Privacy Policy

The party responsible for data processing is Ermek Stephan, NANGAcss (sole proprietorship), Schelleingasse 14–16, 1040 Vienna, Austria. For further contact details, see the Imprint.

For inquiries submitted via the contact form, we process: name, email address, and your message in free text. For the website potential check, we additionally process your answers in the multiple-choice questionnaire and the resulting score.

In addition, for every form submission we process your IP address server-side, in hashed form, to detect and prevent automated mass submissions (spam).

We process your data to handle inquiries, prepare initial consultations, and for the preparation of quotes and contract negotiations. We process the IP address solely to prevent abuse (protection against automated mass submissions).

The legal basis is in particular Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (efficient handling of inquiries, process quality). Where required, individual processing activities are based on Art. 6(1)(a) GDPR (consent).

Recipients are limited to parties required for processing. This may include, in particular, internal personnel with relevant responsibilities as well as hosting, infrastructure, analytics, and email service providers (IONOS SE). A data processing agreement under Art. 28 GDPR is in place with IONOS SE. Form submissions are sent via the IONOS mail server (EU) — no data is transferred to servers in third countries.

Where data is transferred to service providers outside the EU/EEA, or access from third countries cannot be ruled out, this only takes place on the basis of appropriate safeguards under Art. 44 et seq. GDPR, in particular EU Standard Contractual Clauses (SCCs) or other applicable transfer mechanisms of the respective provider.

We generally retain inquiry and project data only for as long as necessary for processing, communication, and follow-up.

As a rule, we delete plain inquiry records no later than 12 months after the last contact, unless statutory retention obligations or ongoing matters require otherwise.

If a contract is concluded, additional statutory retention periods apply (e.g. under commercial and tax law).

Hashed IP addresses used for abuse prevention are automatically reset per time window (1 hour) and are not used for any other purpose.

We use the web analytics service provided by IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany) on our website. The provider is 1&1 IONOS SE. IONOS WebAnalytics allows us to analyse visitor behaviour on our website in order to improve our online offering both technically and commercially.

When you visit our website, IONOS WebAnalytics collects data such as page views, time spent on the site, referral source (e.g. which search engine or website led you to us), your operating system, your device, and anonymised IP addresses. IP addresses are anonymised immediately upon collection so that they can no longer be attributed to you. No personal user profiles are created.

This processing is based on Art. 6(1)(f) GDPR (legitimate interest), as we have a legitimate interest in the statistical analysis of user behaviour to optimise our online offering. You may object to this processing at any time in accordance with Art. 21 GDPR. A data processing agreement under Art. 28 GDPR is in place with IONOS SE.

Further information on data collection and processing by IONOS is available in the IONOS SE Privacy Policy.

We use "Local Storage" and "Session Storage" technology (local browser storage) on our website. Data is stored locally in your web browser's cache. This stored data cannot be accessed by third parties; it is not transmitted to any server and is not used for analytics or marketing purposes.

Specifically, we store the following entries:

• nanga_hero_intro_v4 (Local Storage): Remembers whether the homepage intro animation has already played, so it does not appear again on every visit. No fixed expiry date; persists until the cache is manually cleared.
• nanga_check_[serviceKey] (Local Storage): Stores your progress and answers in the service readiness check so your progress is preserved on a return visit. Automatically deleted after 7 days.
• nanga_analytics_consent (Local Storage): Stores your decision regarding web analytics (opt-out or consent) so the notice banner does not appear again on every visit. No fixed expiry date; persists until the cache is manually cleared.
• nanga_lang_scroll (Session Storage): Stores the scroll position when switching languages so the page remains at the same position after the language switch. Deleted immediately after being restored and valid only for the duration of the current browser session.

This storage is based on § 25(2) No. 2 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act), as it is strictly necessary to provide the functions you have requested. No consent is required. You can block the use of local storage at any time in your browser settings or delete data already stored.

Providing your data is voluntary. However, without the information marked as required, we may be unable to process your inquiry, or only to a limited extent.

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection in accordance with the GDPR.

Where processing is based on consent, you may withdraw it at any time with effect for the future.

You may lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at).