Privacy Policy

This Privacy Policy explains how personal data is processed when you visit novaq-consulting.com, or contact us.

1. Controller

Sascha Spiegel (NOVAQ)
In der Schorr 6
55765 Oberhambach
Germany
Email: info@novaq-mgmt.com

2. Visiting the website and hosting

Our website is hosted by Vercel (Vercel Inc., USA). To deliver the site, establish a secure connection and protect it against misuse, requests may involve your IP address, URL requested, date and time, browser and device data, referrer and technical error or security information. Vercel may process such data on our behalf and through subprocessors in other countries, including the United States.

The legal basis for technically necessary processing is Article 6(1)(f) GDPR: our legitimate interest in operating a secure, functional and reliable website. We retain such information only as necessary for operational security, troubleshooting and applicable legal obligations, subject to the relevant Vercel settings and retention periods.

For details see Vercel's Privacy Notice and Data Processing Addendum. Fonts and design assets used by this site are hosted locally; they do not need to be requested from external font services.

3. Contact inquiries

If you use the contact form, we process the name, email address, topic and message you submit in order to respond to you, discuss potential consulting services and handle follow-up communication. The legal basis is Article 6(1)(b) GDPR where we take steps before a contract at your request, or Article 6(1)(f) GDPR for other general inquiries.

Our form is technically connected to a Vercel Function. Once the form email service has been configured, inquiries are sent through Resend, an external email-delivery provider, to our business inbox. The data may be processed outside the European Economic Area, subject to applicable contractual and transfer safeguards. For additional details see Resend's Privacy Policy.

We keep inquiries only for as long as needed to handle them and any follow-up, unless statutory retention obligations apply. You are not legally obliged to submit an inquiry; however, without an email address and message we cannot reply via this form. We do not use form contents to automatically make legally significant decisions.

4. Cookies and tracking

Our website does not currently integrate advertising pixels, marketing tracking or third-party analytics tools. In particular, we do not set optional advertising cookies through this website. We therefore do not currently present a consent banner for advertising technologies. Technically necessary processing by our hosting provider as described above may still occur.

5. Recipients, international transfers and processors

Depending on your interaction, the recipients of personal information may include our website host (Vercel), email-service provider (Resend, once enabled) and our configured email mailbox provider. Some processing may take place in third countries. Where necessary, transfer mechanisms may include adequacy decisions and standard contractual clauses. We recommend reviewing the applicable provider documents and data processing agreements before enabling these services.

6. Your data protection rights

Subject to the applicable requirements, you have rights to access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), objection (Article 21). You can contact us using the email address in Section 1. You also have the right to lodge a complaint with a supervisory authority, for example the data protection authority of Rhineland-Palatinate.

7. Changes to this policy

We may amend this policy to reflect changes to our services, providers or legal requirements. The published version on this website applies.

Last updated: 4 November 2026.