Privacy Policy

The controller responsible for data processing on this website is:

NimbusOps GmbH
Germany
Email: hello@nimbusops.io

Contact forms: When you submit an inquiry through our contact form, we collect your name, email address, company name, and the content of your message. Legal basis: Article 6(1)(b) GDPR (performance of a contract / pre-contractual measures).

Newsletter: If you subscribe to our newsletter, we collect your email address. Legal basis: Article 6(1)(a) GDPR (consent). You can withdraw consent at any time by clicking "unsubscribe" in any email.

AI chat widget: Conversations with our AI assistant are processed to provide the service. Messages may be stored temporarily for quality improvement. Legal basis: Article 6(1)(b) GDPR.

Server logs: When you visit our website, our server automatically records your IP address, browser type, operating system, referring URL, and timestamp. These logs are deleted after 7 days. Legal basis: Article 6(1)(f) GDPR (legitimate interest in website security).

Cookies: We use cookies as described in our cookie banner. Necessary cookies are set without consent. Analytics and marketing cookies are only set with your explicit consent. Legal basis: Article 6(1)(a) GDPR for optional cookies.

• To respond to inquiries and provide our services
• To send newsletters you have subscribed to
• To improve our website and services
• To comply with legal obligations
• To protect the security and integrity of our systems

We do not sell your personal data. We may share data with:

• Anthropic: Our AI chat widget uses the Claude API (Anthropic, USA). Data transfers are covered by Standard Contractual Clauses (SCCs).
• Resend: We use Resend for transactional email delivery. Resend processes email addresses on our behalf as a data processor.
• Hosting provider: Our website is hosted on servers within the EU/EEA.

We retain personal data only as long as necessary:

• Contact form submissions: 3 years (or until you request deletion)
• Newsletter subscriptions: Until you unsubscribe
• Server logs: 7 days
• Business correspondence: 6 years (German commercial law requirement)

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — Request a copy of the data we hold about you
• Right to rectification (Art. 16 GDPR) — Request correction of inaccurate data
• Right to erasure (Art. 17 GDPR) — Request deletion of your data ("right to be forgotten")
• Right to restriction (Art. 18 GDPR) — Request restriction of processing
• Right to data portability (Art. 20 GDPR) — Receive your data in a machine-readable format
• Right to object (Art. 21 GDPR) — Object to processing based on legitimate interests
• Right to withdraw consent — Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at privacy@nimbusops.io. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority. In Germany, this is the relevant state data protection authority (Landesdatenschutzbehörde).

Some of our service providers are located outside the EU/EEA (notably Anthropic in the USA). In such cases, we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46(2)(c) GDPR.

We may update this privacy policy from time to time. We will notify you of significant changes by email (if you have subscribed to our newsletter) or by prominently posting a notice on our website. The date at the top of this page indicates when it was last revised.

For any privacy-related questions or to exercise your rights:
privacy@nimbusops.io