Privacy policy
This is a courtesy translation. The German version is legally binding.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Mirko Nau
Im Kornfeld 11
65835 Liederbach am Taunus
Germany
Email: info@nau-it.com
2. Overview
This website is a static information page. There are no user accounts, no contact forms, no analytics or tracking tools, no advertising and no embedded third-party content. Fonts and scripts are loaded exclusively from this website’s own server; no cookies are set.
3. Hosting with GitLab
This website is hosted using the GitLab Pages service. The provider is GitLab Inc., 268 Bush Street #350, San Francisco, CA 94104, USA. GitLab’s contact point in the EU is GitLab B.V., Eduard van Beinumstraat 28, 1077 CZ Amsterdam, Netherlands.
When you visit the website, GitLab processes technically necessary connection data transmitted by your browser:
- IP address of the requesting device
- date and time of access
- requested page or file and amount of data transferred
- HTTP status code
- referrer URL (previously visited page)
- browser and operating system used
This data is processed solely to deliver the website and to ensure its security and stability. I have no access to this data myself and do not analyse any access data. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in providing the website in a technically flawless and secure manner.
A data processing agreement pursuant to Art. 28 GDPR is in place with GitLab (GitLab Data Processing Addendum). GitLab’s servers are located in the USA, so the data is processed in a third country. GitLab Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); in addition, GitLab uses the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). More information: about.gitlab.com/privacy.
4. Storing the display preference (light/dark)
If you use the light/dark mode switch, your choice is stored in your browser’s local storage so that it is retained on your next visit. This information remains exclusively on your device and is not transmitted to me or any third party. Storing it is strictly necessary for the function you explicitly requested (§ 25(2) No. 2 TDDDG). You can delete the entry at any time via your browser settings.
5. Contact by email
If you send me an email, I process your email address, your name (if provided) and the content of your message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the conclusion or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data is deleted as soon as it is no longer required and no statutory retention obligations apply.
To receive and store emails sent to addresses of the domain nau-it.com, I use the iCloud Mail service. The provider is Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Your email is stored on Apple’s servers; processing by Apple Inc. in the USA cannot be ruled out. Apple bases transfers to third countries on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). More information: apple.com/legal/privacy.
6. Links to other websites
This website contains links to external services (LinkedIn, XING, Credly). Only when you click such a link are you redirected to the provider’s website, whose privacy policy then applies. No data is transmitted to these providers before you click.
7. Your rights
You have the following rights regarding your personal data:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)
An informal message to the email address above is sufficient to exercise your rights.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de.
9. Updates
Last updated: October 2026. I will update this privacy policy whenever the website or the legal requirements change.