Privacy Policy
As of: 8 November 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Nadarasa Business Consulting GmbH
Weißdornweg 12A, 28876 Oyten
Email: info@nadarasaconsulting.de
Phone: 0151 11503161
2. No Data Protection Officer Required by Law
Under Art. 37 GDPR in conjunction with Sec. 38 of the German Federal Data Protection Act (BDSG), a company of this size is not required to appoint a data protection officer. For any privacy questions, please contact the email address above.
3. Contact by Email or Phone
This website does not use a contact form that transmits data to our server. The contact buttons simply open your own email program with a pre-filled recipient address (sometimes with a pre-filled subject line); the message itself only leaves your device once you send it through your own email or phone provider, not through this website.
If you nonetheless contact us by email or phone, we process the data you voluntarily provide (e.g. name, contact details, message content) solely to handle and respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to entering into a contract, otherwise our legitimate interest in efficiently handling inquiries under Art. 6(1)(f) GDPR. Providing your data is voluntary; without it, we cannot process your inquiry. We delete this data once your inquiry has been fully resolved and no statutory retention obligations apply.
4. Hosting with Vercel Inc. (USA)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the site, Vercel processes technically necessary server logs (including IP address, page accessed, time, and browser type) to deliver the website reliably and securely. The legal basis is our legitimate interest in a reliable and secure website operation under Art. 6(1)(f) GDPR. These server logs are automatically deleted after a short period unless they are needed longer to defend against attacks.
As Vercel Inc. is based in the USA, a third country within the meaning of the GDPR, this involves a transfer of personal data to the USA. Vercel states it is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of data protection (adequacy decision under Art. 45 GDPR); Vercel additionally provides EU Standard Contractual Clauses under Art. 46 GDPR.
5. Cookies and Tracking
This website does not use analytics, marketing, or tracking cookies. No website tracking or user profiling takes place. Only the technically necessary server logs described in section 4 are processed.
6. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
7. Your Rights as a Data Subject
You have the following rights regarding your personal data at any time:
- Access to the data we process about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
To exercise these rights, please contact the email address above.
8. Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). As Nadarasa Business Consulting GmbH is based in Lower Saxony, this is the Lower Saxony Data Protection Authority (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.
