Privacy Policy

Note: I am not a lawyer. This privacy policy is a practical privacy notice for mrnicen.com. It describes, in particular, the contact and booking functions currently in use as well as the cookie-free B2B company identification. It does not replace final legal review by a qualified professional. 1. Controller The controller responsible for data processing on this website is: Niessen GmbH, Industriestr. 2, 65779 Kelkheim (Taunus), Germany Email: niko@mrnicen.com 2. Hosting / server logs This website is operated on its own server (Ubuntu + nginx) with a hosting provider. When you access the website, the server processes technically necessary data in log files, in particular IP address, date and time of access, requested URL, referrer URL, user agent and technical status information. This data is processed to provide the website securely, stably and reliably, to analyze errors and to defend against attacks. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in security, stability and error analysis). 3. Contact form / email contact If you contact me via a contact form or by email, I process the data you provide, e.g. name, email address, phone number, company, event details and message content, in order to respond to your inquiry. Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures / contract) or Art. 6 para. 1 lit. f GDPR (legitimate interest in communication). 4. Appointment booking / booking function If you request or book an appointment via the website, I process the information required for this purpose, in particular name, email address, company, phone number, selected appointment, planned trade show / event and your message. This data is used to process the request, organize the appointment and contact you. Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR. 5. Consulting inquiry For inquiries submitted via the consulting form, I process the data provided, e.g. name, email address, topic and message, in order to review and answer the inquiry. Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR. 6. Feedback form / reviews If you submit feedback, the data provided, e.g. name, star rating, headline, text, date and optional uploaded images, is stored in order to evaluate feedback internally and, where applicable, use it as a reference. Legal basis: Art. 6 para. 1 lit. a GDPR (consent), insofar as feedback is published; otherwise Art. 6 para. 1 lit. f GDPR (legitimate interest in quality improvement). You may withdraw consent to publication at any time (contact: niko@mrnicen.com). 7. No consent banner, no cookies of our own This website does not set any cookies of its own and stores nothing in Local Storage or Session Storage. There is therefore no consent banner either: there is nothing for which consent under Section 25 TDDDG would have to be obtained. Earlier versions of this policy described a consent banner as well as analytics and B2B tracking services that relied on consent. Those services are no longer in use (see sections 8 to 10); the banner has been removed. The remaining B2B company identification (section 10a) works without cookies and without recognising individual devices. It relies on a legitimate interest under Art. 6 para. 1 lit. f GDPR, not on consent. You may object to it at any time — section 10a explains how. The only service that transmits data to a third party when you visit this website is Google reCAPTCHA on the form pages (section 11). 8. PostHog Analytics — no longer in use This website used PostHog Analytics. The service has been switched off and is no longer embedded on any page. No data is collected through it. 9. PostHog Session Replay — no longer in use Also switched off. No user sessions are recorded or reconstructed. 10. Leadinfo — no longer in use This website used Leadinfo for B2B company identification. The contract has ended and the service has been removed from all pages. No data is transmitted to Leadinfo any more. The numbering of sections 8 to 10 is retained so that references from earlier versions of this policy remain traceable. 10a. Visitor Radar – self-hosted, cookie-free company identification This website runs a self-hosted reach and prospect analysis for the B2B area. It determines only whether a visit originates from a corporate network. When a page is opened, the IP address of your connection is processed transiently in order to determine the organisation or network operator behind it. This is done exclusively on my own server, against a database stored there which holds publicly available assignments of IP ranges to network operators. No third party is queried and no data is transmitted to any third party — the IP address does not leave the server. The IP address itself is not stored. Stored are exclusively: - the name of the organisation or network operator and its network identifier (ASN) - the country at coarse resolution - the page path visited, without parameters and without search terms - the hostname of a referring page, without its path - date, time and a visit counter In order to recognise repeated views within the same day, a non-reversible check value is derived from the IP address, the date and a secret random value. This value changes daily and is deleted automatically after three days at the latest. It does not allow the IP address to be reconstructed. Visits from private and mobile connections as well as from data centres, VPN services and automated requests are detected and discarded before anything is stored. No cookies are set, no local storage is used, no cross-device recognition takes place, and no individual persons are identified. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in approaching commercial prospects). You may object to this processing at any time with effect for the future, e.g. by email to niko@mrnicen.com. 11. Google reCAPTCHA Google reCAPTCHA may be used on forms to prevent misuse, spam and automated requests. Technical data may be transmitted to Google, e.g. IP address, browser information, interactions with the page and other data required by Google. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in protecting the website and forms from misuse). 12. External links This website may contain links to external websites. When you click such links, you leave this website. The respective provider is responsible for data processing on the destination website. 13. Storage period I store data only for as long as necessary for the respective purposes or as required by statutory retention obligations. Analytics and tracking data are processed according to the settings of the respective providers and only within the scope of your consent. 14. Your rights Subject to the applicable legal requirements, you have the following rights: - access (Art. 15 GDPR) - rectification (Art. 16 GDPR) - erasure (Art. 17 GDPR) - restriction of processing (Art. 18 GDPR) - data portability (Art. 20 GDPR) - objection to processing based on legitimate interests (Art. 21 GDPR) - withdrawal of consent (Art. 7 para. 3 GDPR) You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). 15. Security I take appropriate technical and organizational measures to protect data, e.g. transport encryption via HTTPS, access protection for admin areas and restricted access. 16. Changes to this privacy policy This privacy policy may be updated if functions, providers or legal requirements change. LEGAL REVIEW NOTE: This English wording is a faithful translation of the German source text. Final legal verification for international publication is recommended.