Last updated: 10 August 2026
This policy explains which personal data are processed when you visit nazmtec.com or submit a project inquiry. Personal data are information that can identify a person directly or indirectly.
1. Controller
Saif Aldeen Alkhateeb, trading as Nazmtec
Ladenbeker Furtweg
21033 Hamburg
Germany
Phone: +49 176 32464151
Email: info@nazmtec.com
2. Hosting, delivery, and server logs
The website, API, and email infrastructure are provided through Hostinger. Depending on the subscribed service, the processor is in particular Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When a page is requested, technically necessary connection data are processed, especially the IP address, time, requested resource, HTTP status, referrer, browser, and operating-system information. This is necessary to deliver the site, defend against attacks, and investigate errors.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable, and economical operation of the service. The Nazmtec application does not store raw IP addresses or full user-agent strings in its own analytics database. The host may independently process technically required server logs under its security and operating policies. See Hostinger’s Data Processing Addendum and Privacy Policy.
3. Encryption
The website is delivered over HTTPS. This protects content sent to us against interception while in transit.
4. Contact and project inquiries
If you use the contact form or contact us by email or phone, we process the information you provide. The form collects your name, email address, subject or requested service, and message; a phone number is optional if provided. The information is stored in the protected backend database and sent as a notification to info@nazmtec.com. No IP address is stored with the inquiry.
Processing is necessary to answer your inquiry and to take steps before or perform a contract under Article 6(1)(b) GDPR. Where no contractual relationship is concerned, it is based on our legitimate interest in professional communication under Article 6(1)(f) GDPR. We delete inquiries once they are no longer needed for these purposes, unless statutory retention duties or legal claims require further storage.
5. Audience measurement only with consent
If you expressly accept the “Analytics” category, we use restrained, self-hosted audience and quality measurement. We process the requested path without query parameters, language, broad device category, referring domain, selected interactions such as project opens or form starts, and technical Web Vitals. To distinguish visits approximately, the IP address is immediately pseudonymised using an HMAC with a secret key; the raw IP address and full user-agent string are not stored in the analytics database.
The legal basis is your consent under Article 6(1)(a) GDPR together with section 25(1) TDDDG. Consent is voluntary and may be withdrawn for the future through the privacy settings. Analytics records are deleted after no more than twelve months. Without consent, no analytics page views, funnel events, or Web Vitals are stored. We currently use no third-party advertising trackers.
6. Local browser storage
The site uses browser local storage to remember your consent choice, language, and colour scheme. These values are needed for the functions you select and are not used for advertising. Access is based on section 25(2)(2) TDDDG and, where personal data are involved, Article 6(1)(f) GDPR. We ask for the consent decision again after six months. Language and colour scheme remain until you change them or clear browser storage.
7. Self-hosted fonts and external links
Fonts are delivered from our own hosting, so loading this site does not create a connection to Google Fonts. Project sites and other external services are contacted only after you select the corresponding link. The respective provider is responsible for subsequent processing.
8. Recipients and international transfers
Access is limited to people and service providers who need it to operate the site securely or handle your inquiry. Hostinger acts as processor. Depending on technical delivery, authorised Hostinger entities or subprocessors may operate outside the EU or EEA. In that case, the safeguards required by Articles 44 et seq. GDPR apply, particularly adequacy decisions or EU Standard Contractual Clauses.
9. Your rights
Subject to the GDPR’s conditions, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), and objection to processing based on legitimate interests (Article 21). You may withdraw consent at any time for the future. Contact info@nazmtec.com to exercise these rights.
You may also lodge a complaint under Article 77 GDPR with a supervisory authority. Our competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg. Complaints can be submitted at datenschutz-hamburg.de.
10. Required information and automated decisions
You are not legally or contractually required to submit data through the form. Without a name, reachable email address, and meaningful message, however, we cannot handle an inquiry. We do not use automated decision-making or profiling.
11. Updates
We update this policy when functions, service providers, or the law change. The version published on this page applies.
This English translation is provided for convenience. The German version is authoritative.