Privacy policy

1. Controller and contact

The controller within the meaning of the General Data Protection Regulation (GDPR), of other national data protection laws of the member states and of further data protection provisions is:

Neffe Consulting GmbH & Co. KG
Mommsenstraße 55
10629 Berlin
Deutschland

Telephone: +49 151 580 698 51
E-mail: info@neffe-consulting.de

Data protection officer

DSB | Bunzel Datenschutz – Julia Louisa Bunzel
Mommsenstraße 55
10629 Berlin

Telephone: +49 (0)30 88 77 36 18
E-mail: office@bunzel-datenschutz.de

2. Collection and storage of personal data, nature and purpose of its use

a) When visiting the website

When you call up our website, the browser used on your device automatically sends information to the server of our website. This information is stored temporarily in a so-called log file. The following information is recorded without any action on your part and stored until it is deleted automatically:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which the access was made (referrer URL)
• Browser used and, where applicable, the operating system of your computer
• Name of your access provider

We process the data named for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability, and further administrative purposes.

The legal basis for the processing is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. In no case do we use the data collected for the purpose of drawing conclusions about you as a person.

b) When registering a test environment

Through the form for creating a test environment you can have an environment of NCS-Facility set up for you. In doing so we process the data you provide: company name, the desired address (subdomain) and the e-mail address of the person who is to act as administrator. No password is collected and none reaches our interface; it is set by you later, when the access is set up.

With these details we create a tenant and a subscription for the trial and set up the associated user account. We also store the time of registration. The legal basis is Art. 6 (1) sentence 1 (b) GDPR (performance of pre-contractual measures or of the contract) and, in so far as protection against abusive registrations is concerned, Art. 6 (1) sentence 1 (f) GDPR.

We store the details for as long as the environment exists. If the trial does not lead to a contract, we delete the tenant and the details as soon as they are no longer needed for the approach and no statutory retention obligations stand in the way. You can request deletion at any time by e-mail.

c) When contacting us by e-mail

This website has no contact form that transmits your entries to a server. The contact page contains our e-mail address and our telephone number; the processing of your data therefore only takes place once you write or call.

We process the data you provide solely in order to deal with your enquiry. The legal basis is Art. 6 (1) sentence 1 (b) GDPR where your enquiry is aimed at concluding or performing a contract, and otherwise Art. 6 (1) sentence 1 (f) GDPR on the basis of our legitimate interest in answering enquiries. Your data is deleted as soon as your enquiry has been dealt with conclusively and no statutory retention obligations stand in the way.

3. Disclosure of data

Your personal data is not transferred to third parties for purposes other than those listed below. We only pass your personal data on to third parties if you have given your express consent (Art. 6 (1) sentence 1 (a) GDPR), if the disclosure is necessary to assert, exercise or defend legal claims (Art. 6 (1) sentence 1 (f) GDPR), if there is a statutory obligation to disclose (Art. 6 (1) sentence 1 (c) GDPR), or if this is necessary for the performance of contractual relationships with you (Art. 6 (1) sentence 1 (b) GDPR).

4. Hosting

This website and the environments of NCS-Facility are hosted with an external service provider in Germany. The data collected in the course of a website visit (see item 2 a) is processed on the servers of the host. The host processes this data exclusively on our behalf and according to our instructions; this is contractually secured through a data processing agreement under Art. 28 GDPR.

Hosting provider: IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany

5. Cookies, analysis and tracking tools

This website uses no cookies for analysis or advertising purposes. No web analysis services (such as Google Analytics or Matomo), no advertising or conversion tracking services and no social media plugins are used.

Two cookies are technically necessary. As soon as the form for creating a test environment is displayed, our server sets a security cookie that protects the submission of the form against forgery from other sites (cross-site request forgery). It contains no information about you as a person and is deleted when the browser is closed. If you choose a language with the switch in the footer, a second cookie stores that choice so that the next page is shown in the same language; it holds nothing but the language code and remains for one year. The legal basis in both cases is Art. 6 (1) sentence 1 (f) GDPR, section 25 (2) no. 2 TDDDG.

A consent banner is therefore not required. Should services that need consent be added in future, this privacy policy will be adapted beforehand.

6. Fonts

For a uniform presentation of fonts, this website embeds the font Inter from Google Fonts. When a page is called up, your browser loads the required fonts from a Google server. Your IP address is transmitted to Google in the process. The use serves the interest of a uniform and appealing presentation of our online offering; this constitutes a legitimate interest within the meaning of Art. 6 (1) sentence 1 (f) GDPR. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

7. Rights of the data subject

You have the right:

• under Art. 15 GDPR to request information about your personal data processed by us;
• under Art. 16 GDPR to request without delay the correction of incorrect data or the completion of your personal data stored with us;
• under Art. 17 GDPR to request the erasure of your personal data stored with us, unless the processing is necessary to comply with a legal obligation or to assert, exercise or defend legal claims;
• under Art. 18 GDPR to request the restriction of the processing of your personal data;
• under Art. 20 GDPR to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller;
• under Art. 7 (3) GDPR to withdraw consent once given at any time;
• under Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule you can contact the supervisory authority of your usual place of residence or of our company headquarters.

8. Right to object

Where your personal data is processed on the basis of legitimate interests under Art. 6 (1) sentence 1 (f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided there are grounds arising from your particular situation.

If you wish to exercise your right to object, an e-mail to is sufficient. info@neffe-consulting.de

9. Data security

Within the website visit we use the widespread SSL/TLS procedure together with the highest level of encryption supported by your browser. Whether an individual page of our website is transmitted in encrypted form can be seen from the closed padlock symbol in the address bar of your browser.

We otherwise use suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Currency and amendment of this privacy policy

This privacy policy is dated November 2026.

The further development of our website and offerings, or changed statutory or regulatory requirements, may make it necessary to amend this privacy policy. The current privacy policy can be retrieved on this page at any time.