Privacy policy

Controller

The controller responsible for data processing on this website is:

Numara Works UG (haftungsbeschränkt)
Kolonnenstraße 8
10827 Berlin
Germany
Email: mail@numara.works

Represented by the managing directors Simon Schmidt and Benedikt Rapp. No data protection officer has been designated. For questions about data protection, please write to mail@numara.works.

This policy applies to the website https://numara.works. The application at https://app.numara.works is covered by the platform privacy information.

Key points at a glance

• The website is operated from a data centre in the Netherlands (Google Cloud, region europe-west4).
• We use no cookies, no analytics or tracking tools, no advertising pixels and no social media plugins.
• Fonts are served from our own server; there is no connection to Google Fonts.
• Personal data you actively provide, for example via the contact form, is used only to answer your request.

Hosting and access data

The website is a static site served via Google Cloud Run in region europe-west4 (Netherlands). The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Google processes the data as a processor under a data processing agreement (Cloud Data Processing Addendum).

When the website is accessed, the server processes technically necessary access data:

• IP address of the requesting device,
• date and time of access,
• requested URL,
• HTTP status code,
• volume of data transferred,
• referrer URL (the previously visited page),
• browser and operating system (user agent).

This data is stored in the request logs of Google Cloud Logging and deleted automatically after 30 days. It is not combined with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website, in particular in detecting and preventing attacks and malfunctions.

Fonts

The Poppins typeface is stored on our own server and loaded from there. No connection is made to Google Fonts or any other external font service when a page is loaded.

No cookies, no tracking

The website sets no cookies and stores no data in your browser’s local storage (such as Local Storage). We use no web analytics, no tracking, no advertising or marketing pixels and no social media plugins.

Because no information is stored on or read from your device, § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) does not apply. A consent banner is therefore not required and is not shown.

Demo request via the contact form

You can request a personal demo via the contact form. We process:

• name,
• email address,
• number of locations (1, 2–3 or 4+),
• optionally, your message,
• a field invisible to humans that protects against automated spam submissions.

The form transmits the data over a TLS-encrypted connection to our application server https://app.numara.works, which is also hosted on Google Cloud in region europe-west4 (Netherlands). There, the following happens:

• Notification of our team: An email containing your request is sent to our team via the email service Resend. The provider is Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, acting as a processor. Your name and message are contained only in this email.
• Log entry: Your email address and number of locations are stored as a log entry in our database (Google Cloud Firestore, region europe-west4) and deleted automatically after 400 days.
• Abuse prevention: To prevent abuse, we limit requests to five per hour. For this purpose your IP address is used only in the server’s memory and is not stored.

The legal bases are Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR. Our legitimate interest lies in answering business enquiries and in protecting against abuse.

Submitting a request does not subscribe you to any newsletter. We use your details solely to answer your request. Emails relating to your request are deleted once the request is closed, unless commercial or tax retention obligations (§ 257 HGB, § 147 AO) apply.

Contact by email

If you write to us by email, we process your email address, your name and the content of your message in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract, and otherwise Art. 6(1)(f) GDPR (answering enquiries). Deletion follows the rules described for demo requests.

Signing in to the application

The “Sign in” link leads to the application at https://app.numara.works. The processing of personal data there is described in the platform privacy information. No data is collected on the website itself when you click the link.

Recipients

Recipient	Purpose	Place of processing
Google Cloud EMEA Limited, Dublin, Ireland (processor)	Hosting of the website and application server, access logs, database	Netherlands (europe-west4)
Resend, Inc., San Francisco, USA (processor)	Sending the email about your demo request to our team	USA

Data is not disclosed to any other third parties, in particular not for advertising purposes.

Transfers to third countries

• Google: Data is processed in the EU. Access by the parent company Google LLC (USA) cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the European Commission’s Standard Contractual Clauses also apply.
• Resend: The transfer to the USA is based on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Retention periods

Data	Retention period
Access data (request logs)	30 days
Log entry for a demo request (email address, number of locations)	400 days
IP address for request limiting	in memory only, not stored
Emails relating to requests	until the request is closed; where statutory retention obligations apply, until they expire

Your rights

You have the following rights with regard to personal data concerning you:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR).

Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of processing carried out before the withdrawal. An email to mail@numara.works is sufficient to exercise your rights.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR (Art. 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where data is processed for direct marketing, you may object to this at any time without giving reasons (Art. 21(2) GDPR).

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin, Germany

Further information

You are under no statutory or contractual obligation to provide us with personal data. Without your contact details, however, we cannot answer an enquiry.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Data security

The website and the application server can only be reached via a TLS-encrypted connection (HTTPS). We also use security headers which, among other things, prevent the pages from being embedded in other websites and prevent unapproved content from being loaded.

Changes to this policy

We update this privacy policy when the website, our service providers or the legal situation change. The version published on this page applies; the date of the current version is shown at the top.