Legal

Privacy policy

This website sets no cookies, does not track you and loads nothing from third parties. What is still processed when you visit or contact us is described here.

Controller

Rene Benachour
NxtGenIT, Ulm, Germany
Email: [email protected]
Phone: +49 162 1320798

The postal address is in the legal notice.

Principle: data minimization

nxtgenit.de is a fully static website. It sets no cookies, contains no analytics or tracking tools and no third-party embeds. The contact form sends only to our own server. Fonts, images and scripts are served from our own server. Opening a page sends no requests to third parties.

If you choose between the dark and the light appearance, that choice is stored in your browser's local storage (localStorage). The value never leaves your browser and is not read by us.

Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement under Article 28 GDPR is in place with Hetzner. Processing takes place in Germany.

Server log files

When you open this website, the web server automatically processes the IP address of your device, the date and time of the request, the address requested, the HTTP status, the amount of data transferred and the user agent of your browser. This data is processed to keep the site running, to defend against attacks and to analyze errors. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure operation of the website. The log files are deleted after seven days.

Name resolution (DNS)

The DNS records of the domain nxtgenit.de are managed at Cloudflare, Inc. Cloudflare answers DNS queries for name resolution only; it does not serve any content of this website and does not process visitor data on our behalf.

Contact by email or phone

When you contact us by email or phone, we process the information you give us in order to answer your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry aims at a contract, otherwise Article 6(1)(f) GDPR; our legitimate interest is answering your enquiry.

Our email and telephony system is operated by Microsoft Ireland Operations Limited (Microsoft 365) as a processor. A transfer to third countries, in particular the United States, cannot be ruled out; it rests on the standard contractual clauses of the European Commission and on Microsoft's certification under the EU-US Data Privacy Framework. We delete the data of an enquiry once it is fully answered, unless a contract follows or statutory retention periods apply.

Contact form

When you write to us through the contact form, we process your name, your email address, your message and, if given, your company in order to answer your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry aims at a contract, otherwise Article 6(1)(f) GDPR; our legitimate interest is answering your enquiry.

The form service runs on our own server. It does not store what you send but passes it on as an email through Microsoft 365 to our mailbox. From there, the section on contact by email applies. To prevent abuse, the service processes your IP address to limit the number of messages per hour and includes it in the email to us. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting the form from spam and abuse. The logs of the form service contain the outcome of a request and the IP address, never the content. Before sending, your browser solves a small computing task (proof of work). This sets no cookies and involves no third parties.

External links

This website links to our product sites nxtfireguard.de and tyvar.de, to our profiles on LinkedIn, GitHub and AbuseIPDB, and to the Allianz für Cyber-Sicherheit. No data is transferred to these providers before you click a link. After the click, the privacy notices of the respective provider apply.

Your rights

You have the right to obtain information about the personal data we hold about you (Article 15 GDPR), to rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on Article 6(1)(f) GDPR (Article 21). Write to the address above to exercise them.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

Last updated

This privacy policy was last updated on 22 October 2026.

Datenschutzerklärung, deutsche Fassung