Privacy policy
Last updated: October 2026
General Information
Your personal data (e.g. title, name, address, e-mail address, telephone number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases and storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This data protection declaration only refers to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.
Contact
Purpose of processing
We process your personal data that you provide to us by e-mail, contact form, etc. to answer and process your inquiries. You are not obliged to provide us with your personal data. But without providing your e-mail address, we cannot reply to you by e-mail.
Legal basis
a) If you have given us your express consent to the processing of your data, Art. 6 para. 1a) GDPR is the legal basis for this processing. b) If we process your data for the implementation of pre-contractual measures, Art. 6 para. 1b) GDPR is the legal basis. c) In all other cases (especially when using a contact form), Art. 6 para. 1f) GDPR is the legal basis.
Right to object
You have the right to object at any time to the processing of data which is based on Art. 6 para. 1 f) GDPR and is not for direct advertising purposes for reasons arising from your particular situation. In the case of direct advertising, however, you can object to the processing at any time without giving reasons.
Legitimate interest
Our legitimate interest in the processing is to communicate with you quickly and to answer your inquiries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal advertising. You can protect your interest in data protection by sharing data sparingly (e.g. using a pseudonym).
Recipient categories
Hosting provider, shipping service provider for direct advertising
Storage period
Your data will be deleted if it can be inferred from the circumstances that your inquiry or the matter in question has been finally clarified. If, however, a contract is concluded, the data required by commercial and tax law will be stored by us for the legally specified periods, i.e. regularly ten years (cf. § 257 HGB, § 147 AO).
Right of withdrawal
In the case of processing based on your consent, you have the right to revoke your consent at any time.
Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes technically necessary data (including IP address, date and time, requested page and browser information) in server log files in order to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is stable and secure provision of the website. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.
Cookies and tracking
This website does not set cookies and does not use analytics or tracking services.
Fonts
All fonts are served locally from our server. No connection to third-party servers (e.g. Google Fonts) is made when you visit the website.
Inquiry form
Our inquiry form does not store any data on this website. When you submit it, your own email app opens with a prepared message; we only receive your details once you send that email. The section “Contact” applies to the processing.
Videos (Vimeo)
On our service page we embed videos from Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA). The videos are only loaded once you actively click “play”; before that, no data is sent to Vimeo. After the click, your IP address and technical data are transmitted to Vimeo; we use the “Do Not Track” option. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR).
External services via links
Links to WhatsApp (WhatsApp Ireland Ltd.) and Google Maps (Google Ireland Ltd.) only open the respective service when you click them. From then on, the provider’s privacy policy applies.
Your rights as a data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:
- Right to information: Within the scope of Art. 15 GDPR, you can request information about your personal data processed by us.
- Right to rectification: If the information concerning you is not (any longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
- Right to erasure: You can request the erasure of your personal data under the conditions of Art. 17 GDPR.
- Right to restriction of processing: Within the framework of the requirements of Art. 18 GDPR, you have the right to request a restriction of the processing of the data concerning you.
- Right to data portability: According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
- Right to revoke the data protection declaration of consent: According to Art. 7 para. 3 GDPR, you have the right to revoke your data protection declaration of consent at any time. The legality of the processing carried out on the basis of the consent until the revocation is not affected by this.
- Right to lodge a complaint with a supervisory authority: If you are of the opinion that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement) in accordance with Art. 77 GDPR.
Please also note your right to object under Art. 21 GDPR:
a) General: justified objection required If the processing of your personal data is carried out - to protect our overriding legitimate interest (legal basis according to Art. 6 para. 1 f) GDPR) or - in the public interest (legal basis according to Art. 6 para. 1 e) GDPR), you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR. In the event of an objection, we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
b) Special case of direct advertising: simple objection is sufficient If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object to this processing at any time and without giving reasons; this also applies to profiling, insofar as it is connected with such direct advertising. If you object to the processing for direct advertising purposes, the personal data concerning you will no longer be processed for these purposes.
Responsible for data processing
Nikolic GmbH
Gahlenfeldstr. 42–44
58313 Herdecke
Phone: +49 2330 800460
Email: post@nikolic.info
