Privacy policy
This is a translation for convenience. The German version of this document is the legally binding one; in case of discrepancies, the German text prevails.
1. Controller
NuhByte Website SPC
[Address, Sultanate of Oman]
Email: info@nuhbyte.website
2. EU representative pursuant to Art. 27 GDPR
As we have no establishment in the European Union but process personal data of individuals within the EU, we have appointed the following representative in the EU pursuant to Art. 27 GDPR:
[Name / company of the EU representative]
[Address in the EU]
[Email]
The EU representative is the point of contact for supervisory authorities and data subjects in all matters relating to the processing of personal data.
3. Data protection officer
[Placeholder: name and contact details of the data protection officer, if appointed.]
4. Provision of the website / server log files
Hosting provider: [name, server location]
Each time the website is accessed, our hosting provider automatically collects data such as IP address, date and time of access, browser type, page accessed and referrer URL.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website).
5. Contacting us (form / email)
If you contact us via [contact form / email], we process the data you provide (e.g. name, email address, message content) in order to handle your enquiry.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding).
6. Cookies and tracking tools
[Placeholder: add the list of tools used, e.g. Google Analytics, Meta Pixel, LinkedIn Insight Tag. For cookies and tracking that are not technically necessary, prior consent must be obtained via a cookie consent banner.]
7. Disclosure to third parties / processors
[Placeholder: e.g. hosting provider, email marketing tool, CRM – add location and legal basis (data processing agreement) for each.]
8. Transfers to third countries
Our company is based in the Sultanate of Oman. Oman is not covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR. Personal data of individuals in the EU is therefore processed on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular the EU Standard Contractual Clauses.
[Placeholder: add the specific safeguard / contractual framework once finalised.]
9. Retention period
Data is deleted once the purpose has been fulfilled or the statutory retention periods have expired.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21).
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. This is usually the authority at the seat of our EU representative (see section 2) or at your place of residence.
[Placeholder: add the specific supervisory authority once the EU representative is confirmed.]
Version: [date] – draft