Privacy Policy

Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is Potentia Nexus GmbH, Hamburg.

Potentia Nexus GmbH, Hamburger Str. 181A, 22087 Hamburg, Germany. Represented by its Managing Directors: Mehdi Ghahreman and Nadjia Ghahreman. Phone: +49 40 328 909 210. Email: management@potentia-nexus.com.

For data protection enquiries, please contact: datenschutz@potentia-nexus.com.

Accessing the Website

When you access this website, the hosting provider processes the IP address, date and time of access, requested URL, referrer, browser type and operating system in server log files. This processing is carried out to deliver and secure the service on the basis of Article 6(1)(f) GDPR. Log data is deleted after a short period.

Fonts are served from our own server. No connection is established to Google Fonts, Google Analytics, Google Tag Manager, reCAPTCHA or similar services.

Website Analytics

We use Plausible Analytics to measure website traffic. Plausible operates without cookies or identifying individual users; no personal data is stored, and no data is shared with third parties for advertising purposes. The legal basis is Article 6(1)(f) GDPR.

Form Protection

To protect against automated submissions, we use a hidden verification field and Cloudflare Turnstile. Technical information relating to the visit is transmitted to Cloudflare. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is preventing abusive enquiries.

To limit the number of enquiries from each sender, we store a checksum derived from the IP address using a secret value, rather than the IP address itself.

Contact and Submission Forms

We process the data provided in the form to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual measures and, in other cases, Article 6(1)(f) GDPR.

Enquiries are deleted once they have been fully processed, unless statutory retention obligations apply. Retention periods under commercial and tax law are generally six or ten years.

Partner Portal

For a partner portal account, we process your name, email address, organisation, country, and the information and documents submitted during verification. The legal basis is Article 6(1)(b) GDPR and, where we are required to carry out identification and verification, Article 6(1)(c) GDPR.

Access to documents, changes to permissions and changes to account status are logged. Documents are provided exclusively through time-limited links.

Recipients and Transfers to Third Countries

We use data processors for hosting, databases, file storage and sending system emails. Agreements pursuant to Article 28 GDPR are in place with these processors.

[PLACEHOLDER: Names and registered locations of the data processors used, and information on transfers to third countries — to be provided by Legal & Data Protection]

Your Rights

You have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), and data portability (Article 20), as well as the right to object to processing based on legitimate interests (Article 21 GDPR).

You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is the Hamburg Commissioner for Data Protection and Freedom of Information.