Privacy

Information about the processing of personal data when visiting the website and contacting IT-Nerds GmbH.

Status date: 27 August 2026

This privacy notice explains which personal data IT-NERDS processes when you visit the website or contact us, the purposes and legal bases of the processing, and the rights available to data subjects.

Controller and contact details

IT-NERDS GmbH is the controller responsible for the processing described below. Privacy questions can be sent to us using the email address provided.

• Represented by the management
• Email: info@it-nerds.eu
• Telephone: +49 30 319 55 979

Website access and Cloudflare Pages

This static website is delivered through Cloudflare Pages. Cloudflare processes technically necessary connection and delivery data, in particular the IP address, time and requested resource, and transmitted browser, system and referrer information. The data subjects are visitors to the website; the data arise when a page is accessed and are transmitted to Cloudflare for technical delivery. The purpose is the secure and stable provision of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable delivery protected against attacks. Cloudflare is involved in the processing as a service provider and receives the data necessary for delivery.

As part of its global operations, Cloudflare may also process data in third countries. For such transfers, the Cloudflare Customer Data Processing Addendum provides, among other safeguards, the EU Standard Contractual Clauses. The EU Standard Contractual Clauses form part of the Cloudflare Data Processing Addendum and are publicly available there. Retention is determined by what is necessary to provide the service and by applicable contractual and legal obligations.

Contact by email

When you contact us by email, we process in particular your contact details, the content of your message and the metadata needed for communication, such as sender and recipient addresses, time and subject. The purpose is to identify, handle and answer your enquiry. The legal basis is Article 6(1)(b) GDPR where the communication concerns a contract or pre-contractual steps. For other business enquiries, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is to handle and answer those enquiries.

We use Zoho Mail in the European service domain zoho.eu for email communication. Zoho is involved in the processing as a service provider, and a data processing agreement is in place. According to Zoho, data in this service domain is generally stored and processed within the EU. Limited access from India may occur in certain cases for support purposes. Zoho relies on EU Standard Contractual Clauses for such access and describes supplementary access-control and security measures in its privacy information.

Contact by telephone

We use O2, a service provided by Telefónica Germany GmbH & Co. OHG, for telephone services. In the local call list on one telephone, IT-NERDS processes in particular the telephone number, time and direction of the call to identify and handle incoming and outgoing business calls. Depending on the reason for the call, the legal basis is Article 6(1)(b) or (f) GDPR. Entries are deleted 90 days after the call date. Calls are not recorded.

Retention and deletion

We generally delete general and unsuccessful enquiries 12 months after the last substantive communication. For a specific unsuccessful project initiation, retention may exceptionally last up to 24 months if the continuing business need is documented.

During an ongoing enquiry or quotation phase, we process the data until it is concluded. We then classify it according to the criteria described here or delete it.

Emails that constitute commercial or business correspondence or other records subject to a statutory retention requirement are stored for the applicable statutory period; the legal basis in this respect is Article 6(1)(c) GDPR. We retain data relating to contracts or disputes only for as long as necessary to perform the contract, establish, exercise or defend legal claims, or comply with statutory obligations. Where retention serves to establish, exercise or defend legal claims, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is to safeguard and enforce our legal position. We then delete the data under our control.

Appearance and local search

The website stores the value light or dark under the local storage key it-nerds-theme only after an active choice. Selecting system removes the key and uses the system setting again. The storage is necessary to provide the expressly requested appearance on subsequent page visits; the basis is section 25(2) no. 2 TDDDG.

No theme value is stored without an active choice.

The local site search loads a static search index from this website. Search terms are processed in the browser and are not transmitted to third parties.

The website does not use analytics, tracking or advertising services and does not embed external content.

Rights of data subjects

Under the GDPR, data subjects may in particular request access, rectification, erasure, restriction of processing and data portability. Where processing is based on Article 6(1)(f) GDPR, there is a right to object under the statutory conditions. Requests to exercise these rights can be sent to info@it-nerds.eu.

You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for IT-NERDS GmbH is the Berlin Commissioner for Data Protection and Freedom of Information.

Voluntary contact

Contacting us is voluntary. Without the information required to process an enquiry, the enquiry may not be processed.