Privacy policy

1. Controller

2. Website delivery and security

This website is provided through Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When the website is accessed, technically necessary connection data is processed, in particular the IP address, time, requested address, browser information and, where applicable, the previously visited page. This serves delivery, error analysis and protection against attacks. The legal basis is our legitimate interest in secure website operation pursuant to Art. 6(1)(f) GDPR.

Vercel may also process data outside the EU. Vercel’s data-processing terms contain provisions for international transfers, including EU Standard Contractual Clauses. Details are available in the Data Processing Addendum and Vercel Privacy Notice .

Technical data is retained for as long as required for operation and security and according to the Vercel services concerned. Security incidents or legal duties may require longer retention.

3. Optional usage and performance measurement

We load Vercel Web Analytics and Speed Insights only with your consent. Web Analytics records information including page views, referring pages, browser, device type and country. According to Vercel, visits are recognised without tracking cookies by means of a time-limited hash; the session identifier is discarded after 24 hours. This does not state a deletion period for all statistical data. We do not use custom tracking events.

Speed Insights measures loading times and Web Vitals together with technical information such as browser, device type, network and route visited. The data helps us improve the website. The recipient is Vercel; the information about international transfers in section 2 applies accordingly.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and, where access to your terminal device occurs, Section 25(1) TDDDG. Both services remain disabled without consent. You can change your choice at any time via “Privacy settings” in the footer and withdraw consent for the future. This does not affect the lawfulness of processing carried out before withdrawal.

Further information: Web Analytics and Speed Insights .

4. Storing your choice

Your privacy choice is stored with a version number and expiry time for no longer than six months in your browser’s local storage under “nbs-privacy-v1”. The entry does not contain a visitor identifier. It is required to apply your choice and avoid asking again on every page view (Section 25(2)(2) TDDDG; Art. 6(1)(f) GDPR). You can also delete it using your browser controls. If storage is blocked, your choice applies only to the current visit.

5. Contact by email

When you write to us, we process your email address, message and any additional information you provide to handle your enquiry. Art. 6(1)(b) GDPR applies to contract-related enquiries; otherwise, the basis is our legitimate interest in communication pursuant to Art. 6(1)(f) GDPR.

Our mailbox is operated with Gmail. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google and affiliated companies may also process data in third countries. Information about recipients, transfers and retention is available in the Google Privacy Policy .

Enquiries are deleted once they have been conclusively handled unless statutory retention duties or legitimate reasons, such as resolving claims, require otherwise. Please do not send particularly sensitive information without encryption. The email link opens your email application; Gmail is not embedded merely by visiting this website.

6. Images, video and minigame

Images and the CHUKO video are served from this website without YouTube or social-media players. The font uses typefaces available on your device; Google Fonts is not loaded. The minigame runs in the browser. Scores and control inputs are not transmitted to us or stored permanently. The technical data described in section 2 is generated independently when the page is accessed.

7. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object for reasons arising from your particular situation. You can withdraw consent at any time with effect for the future. To exercise these rights, contact the email address above.

You may lodge a complaint with a data protection supervisory authority, particularly at your place of residence or work. Our competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf. Complaint to the LDI NRW (German) .

We do not carry out automated decision-making with legal or similarly significant effects. Contacting us and consenting to statistics are voluntary; the website cannot be delivered without technically necessary connection data.