Privacy policy

1. Scope

This privacy policy applies to the website operated under nd-automation.com (including language versions) and to inquiries submitted via our contact form or by email. It is addressed to visitors and prospective clients in the EU/EEA and elsewhere who use our online services.

2. Controller

The controller responsible for data processing within the meaning of Art. 4 (7) GDPR is: NEXT DIMENSION München, Deutschland Email:

info@nd-automation.com

3. Hosting and server log files

This website is hosted on a server in the European Union / EEA (or otherwise with appropriate safeguards). When you visit the site, the web server automatically processes technically necessary log data, which may include: • IP address • date and time of the request • requested URL / resource • HTTP status code • amount of data transferred • referrer URL (if transmitted) • browser type and version, operating system Processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in secure, stable operation, abuse prevention, and troubleshooting). Log data are typically stored only as long as necessary for these purposes and then deleted or anonymised, unless a longer retention is required for security investigations or legal obligations.

4. Contact form and email inquiries

If you contact us via the contact form or by email, we process the data you provide (for example name, email address, company, project type, budget range, message content, and any attachments you send) in order to respond to your inquiry and, where applicable, to prepare a contractual relationship. Legal bases: • Art. 6 (1) lit. b GDPR (steps prior to entering into a contract / performance of a contract), and/or • Art. 6 (1) lit. f GDPR (legitimate interest in handling business inquiries), and/or • Art. 6 (1) lit. a GDPR where you give voluntary consent for a specific purpose. We do not sell your inquiry data. Disclosure to third parties occurs only where necessary to process your request (e.g. IT service providers as processors under Art. 28 GDPR), where required by law, or with your consent.

5. Cookies and similar technologies

We use cookies and similar storage technologies as follows: • Technically necessary cookies / storage: required to operate the website (for example language preference) and, for the admin area, authentication (Art. 6 (1) lit. f GDPR / Art. 6 (1) lit. b GDPR where applicable). • Optional analytics (only with your consent): if you accept via our cookie banner, we may store a visitor identifier in local storage and record basic usage events (such as page views and service clicks) on our own servers to understand how the site is used. This is not advertising tracking and is not shared with ad networks. Legal basis: Art. 6 (1) lit. a GDPR. You can withdraw or change your choice at any time via “Cookie settings” in the footer. If you reject optional analytics, the site remains fully usable; only necessary technologies run. You can also configure your browser to refuse cookies; some features (especially admin login) may then be unavailable.

6. Admin area

Access to the protected admin area requires authentication. Session cookies (or equivalent session mechanisms) are set to keep you signed in and to protect against unauthorised access. These are strictly necessary for the admin service (Art. 6 (1) lit. f GDPR / Art. 6 (1) lit. b GDPR for contracted operators). Admin activity may generate security-related logs (login attempts, timestamps) to protect the system.

7. Legal bases overview

Depending on the processing activity, we rely on one or more of the following GDPR legal bases: • Art. 6 (1) lit. a: consent • Art. 6 (1) lit. b: contract or pre-contractual measures • Art. 6 (1) lit. c: legal obligation • Art. 6 (1) lit. f: legitimate interests (in particular IT security, communication, and asserting/defending legal claims), balanced against your rights and freedoms

8. Retention periods

We retain personal data only as long as necessary for the purposes stated, or as required by statutory retention periods (for example commercial and tax retention rules under German/EU law, which may be up to 6 or 10 years for certain business documents). Inquiry data that do not lead to a contract are typically deleted or anonymised after the inquiry has been fully handled, unless you ask us to keep them longer or a legitimate interest / legal obligation justifies further storage.

9. Recipients and processors

Recipients may include: • hosting and infrastructure providers • email delivery providers (if used to send or receive messages) • IT maintenance providers acting under our instructions Where providers process personal data on our behalf, we conclude data processing agreements pursuant to Art. 28 GDPR.

10. Transfers outside the EU/EEA

As a rule we aim to process data within the EU/EEA. If a transfer to a third country is necessary (for example because a carefully selected tool provider is located there), we ensure an adequate level of protection via an adequacy decision of the European Commission and/or appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 GDPR), plus supplementary measures where required.

11. Your rights

Under the GDPR you have the following rights (subject to statutory conditions and exceptions): • Right of access (Art. 15 GDPR) • Right to rectification (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object to processing based on legitimate interests (Art. 21 GDPR) • Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR), where processing is based on consent To exercise your rights, contact us using the email address above. We may need to verify your identity before responding.

12. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). For Bavaria / Germany, the competent authority is typically: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) https://www.lda.bayern.de/

13. Obligation to provide data

You are not legally or contractually obliged to provide personal data via this website. However, without certain information (especially a valid email address and a description of your request) we may be unable to respond meaningfully to inquiries or provide requested services.

14. Automated decision-making

We do not use personal data for automated decision-making including profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

15. Changes to this policy

We may update this privacy policy to reflect legal, technical, or organisational changes. The current version published on this page applies. Material changes will be indicated by updating the “Last updated” date.

16. Note

This privacy policy is a general information text for EU/EEA-oriented online presence. It does not replace individual legal advice. Operators should adapt processor lists, hosting locations, tools (analytics, newsletter, chat, payment), and contact/address details to their actual setup and have them reviewed where necessary.