Privacy policy

This website gets by with as little data as possible: it sets no cookies, uses no JavaScript for tracking and loads no content from other providers (no external fonts, videos, maps or social media plugins). For anonymous visitor statistics we only evaluate the server log files (see section 2).

1. Controller

NAVAQOR GmbH, represented by its Managing Director Dr. Klaus Schmitz
Schmidbauerstraße 4, 82166 Gräfelfing, Germany
E-mail: contact@navaqor.com

We have not appointed a data protection officer, as the legal requirements for doing so are not met.

2. Hosting and server log files

The website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. We have a data processing agreement with IONOS pursuant to Art. 28 GDPR.

When you visit the website, the server automatically processes data that your browser transmits: IP address, date and time of access, page requested, amount of data transferred, referrer URL, and browser and operating system. This data is technically necessary to deliver the website and to ensure its security and stability. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The IP address is stored in the log files in anonymized form. The log files are deleted automatically after eight weeks at the latest, unless they are needed longer to investigate a specific security incident.

Visitor statistics. Based on these log files, we use IONOS SiteAnalytics to compile anonymous statistics: which pages and files are requested, which links visitors come from, and browser, operating system, device type and approximate region. For this purpose, the IP address is anonymized immediately and used only to determine the region; no personal reference exists. No cookies are set. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in understanding and improving what our website offers. The data is not combined with other data or analysed for advertising purposes.

3. Encryption

The website is delivered exclusively over an encrypted connection (HTTPS/TLS).

4. Contact by e-mail or phone

If you contact us by e-mail or phone, we process your details (such as name, contact details and the content of your enquiry) in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry relates to a contract or steps prior to entering into one, and otherwise Art. 6 (1) (f) GDPR (our interest in answering enquiries). We delete the data once it is no longer needed for this purpose, unless statutory retention obligations (in particular under commercial and tax law) prevent this.

For e-mail we use Microsoft 365 from Microsoft Ireland Operations Ltd., Dublin, Ireland, as a processor. A transfer to the USA cannot be ruled out; it is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, under which Microsoft is certified, and on standard contractual clauses.

5. Contact form

If you write to us via the contact form, we process the details from the form (name, e-mail address, optionally company and phone number, your message) in order to answer your enquiry. The web server at IONOS forwards the message to us by e-mail and does not store it. To protect against misuse, your IP address is counted for at most one hour in encrypted form (as a hash). The legal basis is Art. 6 (1) (b) GDPR insofar as the enquiry relates to a contract or steps prior to entering into one, and otherwise Art. 6 (1) (f) GDPR (our interest in answering enquiries and in protection against spam). The retention period is as described for contact by e-mail.

We pre-sort enquiries received via the form and by e-mail with the help of an AI assistant: it assigns the message to a category (such as project enquiry, press, application, advertising) and drafts a reply. For this we use Microsoft Copilot Studio within our Microsoft 365 tenant; what is said above about Microsoft applies. We review and personally approve every reply; no automated decision within the meaning of Art. 22 GDPR takes place. Only obvious advertising and spam messages are closed without a reply. The legal basis is Art. 6 (1) (f) GDPR (our interest in handling enquiries quickly and carefully).

If you ask for early access to a publication via the form (“Request early access”), we store your name and e-mail address in order to send you the publication once by e-mail when it is published. This is not a newsletter: you will only receive further e-mails if you write to us. The legal basis is Art. 6 (1) (b) GDPR (your request). You can withdraw your request at any time, informally via the form or by e-mail; after it has been sent, what is said about contact by e-mail applies.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). Simply use the contact details above.

7. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

As of October 2026. In case of doubt, the German version (Datenschutzerklärung) prevails.