Privacy Policy

Privacy Policy

Privacy Policy

Information about how we collect, process, and protect your personal data transparently, GDPR-compliant, and securely.

Information about how we collect, process, and protect your personal data transparently, GDPR-compliant, and securely.

Information about how we collect, process, and protect your personal data transparently, GDPR-compliant, and securely.

Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

Data collection on our website

Who is responsible for data collection on this website?

The person responsible for the processing of personal data within the meaning of Article 4 No. 7 GDPR is:

NosCai GmbH
Jungfernstieg 34
20354 Hamburg

email: support@nosc.ai

How do we collect your data?

Your data is collected in two ways: firstly, when you provide it to us. This may include information entered into a contact form, for example. Other data is automatically captured by our IT systems when you visit the website. These are primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

How long do we retain your personal data?

Your personal data will be deleted after:

  • 14 days after you delete your customer account with us. You can delete it via your personal customer area in the “NosCai account”.

  • 5 years, with corresponding inactivity of the customer account.

  • 5 years, when ordered as a guest.

For what purpose do we use your data?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. The legal basis for processing is Article 6(1)(f) GDPR. We have a legitimate interest in enabling optimized communication between our server and your device.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. For this purpose and for further questions on the topic of data protection, you can contact us at any time using the address provided in the legal notice. Additionally, you have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and third-party tools

When you visit our website, your browsing behavior can be statistically analyzed. This is mainly done using cookies and so-called analysis programs. The analysis of your browsing behavior is usually anonymous; it cannot be traced back to you. You have the option to object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy. You can object to this analysis. We will inform you about the possibilities for objection in this privacy policy.

General Information and Mandatory Notices

Preamble

We attach great importance to protecting your data and maintaining your privacy. In the following, we explain which data we process when and for what purpose and on which legal basis. This is intended to explain to you how the services we offer work and how the protection of your personal data is ensured. Gem. Art. 4 No. 1 GDPR is personal data that can be attributed to a specific or identifiable natural person.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. It is not possible to completely protect data from access by third parties.

Insofar as processing is carried out on the basis of Article 6 (1) (f) GDPR, you have the right to object in accordance with Section 21 GDPR. According to Article 4 No. 2 GDPR, processing of data represents any process in connection with personal data.

Within the following individual sections, the right of objection is referred to separately. There you will find further information on how to exercise your right of objection.

Purpose of Processing

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU-GDPR) and the Federal Data Protection Act (BDSG), insofar as these are necessary for the establishment, implementation, and fulfillment of a contract as well as for carrying out pre-contractual measures. If the provision of personal data is necessary for initiating or conducting a contractual relationship or in the context of pre-contractual measures, processing is lawful pursuant to Article 6 Paragraph 1 Letter b GDPR. If you give us explicit consent to process personal data for specific purposes (e.g., disclosure to third parties, analysis for marketing purposes or promotional communication), the legality of this processing is based on your consent in accordance with Article 6 Paragraph 1 Letter a GDPR."

Notice regarding the responsible entity

The person responsible for the processing of personal data within the meaning of Article 4 No. 7 GDPR is:

NosCai GmbH
Jungfernstieg 34
20354 Hamburg
email: support@nosc.ai

The responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Withdrawal of Your Consent for Data Processing

You can withdraw your consent to the collection, agreement and use of personal data at any time with effect for the future.

All you need to do is send us an informal message by e-mail. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Right to complain to the competent supervisory authority

Sie haben unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Rechtsbehelfs das Recht auf Beschwerde bei einer Datenschutzaufsichtsbehörde. Zuständige Aufsichtsbehörde in datenschutzrechtlichen Fragen ist der Landesdatenschutzbeauftragte des Bundeslandes, in dem unser Unternehmen seinen Sitz hat. Eine Liste der Datenschutzbeauftragten sowie deren Kontaktdaten können folgendem Link entnommen werden: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Data Portability

According to Article 20 of the GDPR, you have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, either for yourself or for a third party, in a commonly used, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only occur if it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection when the browser's address line changes from “http://” to “https://” and by the lock icon in your browser line.

If SSL or TLS encryption is activated, the data that you submit to us cannot be read by third parties.

Encrypted payment transactions on this website

If, after the conclusion of a paid contract, there is an obligation to provide us with your payment details (e.g. account number in case of direct debit authorization), this data is required for payment processing.

Payment transactions using common means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection when the browser's address line changes from “http://” to “https://” and by the lock icon in your browser line.

With encrypted communication, your payment details that you submit to us cannot be read by third parties.

Rights of data subjects

In accordance with Article 15 (1) GDPR, you have a comprehensive right to information about processed personal data concerning you, as well as further information. In addition, you can request that your data be corrected in accordance with Article 16 GDPR. Article 17 (1) GDPR gives you the right to delete your personal data. In accordance with Art. 18f. GDPR and Art. 20 GDPR, you can exercise your right to restrict processing and right to data portability. For inquiries of this type, please contact support@nosc.ai Please note that we must ensure that such requests involve the data subject.

Objection to promotional emails

The use of contact data published as part of the legal notice obligation to send unsolicited advertising and information material is hereby rejected. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

Data Protection Officer

Legally Required Data Protection Officer

We have appointed a data protection officer for our company.

Data Protection Officer:
Sohrab Shojaei Khatouni.

Data collection on our website

Cookies

Some of the websites use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

The most common types of cookies are explained below to help you understand

  1. session cookies
    While you are active on a website, a session cookie is temporarily stored in your computer's memory, in which a session ID is stored, for example, to prevent you from having to log in again every time you change pages. Session cookies are deleted when you log out or lose their validity as soon as your session has automatically expired.

