01Who is responsible
The controller responsible for data processing on this website under the EU General Data Protection Regulation (GDPR) is:
Capto UG (haftungsbeschränkt)
Äußere Kanalstr. 193, 50827 Köln, Germany
Email: info@nlevel.de
Full company and registration details are in the imprint at the bottom of this page.
02The short version
- We don't use cookies, analytics or tracking.
- Fonts and scripts are hosted on our own server. Nothing is loaded from Google or other providers when you open the page.
- The video and the chat assistant only load if you click on them. Only then is data sent to their providers.
03Hosting and server log files
This website runs on a web server. When you visit the site, your browser automatically sends information that is stored in server log files: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system.
We need this data to deliver the website securely and to detect and fix technical problems. The legal basis is our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR). Log files are deleted after a short period unless they are needed to investigate a security incident. If the server is operated by a hosting company, it processes this data only on our behalf, under a data processing agreement (Art. 28 GDPR).
04Cookies and local storage
This website does not set cookies and does not store information on your device. We do not use analytics, advertising or tracking tools.
05YouTube video
Our "How RER works" video is embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com). The video only loads after you click the play button. Before that, no connection to YouTube is made.
When you click play, data such as your IP address and information about your browser is sent to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA. Google is certified under the EU–US Data Privacy Framework. The legal basis is your consent, given by clicking play (Art. 6(1)(a) GDPR; § 25(1) TDDDG). For more, see Google's privacy policy.
06Chat assistant ("Ask NLEVEL")
The chat assistant is an external service (hosted via lovable.app) that only loads when you actively open the chat window. When it loads, technical connection data, such as your IP address and browser details, is sent to the provider.
Messages you type into the chat are processed by the service and the AI model providers it uses, in order to generate answers. This may involve processing on servers outside the European Union, for example in the United States. Such transfers are safeguarded by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses (SCCs).
The legal basis is your consent, given by opening and using the chat (Art. 6(1)(a) GDPR; § 25(1) TDDDG). Please don't enter sensitive personal or confidential information into the chat. Answers are generated automatically and may contain errors.
07Contacting us by email
If you email us, we process your email address, your name and the content of your message in order to answer you. The legal basis is our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR), or taking steps before entering into a contract (Art. 6(1)(b) GDPR). We delete your data once it is no longer needed, unless we are legally required to keep it.
08Applications
If you apply for a role or send us answers to our open challenge, we process the information you provide only to assess your application (Art. 6(1)(b) GDPR, § 26 BDSG). If we don't work together, we delete your application documents six months after the end of the application process, unless you agree to us keeping them longer.
09External links
This website links to external sites, such as Google Patents and YouTube. No data is sent to these sites unless you click the link. Once you're on another site, that site's privacy policy applies.
10Encryption
This website uses SSL/TLS encryption to protect data in transit. You can tell an encrypted connection by "https://" and the lock icon in your browser's address bar.
11Your rights
You have the right to:
- get information about the personal data we hold about you (Art. 15 GDPR)
- have incorrect data corrected (Art. 16 GDPR)
- have your data deleted (Art. 17 GDPR)
- restrict how we process your data (Art. 18 GDPR)
- receive your data in a portable format (Art. 20 GDPR)
- object to processing based on legitimate interest (Art. 21 GDPR)
- withdraw your consent at any time, with effect for the future (Art. 7(3) GDPR)
To use any of these rights, just email info@nlevel.de.
You also have the right to complain to a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
12Changes to this policy
We update this privacy policy when our website or the law changes. The current version is always available here.