Privacy policy

1. Controller

nullacht15 GmbH Opelstraße 29 68789 St. Leon-Rot, Germany Phone: +49 6227 8991630 Email: info@na15.com

Represented by the management (see imprint).

2. Hosting and server log files

The website and our own services for statistics (umami.na15.io), automation (automate.na15.io) and chat (chatbot.na15.io) run on servers of mittwald CM Service GmbH & Co. KG, Espelkamp, in Germany. We have a data processing agreement with mittwald under Art. 28 GDPR.

With every request, the server automatically stores information your browser transmits:

• IP address
• date and time of the request
• requested address and amount of data transferred
• referrer (the page visited before)
• browser and operating system

The purpose is secure and stable operation, for example defending against attacks and troubleshooting. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in secure operation. The log files are deleted automatically when the host's retention period expires.

3. Encryption

The website uses TLS encryption (recognisable by “https://” in the address bar). Third parties cannot read what you send to us.

4. Content only from our server

We deliver fonts, images and videos from our own server. Loading the site creates no connection to providers such as Google Fonts, YouTube or platforms for videos and maps.

5. Storage in your browser

We only store in your browser what the site and the services you use need:

• Language (local storage “i18nextLng”): the language you see the site in, so it appears that way next time.
• Privacy settings (cookie “c15t” for one year and local storage “c15t”): your choice in the consent window with its time and a random ID, stored with the tool c15t only in your browser.
• Chat (local storage “na15-n8n-brandable-chatbox” and “na15-n8n-brandable-chatbox:consent”): only once you begin the chat with “Start chat”. Stored are your confirmation of the notice, a random session ID and your conversation so far, so the conversation continues on the next page.

Language and chat remain stored until you delete the site data in your browser. Of this, only the session ID reaches us, together with your chat messages (section 9). The legal basis is Section 25(2) no. 2 TDDDG (strictly necessary for the service you request) and, for documenting your consent, also Art. 6(1)(c) GDPR. You can change or withdraw your consent at any time via “Privacy settings” in the footer of every page.

6. Audience measurement with Umami, without cookies

To understand which pages are read, we count visits with Umami on our own server (umami.na15.io). No data is passed to third parties.

Umami sets no cookies and stores nothing on your device. It records the page visited, the referrer, browser, operating system, device type, screen size, country (derived from the IP address) and the time. The IP address is not stored but only used in hashed form to group visits. If JavaScript is switched off, an invisible image from umami.na15.io counts the visit in the same way.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in improving the website. As nothing is stored on or read from your device, no consent under Section 25 TDDDG is required. You can object to the measurement at any time, for example by email. We keep the statistics as long as we need them to evaluate the website.

7. Recording of use, only with consent

Only if you allow “Measurement” in the consent window does Umami also record how you use the site: clicks, scrolling, mouse movements and the structure of the page shown. This shows us where visitors get stuck. Input in form fields is not recorded but masked; the chat window is excluded entirely. The recording also runs on our own server (umami.na15.io).

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time via “Privacy settings”; from the next page view on, nothing is recorded. This does not affect the lawfulness of processing before that. We delete recordings as soon as we no longer need them for evaluation.

8. Contact form

If you write to us via the contact form, we process your name, email address, message and, if provided, your phone number. We also receive the reason you choose (initial call, workshop or message) and, for an initial call, the preferred time of day and whether by video or phone. The data is received by our own automation server (automate.na15.io, hosted by mittwald in Germany) and stored there in a table that only we can access. No external email service or contact management system is used for this.

The purpose is handling your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries). Providing the data is voluntary; without name and email address (and, for a workshop or message, without a message; for an initial call by phone, without a phone number) we cannot reply, however. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

9. Chat with Nulli

On every page you can chat with Nulli, an AI chat. For this, your browser loads the chat window from our server chatbot.na15.io whenever a page is loaded; technically, your IP address is transmitted, as with any file request.

Nothing is sent before you confirm “Start chat”. After that, your messages go to our automation server (automate.na15.io) together with the session ID and the language of the page, and are answered by an AI language model operated by mittwald in Germany (mittwald AI Hosting). No data is transferred to countries outside the EU. Conversations are stored in the logs of our automation server and deleted automatically when the retention period set there expires; your browser also keeps the conversation until you delete it (section 5).

Please do not enter sensitive data in the chat. The legal basis is Art. 6(1)(f) GDPR (answering your questions) or Art. 6(1)(b) GDPR if your question relates to a contract.

10. Links and sharing

The links to LinkedIn and Instagram are plain links, not embedded plugins. Only when you click a link does the respective operator process data; its privacy notice applies. The same goes for other websites we link to.

On the Praxis pages, “Copy link” only copies the page address and “Recommend by email” opens your email program. Nothing is sent to us or to third parties.

11. Your rights

You have the right to

• access to your stored data (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

To do so, contact info@na15.com or the address above. You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

12. Changes

We update this policy when the website or the legal situation changes. Last updated: October 2026.