Privacy policy
The German version is authoritative. This page sets out which data nuboretreats.com and nubopilates.com process, for what purpose and for how long. The website does not need a cookie banner: there are only technically necessary cookies for the concept access and the chosen language, and the statistics run without cookies.
Draft: marked details are placeholders. The policy will be reviewed by our lawyer before launch.
Controller
[Company name and legal form], [Address], Austria, email hallo@nuboretreats.com.
Hosting and server logs
The website runs on our own server in the EU with [Hosting provider, location]. When a page is opened, the server stores technically necessary data (IP address, time, address requested, browser) in logs for [Retention period]. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Waiting list (Brevo)
Anyone who joins the waiting list provides an email address and an interest. The registration only takes effect once it has been confirmed by email (double opt-in). We use Brevo (Sendinblue SAS, Paris, France) for this, a provider based in the EU. The legal basis is consent (Art. 6(1)(a) GDPR); it can be withdrawn at any time through the unsubscribe link in every email or by email to us. The data is stored until consent is withdrawn.
Enquiries from studios, investors and hotels (Notion, email)
We store enquiries made through the partner pages in our CRM at Notion (Notion Labs, Inc., San Francisco, USA) and receive them as an email through Brevo. Studios receive the studio concept as a PDF by email. Transfers to the USA are covered by the standard contractual clauses of the European Commission. The legal bases are consent and the steps taken towards a partnership (Art. 6(1)(a) and (b) GDPR). We delete the data as soon as it is no longer needed for the enquiry, and after [Retention period] at the latest.
Concept access (cookie)
Anyone who opens the protected concept with a personal access code receives a technically necessary cookie (30 days) so that the access remains in place on the next visit. Each successful access is recorded in our CRM with the label of the code and the time, in order to prepare the conversations with studios and investors (Art. 6(1)(b) and (f) GDPR).
Language (cookie and local storage)
The website is available in German and English. So that it opens in the chosen language, a cookie named “nubo_lang” and an entry of the same name in the browser's local storage (localStorage) store only the value “de” or “en” for one year. No tracking is involved, and the information is not passed to third parties.
Statistics (Umami)
To measure reach we use Umami, hosted by us on our own server. Umami sets no cookies and stores no personal data; IP addresses are not stored. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR).
Fonts and third-party services
We serve the fonts ourselves; opening a page does not create a connection to Google or other third-party services. No social media plug-ins, tracking pixels or videos are embedded.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. To do so, write to hallo@nuboretreats.com. Complaints are handled by the Austrian Data Protection Authority (dsb.gv.at).
Last updated
[Date]. We update this policy when the website or the legal position changes.