  2. Persistent or log cookies
    A persistent or log cookie stores a file on your computer for the period specified in the expiration date. These cookies allow websites to remember your information and settings the next time you visit. This results in faster and more convenient access, as you do not have to change your language settings for our portal again, for example. When the expiration date expires, the cookie is automatically deleted when you visit the website that created it.

  3. Third party cookies
    Third-party cookies come from providers other than the operator of the website. For example, they can be used to collect information for advertising, custom content, and web statistics.

  4. Flash cookies
    Flash cookies are stored on your computer as data elements from websites when they are operated with Adobe Flash. Flash cookies don't have a time limit.

Framer

We host our website with Framer. The provider is Framer B.V., Singel 542, 1017 AZ Amsterdam, Netherlands (hereinafter: Framer). When you visit our website, Framer collects various log files, including your IP address.

Framer is a tool for creating and hosting websites. Framer stores cookies or comparable recognition technologies that are necessary for the website's display, providing certain functions, and ensuring security (necessary cookies).

For more information, please refer to Framer's privacy policy:
https://www.framer.com/legal/privacy-statement/

The use of Framer is based on Article 6, Paragraph 1, Letter f of the GDPR. We have a legitimate interest in a technically stable, secure, and efficient presentation of our website. If consent has been requested, processing will only take place on the basis of Article 6, Paragraph 1, Letter a of the GDPR and Section 25, Paragraph 1 of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting). Consent can be revoked at any time.

If personal data is transferred to third countries, this is done based on appropriate guarantees in accordance with Article 44 et seq. of the GDPR, in particular through the conclusion of standard contractual clauses of the EU Commission, if necessary.

Data Processing Agreement

We have entered into a data processing agreement (DPA) with the aforementioned provider. This is a legally required contract under data protection laws ensuring that they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Contact Form and Appointment Booking

When you contact us via a form on the website or request an appointment, the data you enter is processed.

This can include:

  • Name

  • Email address

  • Phone number

  • Practice / Company

  • Message

Processing is carried out exclusively to handle your inquiry.

Legal basis:

Art. 6 para. 1 lit. b GDPR
(Processing for the performance of pre-contractual measures)

HubSpot

We use services from HubSpot to manage contact inquiries, forms, and marketing communications.

Provider is:

HubSpot Inc.
25 First Street
Cambridge, MA 02141
USA

HubSpot is an integrated software solution that allows us to manage various aspects of our online marketing and customer communication. This includes in particular:

  • the provision of contact forms

  • the processing of inquiries

  • appointment scheduling

  • analysis of the use of our website and marketing activities

If you contact us via a form on our website, the data you enter will be transmitted to HubSpot and stored there.

Additionally, HubSpot may use cookies or similar technologies to analyze user behavior on our website and evaluate the effectiveness of our marketing efforts.

Analysis Tools and Advertising

Google Analytics

This website uses features of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP Anonymization

We have activated the IP anonymization function on this website. As a result, Google shortens your IP address within member states of the European Union or other contracting states of the Agreement on the European Economic Area before transmitting it to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by changing the settings in your browser software; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objection to Data Collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Disable Google Analytics.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Demographic Features in Google Analytics

This website uses the 'demographics' function of Google Analytics. This allows the creation of reports containing information on the age, gender, and interests of site visitors. This data comes from Google's interest-based advertising and third-party visitor data. This data cannot be linked to any specific person. You can disable this feature at any time through the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics, as described in the section 'Objection to data collection'.

Google AdSense

This website uses Google AdSense, a service for embedding advertisements from Google Inc. (“Google”). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses so-called “cookies”, text files that are stored on your computer and which enable an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on these pages can be evaluated.

The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information can be passed on by Google to Google's contractual partners. However, Google will not combine your IP address with other data stored by you.

AdSense cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner described above and for the purposes set out above.

Google Analytics Remarketing

Our websites use the features of Google Analytics Remarketing in conjunction with the cross-device capabilities of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature allows the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device capabilities of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been customized for you based on your previous usage and browsing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC).

If you have given the appropriate consent, Google associates your web and app browsing history with your Google account for this purpose. This allows the same personalized advertising messages to be shown on any device you log into with your Google account.

To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create target audiences for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/

The aggregation of collected data in your Google account occurs solely on the basis of your consent, which you can provide or revoke at Google (Art. 6 para. 1 lit. a GDPR). For data collection processes that are not aggregated in your Google account (e.g., because you do not have a Google account or have objected to the aggregation), the collection of data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

Further information and the privacy policy can be found in Google's privacy policy at: https://www.google.com/policies/technologies/ads/

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. These cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who have clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storing of “conversion cookies” is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

More information about Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/

You can configure your browser to inform you when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be limited.

Microsoft Clarity

This website uses Microsoft Clarity, a web analytics service of
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Clarity enables us to better understand the behavior of visitors on our website. For example, mouse movements, clicks, scrolling behavior, and interactions with individual pages are analyzed. Based on this information, Clarity creates so-called heatmaps and session recordings.

These evaluations help us continuously improve the user-friendliness, structure, and content of our website.

Processed Data

As part of using Microsoft Clarity, the following data, among others, can be processed:

  • anonymized IP address

  • information about the device, browser, and operating system used

  • visited pages and interactions on the website

  • mouse movements, clicks, and scrolling behavior

  • session duration and usage times

The data collected is used solely for analysis and optimization purposes.

Legal Basis

Processing is carried out based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided you have consented to the use of analytics cookies via our cookie banner.

You can withdraw your consent at any time through the cookie settings on our website.

Data Transfer to Third Countries

As part of using Microsoft Clarity, data may be transmitted to servers of the Microsoft Corporation in the USA. Microsoft uses appropriate safeguards in accordance with Art. 46 GDPR to ensure an adequate level of data protection.

Plugins and Tools

Google Maps

This page uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this page has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy findability of the locations specified by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/