Last updated: August 2026
This policy explains which personal data is processed when this website is visited, for what purpose, and which rights data subjects have.
The controller for data processing on this website is:
Nalune GmbH Haselnussstraße 21 59069 Hamm Germany Represented by: Jonas Katthage Email: info@nalune.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The provider processes the data generated when the site is accessed on our behalf; the servers are located within the European Union. The legal basis is our legitimate interest in secure and reliable delivery (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
When this website is accessed, the hosting provider automatically collects information transmitted by the browser: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address.
This data is not merged with other data sources and is used solely for the technical operation and security of the website. The legal basis is Art. 6(1)(f) GDPR.
When contact is made via the form or by email, we process the details provided (name, email address, phone number and the content of the message) in order to handle the enquiry.
The form is processed exclusively on our own web space at the hosting provider named above. The data entered is turned into an email to us straight away and is not stored there; no third-party form service is involved.
The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to the initiation or performance of a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries. We delete the data once it is no longer required for that purpose and no statutory retention periods apply.
This website does not use cookies for analytics or marketing purposes and does not embed any web analytics tools. The fonts in use are served locally from our own server, so no connection to third-party servers is established.
For security reasons this website uses SSL/TLS encryption. An encrypted connection can be recognised by the browser address bar starting with “https://”. When encryption is active, transmitted data cannot be read by third parties.
Data subjects have the right at any time to obtain information about the data stored about them (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).
Processing based on Art. 6(1)(f) GDPR may be objected to on grounds relating to the particular situation of the data subject (Art. 21 GDPR). Any consent given may be withdrawn at any time with effect for the future.
There is also a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), usually the authority at the data subject's place of residence or at our registered office.
We update this privacy policy whenever changes to the website or to the services we use make it necessary. The version published here always applies.