Privacy Policy / Datenschutzerklärung

1. Controller / Verantwortlicher

The controller within the meaning of Art. 4 (7) GDPR is:

Nezam.ai GmbH
Street, postcode, city, Germany
Email: privacy@nezam.ai
Telephone: +49 XX XXXXXXX

2. Data protection officer / Datenschutzbeauftragter

Name / provider
Email: dpo@nezam.ai

A DPO must be appointed under § 38 BDSG if you permanently employ 20 or more people in automated processing of personal data, or if you carry out processing subject to a DPIA. If you are below that threshold, delete this section rather than leaving it blank.

3. Server log files

Our hosting provider automatically collects and stores information that your browser transmits, in so-called server log files:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing device
• Time of the server request
• IP address (shortened / anonymised where possible)

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in the technically error-free presentation and security of our website.
Retention: e.g. 7 days, unless required longer to investigate a security incident.

Hosting provider: Provider name and address. An order processing agreement (Auftragsverarbeitungsvertrag, Art. 28 GDPR) is in place.

4. Contact form

When you submit our contact form we process the data you enter: name, company, work email, telephone number and country code, company size, and your message.

Purpose: to respond to your enquiry and, where applicable, to take steps prior to entering into a contract.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in responding to business enquiries).
Retention: e.g. 6 months after the enquiry is closed, subject to statutory retention obligations under HGB/AO.

Form submissions are transmitted via the third-party service FormSubmit (operator name and address), which forwards the message to our mailbox. Confirm whether an Art. 28 GDPR order processing agreement is in place and whether data is transferred outside the EU/EEA.

Action required: the form currently delivers to a personal Gmail address. For a company website this should be a company mailbox, and the transfer to Google (US) assessed under Chapter V GDPR.

5. Local storage on your device

We store two small preference values in your browser's local storage. These are not cookies and are not transmitted to our server:

• nezam-theme — your light/dark appearance choice
• nezam-lang — your language choice (English, Arabic, German)

Legal basis: § 25 (2) no. 2 TDDDG — strictly necessary to provide a service you expressly requested (remembering a setting you selected). No consent banner is required for these two values alone. See our Cookie Policy.

6. Google Fonts

This website currently loads typefaces from Google Fonts servers (fonts.googleapis.com, fonts.gstatic.com) operated by Google Ireland Limited. When a page loads, your IP address is transmitted to Google and may be transferred to the USA.

Legal basis: Art. 6 (1) (a) GDPR (consent) where required.

Action required: German courts have awarded damages for transmitting a visitor's IP address to Google via remotely-loaded fonts without consent (LG München I, 20.01.2022, Az. 3 O 17493/20). The standard remedy is to self-host the font files, which removes the transfer entirely and makes this section unnecessary.

7. Country detection (local)

To preselect your language and the dialling code in our contact form, the site reads your browser's time zone and locale (Intl.DateTimeFormat().resolvedOptions().timeZone). This happens entirely inside your browser.

No IP geolocation service is contacted and no data is transmitted for this purpose. Because nothing is stored on your device and nothing is sent to us or a third party, § 25 TDDDG and Art. 6 GDPR are not engaged by this feature.

8. Recipients and third-country transfers

We only pass personal data to third parties where we are legally permitted to do so, where processors act on our documented instructions under Art. 28 GDPR, or where you have consented.

Where data is transferred outside the EU/EEA, we rely on EU Standard Contractual Clauses / adequacy decision — specify per recipient pursuant to Chapter V GDPR.

9. Your rights

You have the right to:

• access your personal data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent at any time, with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): where processing is based on Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

To exercise any of these rights, contact privacy@nezam.ai.

10. Right to lodge a complaint

You may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. The authority responsible for us is:

Name of the competent Landesdatenschutzbehörde
Address

11. Data security

This site uses TLS encryption in transit. We maintain appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect personal data against accidental or unlawful destruction, loss, alteration, and unauthorised disclosure or access.

12. Changes to this policy

We may update this privacy policy to reflect changes to our services or to legal requirements. The version published on this page applies.