Privacy policy

1. Controller

Nibelung FlexKapG

Wickenburggasse 16, 1080 Vienna, Austria. FN 683439h, Commercial Court of Vienna.

E-mail: info@nibelung.io (subject: Privacy).

No data protection officer has been appointed, as the legal requirements for one are not met. The VAT identification number (UID) will be added as soon as the tax office assigns it; see the Impressum.

2. What we process, and why

Server logs

When you open this website, technical data is processed automatically: IP address, browser identifier, time, requested URL and HTTP status code. We use it only to deliver the site, to defend it against abuse and to analyse errors. It is deleted after 14 days at the latest.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in secure operation.

Contact form

If you write to us through the form, we process your name, e-mail address, company (if given) and your message in order to handle your request and reply. The data travels to our server over an encrypted connection and is delivered as an e-mail to info@nibelung.io through our own mail infrastructure, with servers in the EU. It is not stored on the web server beyond that. If delivery fails, your own e-mail program opens with a prepared message instead, which you send yourself.

Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract) or Art. 6(1)(f) GDPR (legitimate interest in business contact). Retention: until your request is settled; in an ongoing business relationship until the end of the statutory retention period (7 years, § 212 UGB).

Error logging

If a technical error occurs while the site loads or runs, the browser sends an error report (error message, browser and device type, affected URL) to a Sentry instance we host ourselves in the EU. No sessions, inputs or page contents are recorded.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in error diagnosis and secure operation. Retention: until the error is fixed, 90 days at most.

Reach measurement

This website uses no analytics and no reach measurement of any kind.

3. Recipients

Your data reaches only service providers within the EU/EEA that are contractually bound to confidentiality under Art. 28 GDPR:

• Hosting and infrastructure: our own Kubernetes cluster, operated in EU data centres (Hetzner, Germany).
• Error logging: our own Sentry instance, self-hosted in the EU.
• E-mail: delivery to our mailbox through mail infrastructure with servers in the EU.

No personal data is transferred to countries outside the EU/EEA.

4. Cookies and local storage

This website sets no cookies. The browser stores one functional value in local storage: your acknowledgement of the privacy notice. It stays in your browser, is not used to recognise you and can be deleted at any time through your browser settings. The notice serves transparency; consent is not required, as no storage or read-out subject to consent takes place.

5. Fonts and external resources

All fonts (Inter, Crimson Text) and all scripts are delivered from our own servers. We do not use Google Fonts or any external content-delivery network.

6. Your rights

You have the right, at any time, to:

• information about the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)

An informal message to info@nibelung.io is enough. Independently of that, you may lodge a complaint with the Austrian Data Protection Authority: dsb.gv.at, Barichgasse 40–42, 1030 Vienna.

7. Our products

Processing inside our products (HLiD, GRIM, Halcyon) is governed by the contract and the data processing agreement with the respective customer, not by this policy.

8. Updates

We may adapt this policy when the legal situation or our services change. The current version is always available on this page.