Privacy
Protecting your personal data matters to us. In this privacy policy we inform you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), which data we process when you visit this website, for what purpose, on what legal basis and what rights you have. We process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act DSG, Telecommunications Act TKG 2021). This is a translation for your convenience; the German version is legally binding.
1. Controller
Nanbit GmbH
Gemeindeplatz 7
4650 Edt bei Lambach, Austria
Email: info@nanbit.io
A data protection officer is not required by law and has not been appointed. For questions about data protection, please use the contact details above.
2. Hosting and server log files
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify delivers the pages through a worldwide server network (content delivery network) so that they load quickly and reliably. Data may be transferred to the USA in the process. Netlify is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). We have a data processing agreement with Netlify under Art. 28 GDPR, which also includes the European Commission's standard contractual clauses. More information: netlify.com/privacy
When you visit the website, the server automatically records the following data transmitted by your browser: IP address, date and time of access, the page or file requested, the amount of data transferred, the referrer (the page visited before), browser type and operating system.
This data is technically necessary to deliver the website and to ensure secure and stable operation, for example to fend off attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. The log files are not combined with other data sources, are not used to create profiles and are deleted automatically when the host's retention period ends, unless they are needed to investigate a specific security incident.
3. Encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar. Data you send to us, for example via the contact form, cannot be read by third parties.
4. Contact form
If you send us an enquiry via the contact form, we process the data you provide: first and last name, email address, your answers about the service you need, the size of your business and the timeframe, and optionally phone number, company and a message. The time of submission and the language of the form are also stored.
The purpose is to handle your enquiry and answer any further questions. The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at concluding a contract (pre-contractual measures), otherwise our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR. The required fields are necessary to handle your enquiry. Without this information we cannot reply to you.
The form is processed by the “Netlify Forms” service of our hosting provider Netlify (see section 2). Your details are stored in our Netlify account and also sent to us by email. The safeguards described in section 2 apply to the transfer to the USA.
To protect against spam, the form contains a field that is invisible to people. In addition, Netlify automatically checks every submission with the Akismet service (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA), which acts as a sub-processor on Netlify's behalf. For this, the content of the submission and technical data such as IP address and browser identifier are sent to Akismet. The legal basis is our legitimate interest in protection against misuse (Art. 6(1)(f) GDPR).
We delete your enquiry in Netlify and in our mailbox once it has been fully dealt with and no further questions are expected, usually after 12 months at the latest. If a contract is concluded, we keep the correspondence for the statutory retention period (usually 7 years under Section 132 BAO and Section 212 UGB).
5. Contact by email
If you contact us by email, we process the data you send (e.g. name, email address, content of the enquiry and any details you provide voluntarily) for the same purposes, on the same legal bases and with the same retention periods as described in section 4.
6. Cookies and browser storage
Without your consent this website does not set any cookies. To save your choice in the consent banner (“Cookie settings”), we create an entry called “nb-consent” in your browser's local storage (localStorage). It only contains your choice, a version number and the date of your choice, stays on your device and is not sent to us. This storage is strictly necessary so that we don't have to ask you again on every page and can respect your decision (Section 165(3) TKG 2021, Art. 6(1)(c) and (f) GDPR). You can delete the entry at any time in your browser settings. You will then be asked again on your next visit.
Any storage of or access to information on your device that is not strictly necessary, for example for statistics, only takes place with your explicit consent (Section 165(3) TKG 2021, Art. 6(1)(a) GDPR).
7. Statistics with Google Analytics
If you choose “Allow statistics” in the consent banner, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent Google Analytics is not loaded and no data is sent to Google.
Google Analytics helps us understand how visitors use our website, for example which pages are viewed, how long visitors stay and how they find us. For this, cookies (e.g. “_ga”) are stored on your device and information about your use is processed: pages viewed, time on site, approximate location (country, city), device, browser and operating system, and the website you came from. Google Analytics 4 does not store complete IP addresses. We have disabled linking across devices (Google Signals) and any use for advertising.
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 165(3) TKG 2021. The cookies are deleted after 13 months at the latest, and the data collected at Google after 14 months. Data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework, so the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). We have a data processing agreement with Google under Art. 28 GDPR.
You can withdraw your consent at any time with effect for the future by choosing “Essential only” via the “Cookie settings” link at the bottom of every page. The Analytics cookies are then removed. More information: policies.google.com/privacy
8. Fonts and scripts
All fonts and scripts on this website are delivered by our hosting provider Netlify together with the website itself. Loading a page does not connect you to external services such as Google Fonts. A connection to Google is only made if you have agreed to statistics (see section 7).
9. Links to other websites and social networks
Our website contains links to external websites, for example to client projects, and to our social media profiles. These are simple links, not embedded plugins. Data is only transferred to the provider concerned when you click a link and visit their website. That provider is responsible for any data processing there.
10. Recipients of your data
We do not pass your personal data on to third parties, do not sell it and do not use it for advertising. Only processors we use to run the website and our communication have access to your data, namely our hosting provider Netlify (including the Akismet spam protection, see section 4), our email provider and, with your consent, Google for statistics (see section 7). We have agreements with them under Art. 28 GDPR. Beyond that we only transfer data if we are legally obliged to, for example to authorities.
11. Automated decision-making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, an informal message to the following address is enough: info@nanbit.io.
If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.
13. Last updated
September 2026. We update this privacy policy whenever the legal situation or the services used on the website change.