regarding optional analytics technologies in your browser's local storage (localStorage) under the key "nuvio_consent_v1". Only whether you have consented to analytics and a version number are stored. No user identifier is created, and this information is not transmitted to our servers. The "Analytics" category covers Google Analytics 4 (section 9) and Vercel Web Analytics (section 7). Both are enabled or disabled together. As long as you have not made a choice, both remain disabled. This storage is necessary so that your decision is respected on subsequent page views. It remains in place until you change your choice or delete the website data in your browser. You can change your choice and withdraw any consent given at any time via the "Cookie settings" link in the footer.

9. Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service, to evaluate use of the website statistically and to improve it. Google Analytics is provided by a company of the Google group. Google Analytics is only loaded after you have consented to analytics ("Accept all" or the "Analytics" category enabled in the cookie settings). Before that, no script from Google is loaded, no connection to Google Analytics is established, and no Google Analytics cookies are set. Data collected After your consent, Google Analytics records the pages you view (address, page title and referring page), including page changes within the website, as well as technical information such as device type, operating system, browser, screen resolution, language setting and approximate location. Your IP address is used to determine the approximate location; according to Google, IP addresses are not logged or stored in Google Analytics 4. In addition, Google Analytics enhanced measurement is active. It automatically records: scrolling to the end of a page, clicks on links to other websites (including the link's target address), page views whose address contains a search term, interactions with forms (start and submission, with technical attributes of the form, without your input), the use of embedded videos, and file downloads. We also transmit selected interactions ourselves: clicks on enquiry buttons (general and in the pricing section), starting to fill in the contact form, submitting the contact form, successful acceptance or failure of sending, and clicks on the email address. For this, we only transmit technical information about the position of the clicked element on the website or a technical error code. We do not transmit contents of the contact form such as your name, email address or message to Google Analytics. Automatic redaction of email addresses in transmitted data is additionally enabled in Google Analytics. Settings in Google Analytics – Google Signals is disabled. No cross-device association via Google accounts takes place. – Google Analytics is not linked to Google Ads or any other advertising service. – Data sharing with Google for its own products and services, for modelling and business insights, and for recommendations is disabled. Only sharing for technical support is enabled, meaning access by Google where required to handle support requests. – Retention: event-level data is deleted after 2 months, user-level data after 14 months. The period for user-level data restarts with new activity. Aggregated standard reports are not affected by these periods. Cookies Google Analytics sets two cookies: according to Google, "_ga" is used to distinguish users and "_ga_<ID>" to persist session state. According to Google, both have a default lifetime of 2 years, which is extended on each visit. Some browsers limit the lifetime of such cookies to a shorter period. Transfer to third countries When Google Analytics is used, data may also be transferred to and processed in countries outside the European Union, in particular the USA. Legal basis and withdrawal The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw it at any time via "Cookie settings" in the footer. From the moment of withdrawal, no further data is collected for Google Analytics, the Google Analytics cookies in your browser are deleted, and the page is reloaded so that no Google scripts remain active. Data already transmitted to Google before the withdrawal is not deleted by the withdrawal; the retention periods stated above apply to it. The lawfulness of processing carried out before the withdrawal remains unaffected. Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245

10. Data Subject Rights (Art. 15–21 GDPR)

You have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing, and a right to correction, blocking or deletion of this data. For questions you can contact us at any time.

11. Right of Appeal to the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.