Privacy policy

This English version is provided for information only. The legally binding version is the German original.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

nullraum
Max Hoh UG (haftungsbeschränkt)
Managing Director: Maximilian Hohenstatt
Mündelheimer Weg 46
40472 Düsseldorf
Germany

Telephone: +49 211 43834595
Email: info@nullraum.eu

Collection and storage of personal data

When you visit our website, the browser used on your device automatically sends information to our website’s server. This information is stored temporarily in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file retrieved
• Website from which access is made (referrer URL)
• Browser used and, where applicable, your computer’s operating system
• Name of your access provider

We process the data listed above for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring convenient use of our website
• Evaluating system security and stability, and for other administrative purposes

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above.

Our website is hosted by the following provider, which processes the data listed above on our behalf:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur

Project enquiries via the enquiry form

If you submit a project enquiry via our website, we process the data you provide in the enquiry form in order to handle your enquiry and to get in touch with you. This includes:

• First name and surname, email address and telephone number (mandatory)
• Preferred weekdays and times of day for us to contact you, and any notes on this (optional)
• Location or region of the property, preferred time frame and the protection solutions you are interested in (optional)

The details are sent to us by email and are not stored on the web server. After submitting the form, you receive an automatic confirmation at the email address you provided; its sole purpose is to confirm receipt of your enquiry. Your email address is not used for advertising or newsletters.

Processing is carried out in order to take steps prior to entering into a contract on the basis of Art. 6(1)(b) GDPR, insofar as your enquiry relates to the possible engagement of our services, and otherwise on the basis of our legitimate interest in handling enquiries pursuant to Art. 6(1)(f) GDPR.

To protect against misuse, we limit the number of enquiries per sender and the number of confirmations per email address. For this purpose, we briefly store an encrypted, non-reversible value (hash) of the IP address or email address together with the time of the enquiry; the IP address and email address themselves are not stored. These entries are deleted after no more than 24 hours. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our form against misuse.

Please do not submit any sensitive information about existing protective measures or security-related vulnerabilities of your property via the enquiry form. Where necessary, we will discuss such information with you in person.

The data transmitted remains with us until the purpose for storing it no longer applies (e.g. once your enquiry has been dealt with) and no statutory retention obligations prevent deletion. If a contractual relationship is established, the data may be stored for longer in accordance with commercial and tax retention obligations.

Contact by email

If you send us enquiries by email or telephone, your details, including the contact details you provide, will be stored by us for the purpose of handling the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The legal basis for processing this data is Art. 6(1)(f) GDPR.

The data transmitted remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing it no longer applies (e.g. once your enquiry has been dealt with).

Cookies

This website does not use tracking cookies or third-party cookies. Only technically necessary session cookies may be set in the course of normal use of the website. These cookies do not contain any personal data and are deleted automatically at the end of the browser session.

We store the choice you make in the cookie settings notice in your browser’s local storage (localStorage, entry nullraum_cookie_consent) so that the notice does not reappear each time you load a page. The entry does not contain any personal data and remains on your device. Storing it is strictly necessary for this function, which you have requested (§ 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). You can delete the entry at any time via your browser settings.

If you choose a language using the language switcher (“DE / EN”), we store this choice in a cookie named nullraum_lang (content: de or en). On your next visit, we then show you the website directly in the language you chose. The cookie does not contain any personal data, is only sent to our website and is deleted automatically after 12 months; if you do not choose a language, it is not set. Storing it is strictly necessary for this function, which you have requested (§ 25(2) no. 2 TDDDG). You can delete the cookie at any time via your browser settings.

Audience measurement with Umami

For the statistical analysis of visits to our website, we use Umami – self-hosted, privacy-friendly open-source software for audience measurement. The Umami instance is operated by our web service provider devtank42 at analytics.devtank42.de: your browser loads the analytics script from there, and the usage data listed below is transmitted there. No data is passed on to any other third parties.

Umami works entirely without cookies and does not store any information on your device. No personal profiles are created and visitors are not recognised across websites. Only anonymised usage data is collected, such as the pages visited, the referrer URL, the browser and device type, and an approximate location based on the truncated IP address, which is not stored.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the statistical analysis and needs-based optimisation of our website. As no cookies are set and no personal data is stored permanently, consent is not required for this. You can object to anonymous audience measurement at any time by preventing the analytics script from loading in your browser (e.g. using a script or tracking blocker).

Integration of external services

This website uses the Manrope typeface, which is hosted locally on our server. No connection is made to external font servers. All other content, such as images and icons, is likewise delivered exclusively from our own server – the only exception being the Umami analytics script (see “Audience measurement with Umami”); we do not embed maps, videos or any other third-party content.

Your rights as a data subject

With regard to your personal data, you have the following rights against us:

• Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we process.
• Right to rectification (Art. 16 GDPR): You have the right to demand the rectification without undue delay of inaccurate data concerning you.
• Right to erasure (Art. 17 GDPR): You have the right to demand the erasure of your data stored by us, unless statutory retention obligations prevent this.
• Right to restriction of processing (Art. 18 GDPR): You have the right to demand that the processing of your data be restricted.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object to the processing of your data at any time.
• Withdrawal of consent (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact: info@nullraum.eu

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing at any time on grounds relating to your particular situation.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent supervisory authority for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
(State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4, 40213 Düsseldorf
Telephone: +49 (0) 211 38424-0
Website: www.ldi.nrw.de

Data security

During your visit to our website, we use the widely adopted SSL/TLS protocol in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption.

Updates to this privacy policy

This privacy policy is currently valid and is dated September 2026. As our website and the services offered through it evolve, or as a result of changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed out on the website at any time.