Skip to content
NordCodeSolutions

Legal

Privacy policy

Last updated: 15 September 2026

1. Controller

The controller for data processing on this website within the meaning of Regulation (EU) 2016/679 (GDPR) and the German Federal Data Protection Act (BDSG) is:

the founder
NordCode Solutions
Hamburg
Deutschland
Email: hallo@nordcode.solutions

2. Hosting and server logs

This website is hosted by Hostinger International Ltd. (Hostinger). When you visit, the hosting provider automatically collects technically necessary data: IP address (usually shortened or temporary), date and time, requested resource, referrer, browser type and operating system. This processing is required to deliver, operate and secure the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure, uninterrupted service). Log files are generally deleted after 14 days at the latest, unless security reasons require longer retention.

3. Contact form and email delivery

If you use our contact form, we process the data you enter: name, company, email address, optional phone number, company size, selected interest and message. Required fields are marked. Without them we cannot handle the enquiry.

Legal bases: Art. 6 (1) (a) GDPR (consent via the checkbox) and Art. 6 (1) (b) GDPR (pre-contractual steps at your request). You may withdraw consent at any time with effect for the future, for example by email to the address above. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Form submissions are stored to handle your enquiry and sent by email via Resend (Resend, Inc., USA) and, if Resend is not configured, via FormSubmit (formsubmit.co) as processors for email delivery. A transfer to the USA may occur; where applicable it is based on appropriate safeguards under Art. 46 GDPR (in particular standard contractual clauses). The data is not used for newsletters or advertising.

4. Appointment booking via Cal.com

To book an intro call, a Cal.com calendar may be embedded. The booking data you provide (name, email, chosen slot, optional further details) is processed to hold the appointment. Legal bases are Art. 6 (1) (b) GDPR (pre-contractual steps) and, where Cal.com collects consent in its booking dialog, Art. 6 (1) (a) GDPR.

The provider is Cal.com, Inc. Cal.com may set technically necessary cookies and process data on servers outside the EU. Further information: cal.com/privacy.

5. Legal bases at a glance

Depending on the process we rely on Art. 6 (1) (a) GDPR (consent, e.g. the contact-form checkbox), Art. 6 (1) (b) GDPR (steps prior to entering a contract) and Art. 6 (1) (f) GDPR (legitimate interest in operating the site, security and preventing abuse, including basic rate limiting of the contact form).

6. Retention

We keep contact-form enquiries until the matter is closed and then delete them, unless statutory retention duties apply (in particular commercial and tax retention of six or ten years if a contract is formed). Appointment data at Cal.com follows Cal.com’s settings and deletion periods. Server logs: see section 2.

7. Cookies, tracking and analytics

We measure visits in aggregate and without cookies on our own server: page, language, country (derived from the request; we do not store the IP address), device type, browser and operating system. We create no profiles, use no persistent fingerprints, and no banner is required. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in anonymous measurement of website use). If Plausible (Plausible Insights OÜ, Estonia) is also active, Plausible likewise sets no cookies and stores no personal profiles. Google Analytics 4 (Google Ireland Ltd. / Google LLC, USA) is loaded only if you consent via the banner (Art. 6 (1) (a) GDPR). Without that consent, no Google tags are loaded. You may withdraw consent at any time with effect for the future by clearing the stored choice in your browser. If Google Analytics is not set up, no banner appears. There is no Meta Pixel and no tag manager. Technically necessary cookies may be set by hosting or by Cal.com in the booking iframe.

8. Recipients and transfers outside the EU

Recipients of your data are ourselves and, where necessary, Hostinger (hosting), Resend or FormSubmit (email delivery), Cal.com (booking), Plausible (if enabled) and Google (only with consent to Google Analytics). We do not disclose data to further third parties unless legally obliged to do so. Hostinger, Resend, Cal.com and Google may process data outside the EU, including in the USA. Where applicable, this is based on appropriate safeguards under Art. 46 GDPR.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6 (1) (f) GDPR (Art. 21). You may withdraw consent at any time with effect for the future. Contact hallo@nordcode.solutions. An informal message is sufficient to exercise your rights.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority at your place of residence or at our seat is usually competent: The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, https://datenschutz-hamburg.de.

11. Security and automated decisions

This website is served over HTTPS. We take appropriate technical and organisational measures to protect your data. There is no automated decision-making including profiling within the meaning of Art. 22 GDPR.