Privacy Policy

(Datenschutzerklärung pursuant to the EU General Data Protection Regulation — GDPR / DSGVO)

Last updated: April 2026

1. Data Controller

The data controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

Nomad Solutions GmbH
Hochstr. 17
47228 Duisburg
Germany

Email: info@nomad-solutions.de

2. Data Protection Officer

The appointment of a data protection officer is not legally required for our company. For data protection inquiries, please contact us at info@nomad-solutions.de.

3. Principles of Data Processing

Nomad Solutions GmbH processes personal data exclusively in accordance with the GDPR and the German Federal Data Protection Act (BDSG). Personal data is only processed to the extent necessary for the provision of a functional website and our content and services, or where explicit consent has been given.

4. Server Log Files

When you visit our website, we automatically collect the following information in temporary server log files:

IP address (anonymised or deleted after 7 days)
Date and time of access
Name and URL of the retrieved file
Referrer URL
Browser used and operating system

Purpose: Technical provision of the website, attack detection and defence.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security).
Storage period: 7 days, followed by automatic deletion.

5. Hosting

This website is operated on infrastructure owned and operated by Nomad Solutions GmbH in German data centres. Nomad Solutions GmbH installs, configures and operates all server software and the container platform itself and is responsible for the processing of all data collected via the website.

For the physical infrastructure (hardware, network, data centre, power supply) we use the services of:

Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
Germany

Server location: Data centre Falkenstein, Germany.

A data processing agreement pursuant to Art. 28 GDPR exists with Hetzner Online GmbH. Hetzner processes personal data exclusively on our behalf and exclusively on servers located in Germany. No personal data is transferred to third countries.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, performant and privacy-friendly website provision).

6. Contact Form

When you contact us via the contact form, we collect the following data: name (required), company (optional), email address (required), phone number (optional), topic, message.

The data is delivered via our Microsoft 365 infrastructure (Exchange Online, EU data centres) to:

an internal notification to the managing directors
our central sales mailbox projekt@nomad-solutions.de

You will additionally receive an automatic confirmation of receipt.

Purpose: Processing your inquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measure) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
Storage period: Until the inquiry has been conclusively processed; in the event of contract initiation, 6 years pursuant to § 257 HGB.
Data processor: Microsoft Ireland Operations Ltd. pursuant to Art. 28 GDPR. Data processing exclusively in EU data centres.

7. Appointment Booking (Cal.com)

For online appointment bookings, we use the service Cal.com provided by Cal.com, Inc., 2261 Market Street #4458, San Francisco, CA 94114, USA.

Consent required: The Cal.com booking widget is only loaded after your active consent via our cookie banner. Without consent, no data is transmitted to Cal.com.

When used, the following data is transmitted to Cal.com:

IP address when the widget is accessed
Browser and device information
Name, email address, possibly phone number upon booking
Booking time and topic

Data transfer to the USA: Cal.com is certified under the EU-US Data Privacy Framework. Additionally, EU Standard Contractual Clauses (SCCs) safeguard the transfer.
Purpose: Enabling online appointment booking.
Legal basis: Art. 6(1)(a) GDPR (consent).
Withdrawal: You can withdraw your consent at any time via the cookie settings in the footer.
Cal.com privacy policy: https://cal.com/privacy

8. Web Analytics — Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Consent required:GA4 is only loaded after you have actively granted consent via our cookie banner (category "Statistics"). No data is transmitted to Google without your consent.

With your consent, the following data is processed, among others:

IP address (processed in truncated form by Google, no full storage)
Pages visited, time on page, click paths, scroll depth
Referrer URL, search term (if transmitted)
Device type, browser, operating system, approximate location (country / region)
pseudonymous client ID (cookies _ga, _ga_*) to recognise returning visits

Purpose: reach measurement and analysis of user behaviour in order to improve our content and services.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent).
Storage period: cookies up to 24 months after the last visit; GA4 event data 14 months by default.

Data transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework. In addition, EU Standard Contractual Clauses (SCCs) and a data processing agreement pursuant to Art. 28 GDPR with Google Ireland Ltd. are in place.

Withdrawal: You can withdraw your consent at any time with effect for the future — via the cookie settings in the footer of this website, or by installing the browser add-on to disable Google Analytics: https://tools.google.com/dlpage/gaoptout.
Google privacy policy: https://policies.google.com/privacy

9. Cookies and Local Storage

Technically necessary entries in local storage are used on this website:

Consent storage: Stores your cookie preferences. Storage period: 12 months.

Legal basis: § 25(2)(2) TDDDG (strictly necessary).

Cookies and entries from embedded third-party services (in particular Google Analytics 4 and Cal.com) are only set after your explicit consent.

10. SSL Encryption

This website uses SSL/TLS encryption to protect data transmission. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://".

11. Your Rights as a Data Subject

You have the following rights with regard to your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, an email to info@nomad-solutions.de is sufficient.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. Competent authority for Nomad Solutions GmbH is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Web: https://www.ldi.nrw.de

13. Changes to this Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements.