Privacy Policy
Last updated: 30 September 2026
1. Privacy at a Glance
General Information
Who is responsible for data collection on this website?
NXULON
Eric Zabel
Am Kiewitt 12
16348 Wandlitz
Germany
Contact:contact@nxulon.com
2. General Information and Mandatory Disclosures
Data Protection
The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
3. Data Collection on Our Website
Cookies and local storage
This website does not set any cookies. Neither session cookies nor persistent cookies are stored on your device. There is no cookie banner because none is required.
The language selection is part of the page address and is not stored.
Hosting
This website is hosted on Azure Static Web Apps, a service of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. The endpoint that receives contact form submissions also runs as an Azure Function at Microsoft. Microsoft processes the data generated when you access the site (see Server Log Files) on our behalf under a data processing agreement pursuant to Art. 28 GDPR (Microsoft Products and Services Data Protection Addendum). The site may be delivered through a globally distributed content delivery network; for any transfer to third countries, Microsoft relies on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing our website securely, quickly and reliably).
Server Log Files
Our hosting provider Microsoft automatically collects and stores information in so-called server log files that your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address. This data is not merged with other data sources. The data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation, security and optimisation of its website – for this purpose, server log files must be collected.
Contact Form
If you send us enquiries via the contact form, the details you enter (name, email address, topic, message) are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass this data on without your consent. The submission is handled by an endpoint operated on Microsoft Azure, which keeps your IP address in memory for at most ten minutes to limit automated bulk submissions; the IP address is not stored permanently there. The message is delivered via the Mailgun service (see below) as an email to our mailbox at Microsoft 365 (Exchange Online, Microsoft Ireland Operations Ltd.) and stored there. This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR). The data you enter in the contact form remains with us until you request its deletion or the purpose for storing the data no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
4. Rights of the Data Subject
You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Competent supervisory authority: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
5. Email Delivery via Mailgun
To send the emails generated by the contact form, we use the Mailgun service of Mailgun Technologies, Inc., 112 E Pecan St #1135, San Antonio, TX 78205, USA (Sinch group). Our Mailgun account runs in the EU region; processing takes place on servers in the European Union. As the contracting party is based in the USA, any access from a third country is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR) in Mailgun's data processing agreement. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the reliable delivery of contact enquiries).
6. Web Analytics with Cloudflare Web Analytics
To understand how our website is used, we use Cloudflare Web Analytics, a privacy-friendly analytics service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The service works without cookies and without client-side storage, does not create user profiles, does not track you across websites (no fingerprinting) and does not use your IP address to re-identify you. Only aggregated, anonymous metrics such as page views, referrers and load times are collected. When the script loads, your IP address is technically transmitted to Cloudflare and processing may also take place in the USA; Cloudflare is certified under the EU-US Data Privacy Framework. No consent is required, as no information is stored on or read from your device. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a privacy-friendly analysis and the reliable operation of our website).
7. Spam protection with Cloudflare Turnstile
We use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, to protect our contact form against automated submissions and abuse. Turnstile analyses technically necessary browser and device signals, including the IP address, browser and operating-system information, and interactions with the website, to distinguish human access from automated requests. The contents of your form fields are not transmitted to Cloudflare. The check is performed only in connection with use of the contact form. Processing is necessary to provide the form securely and is based on Art. 6 (1) (f) GDPR (legitimate interest in protection against spam and abuse). Where information is stored on or read from your device, this is done under Section 25 (2) no. 2 TDDDG because the check is strictly necessary to transmit the contact request you expressly requested. Transfer to the United States cannot be ruled out; Cloudflare is certified under the EU-US Data Privacy Framework.
8. SSL / TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
9. Changes to This Privacy Policy
We reserve the right to adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.