Privacy notice

1 · Controller

The controller responsible for data processing on this website within the meaning of Art. 4 (7) GDPR is:

Represented by managing director Tim Heidfeld.
Email for data-protection enquiries: datenschutz@northbridgesystems.de

2 · Data protection officer

North Bridge Systems is not required to appoint a data protection officer under § 38 BDSG, as the preconditions (in particular the threshold of 20 persons permanently engaged in the automated processing of personal data) are not met. Please direct data-protection enquiries to the email address given above.

3 · Provision of the website and creation of log files

On each visit to this website, the hosting provider's system automatically records data and information from the computer system of the requesting device. The following data is processed in this context:

• IP address of the requesting device
• Date and time of access
• Requested URL and HTTP status code
• Volume of data transferred
• Referrer URL (previously visited page)
• Browser used, operating system and language setting (user agent)

Purpose: ensuring the technical provision of the website, system security and stability, error analysis.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website).
Storage period: log files are automatically deleted at the latest after 30 days, unless security-relevant incidents in individual cases require longer retention.

4 · Hosting

This website is hosted by united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany. The servers are located within the European Union. A data-processing agreement under Art. 28 GDPR is in place with the hosting provider, ensuring that processing of website visitors' data takes place only on instruction and in compliance with the GDPR.

5 · Fonts (locally hosted)

This website uses the fonts Inter Tight and JetBrains Mono. Both fonts are loaded exclusively from our own server. No connection is made to external font services (in particular, no connection to Google Fonts or comparable third-party providers). Loading the fonts therefore transfers no personal data to third parties.

6 · Contact by email

When you contact us by email (in particular via the addresses listed on this website, kontakt@, impressum@ and datenschutz@northbridgesystems.de), the personal data transmitted are processed, namely:

• Name and email address of the sender
• Content of the message and any further data voluntarily provided (e.g. phone number, company, role)
• Date and time of transmission

Purpose: Handling the enquiry and, where applicable, initiating or performing a business relationship.
Legal basis: Art. 6 (1) (b) GDPR (taking pre-contractual steps or performance of a contract) together with Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries).
Retention period: For enquiries that do not result in a business relationship, the data are deleted no later than upon conclusion of the correspondence. Where a mandate is initiated or concluded, statutory retention periods under commercial and tax law apply (6 years under § 257 HGB, 10 years under § 147 AO).

7 · Email processing via Microsoft 365

For processing incoming and outgoing emails, North Bridge Systems uses the Microsoft 365 service (Exchange Online). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data-processing agreement (Microsoft Products and Services Data Protection Addendum, DPA) under Art. 28 GDPR is in place with Microsoft.

Third-country transfer: A transfer of personal data to the USA (Microsoft Corporation) cannot be fully excluded as part of the provision of the service. Microsoft Corporation is certified under the EU-US Data Privacy Framework (DPF); an adequacy decision of the European Commission of 10 July 2023 is in place. In addition, EU standard contractual clauses (SCC) under Implementing Decision (EU) 2021/914 form part of the DPA.

You can avoid Microsoft at any time without any risk of data transfer by contacting us via another channel (phone, postal mail).

8 · Cookies and tracking

This website sets no cookies and uses no tracking, analytics or audience measurement tools (in particular no Google Analytics, no Matomo, no Plausible, no Meta Pixel, no Hotjar or comparable services). No profiling takes place.

9 · Recipients of personal data

As a rule, personal data is not passed on to third parties. Recipients in the context of processing are:

• united-domains AG (website hosting, based in Germany)
• Microsoft Ireland Operations Limited (email processing, based in Ireland; possible data transfer to Microsoft Corporation, USA, see section 7)
• Advisors bound by professional confidentiality (in particular lawyers, tax advisors, auditors) within the scope required by law or agreed by contract
• Authorities within the scope of statutory disclosure and cooperation obligations

10 · Rights of data subjects

To the extent that personal data of yours is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis us:

• Right of access (Art. 15 GDPR) to the data stored about you
• Right to rectification (Art. 16 GDPR) of inaccurate data, or completion of incomplete data
• Right to erasure (Art. 17 GDPR), to the extent no statutory retention duties oppose
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR), in particular to processing based on legitimate interests
• Right to withdraw consents granted (Art. 7 (3) GDPR); currently not relevant on this website as no consents are obtained

Please direct enquiries about these rights informally to: datenschutz@northbridgesystems.de. We will handle your enquiry within the statutory period of one month (Art. 12 (3) GDPR).

11 · Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for North Bridge Systems is:

12 · Obligation to provide the data

Provision of your personal data is voluntary. There is no obligation to provide it. Without certain data (in particular name, email, request), however, we cannot respond to your enquiry.

13 · Automated decision-making and profiling

No automated decision-making in individual cases, including profiling within the meaning of Art. 22 GDPR, takes place.

14 · Changes to this privacy notice

We reserve the right to amend this privacy notice so that it always meets the current legal requirements or to reflect changes to our services, for instance when new services are introduced. The version then in force will apply on your next visit.