This Privacy Policy explains how we process personal data when you use the website nova-zero.de and informs you about your rights under the General Data Protection Regulation (GDPR).

The controller responsible for data processing on this website is:

C & W (U.K.) LLP German Branch
Bleidenstraße 6
60311 Frankfurt am Main

Phone: +49 69 50 60 73-0
Email: info.de@eur.cushwake.com

Personal data is any information relating to an identified or identifiable natural person.

We process personal data exclusively in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Depending on the type of processing, processing is carried out in particular on the basis of

• your consent pursuant to Art. 6(1)(a) GDPR,
• the performance of a contract or steps taken prior to entering into a contract pursuant to Art. 6(1)(b) GDPR,
• compliance with legal obligations pursuant to Art. 6(1)(c) GDPR, or
• our legitimate interests pursuant to Art. 6(1)(f) GDPR.

Personal data is generally stored only for as long as necessary for the respective purpose of processing or for as long as statutory retention obligations apply.

When you access our website, the web server automatically processes technical information transmitted by your browser.

This may include in particular:

• IP address
• date and time of access
• page or file accessed
• referrer URL
• browser type and browser version
• operating system used
• HTTP status code

The processing of this data is necessary to technically provide the website and to ensure its stability and security.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.

Server log files are generally stored only for the period required to ensure technical operation and security.

The website is hosted by

TeHa-Systems GmbH & Co. KG
Ginsterweg 18
22889 Tangstedt
Germany

Where the hosting provider processes personal data on our behalf, this is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Our website is based on the WordPress content management system.

WordPress is operated on our web server and is used for the technical provision and management of the website. The use of the content management system does not generally involve any independent analysis of user behaviour.

We do not use services provided by WordPress.com or comparable WordPress services for analytics or marketing purposes.

Where WordPress uses technically necessary cookies or comparable storage technologies, these are used exclusively for the technical operation and administration of the website.

Our website only uses cookies and comparable technologies that are necessary for the technical operation of the website or for which you have previously given your consent.

Technically necessary cookies may be used on the basis of Section 25(2) TDDDG.

Where non-essential technologies are used, they are used exclusively after you have given your prior consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

We use mapping services provided by

Mapbox, Inc.
1233 20th Street NW
Washington, DC 20036
USA

on our website.

Mapbox enables us to display interactive maps and geographical information on our website.

If you consent to the use of Mapbox and access a page containing a corresponding map, your browser establishes a connection to Mapbox servers.

In particular, the following information may be transmitted to Mapbox:

• your IP address
• information about your browser and device
• date and time of access
• technical information relating to the map request
• session and usage information
• information about your interaction with the map

Mapbox uses such data, among other purposes, to provide its mapping services, calculate usage for billing purposes and ensure the security and functionality of its services.

According to Mapbox, IP addresses are generally stored in CloudFront log files for up to 30 days unless longer storage is required for security, abuse prevention or legal reasons.

Mapbox GL JS may also store technically necessary data in the browser cache or browser storage in order to provide map data efficiently.

Your location is not determined using the location functionality of your device on our website unless you explicitly activate such a function.

Legal basis

Mapbox is only loaded on our website after you have given your consent.

The legal bases are Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.

You may withdraw your consent at any time with effect for the future via the cookie or privacy settings on our website.

Data transfers to the USA

When using Mapbox, personal data may be processed in the United States.

Mapbox is certified under the EU-U.S. Data Privacy Framework. In addition, according to Mapbox, where necessary it uses Standard Contractual Clauses approved by the European Commission pursuant to Art. 46 GDPR to safeguard international data transfers.

Further information on data protection at Mapbox can be found at:

https://www.mapbox.com/legal/privacy

We use Adobe Fonts, formerly Typekit, on our website to ensure the consistent display of fonts.

The service provider for users within the European Union is:

Adobe Systems Software Ireland Limited
Ireland

When you access our website, the required fonts are loaded via Adobe’s Content Delivery Network. For this purpose, your browser establishes a connection to Adobe servers.

In particular, the following technical information may be processed:

• IP address
• fonts used
• web project ID
• type and version of the web project
• type of integration
• hostname of the website accessed
• technical information relating to the provision of the fonts

The transmission of the IP address is technically necessary in order to deliver the fonts to your browser. According to Adobe, the IP address transmitted in connection with the Adobe Fonts service for websites is not stored.

Adobe uses the information collected in particular to provide the font service, diagnose technical issues, calculate fees and fulfil contractual obligations towards the respective font providers.

According to Adobe, Adobe Fonts does not use cookies on our website when providing web fonts.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically reliable, consistent and visually coherent presentation of our website.

When using Adobe services, data may be processed outside the European Union, in particular in the USA. According to Adobe, appropriate safeguards such as adequacy decisions and Standard Contractual Clauses pursuant to Art. 46 GDPR are used for such transfers.

Further information on the processing of personal data can be found in Adobe’s privacy information.

If you contact us by email or by other means, we process the data you provide in order to handle your enquiry.

This may include, in particular, your name, email address and the content of your message.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to enquiries.

Where your enquiry relates to the conclusion or performance of a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR.

The data will be deleted once it is no longer required for processing your enquiry and provided that no statutory retention obligations prevent its deletion.

In connection with the operation of our website, personal data may be transferred to service providers that support us with the technical provision and maintenance of the website.

These include in particular:

• hosting and IT service providers
• technical service providers responsible for maintaining the website
• Mapbox in connection with the display of interactive maps
• Adobe in connection with the provision of the web fonts used

Where service providers process personal data exclusively on our behalf, they are engaged on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Subject to the applicable legal requirements, you have in particular the following rights:

• the right of access to personal data stored about you pursuant to Art. 15 GDPR
• the right to rectification of inaccurate data pursuant to Art. 16 GDPR
• the right to erasure of your personal data pursuant to Art. 17 GDPR
• the right to restriction of processing pursuant to Art. 18 GDPR
• the right to data portability pursuant to Art. 20 GDPR
• the right to object to processing pursuant to Art. 21 GDPR
• the right to withdraw consent pursuant to Art. 7(3) GDPR

Withdrawal of consent only applies with effect for the future. The lawfulness of processing carried out before consent was withdrawn remains unaffected.

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing at any time on grounds relating to your particular situation.

You also have the right pursuant to Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

We reserve the right to amend this Privacy Policy if the technical functionality of our website or the applicable legal requirements change.

Last updated: September 2026