Privacy Policy

Last updated: May 2026

1. Data controller

Nupact GmbH
c/o Nitin Sahai, Ehrenbergstraße 2
10245 Berlin, Germany
Email: contact@nupact.ai

For full legal details see our Impressum.

2. What data we collect and why

Server logs. When you visit nupact.ai, our web server automatically records your IP address, browser type, referring URL, and the pages you request. This data is used solely to ensure technical operation and security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Log data is deleted within 30 days.

Contact by email. If you contact us at contact@nupact.ai, we store your email address and message content to respond to your enquiry. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). Data is deleted once the enquiry is resolved, unless a contractual relationship follows.

Site analytics (on consent only). If you accept cookies, we use Google Analytics (via Google Tag Manager) to collect anonymised data about how visitors use this site — pages visited, session duration, and general location (country/city level). No advertising data is collected. Legal basis: Art. 6(1)(a) GDPR. You can withdraw consent at any time via "Cookie Settings" in the footer.

Meeting bookings (Calendly, on consent only). If you accept cookies and click "Book a Call", you interact with the Calendly scheduling widget. Calendly, Inc. (USA) will collect your name, email address, and calendar availability to arrange a meeting. Legal basis: Art. 6(1)(a) GDPR. Calendly's privacy policy: calendly.com/privacy.

3. Third-party services

Google Tag Manager & Google Analytics (on consent only). Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Anonymised usage data may be transmitted to Google's servers in the USA. Google LLC participates in the EU–US Data Privacy Framework. Google's privacy policy: policies.google.com/privacy. GTM Consent Mode v2 is configured to prevent any data collection until consent is given.

Calendly (on consent only). Calendly, Inc., 271 17th St NW, Atlanta, GA 30363, USA. Loaded only after you accept cookies. Calendly participates in the EU–US Data Privacy Framework.

No other third-party services. Fonts are served directly from nupact.ai (self-hosted). We do not use advertising trackers or social media pixels.

4. Cookies

We use one first-party cookie (nupact_cookie_consent) to store your consent choice for 12 months. If you accept, Google Analytics may set _ga and _ga_* cookies (up to 2 years), and Calendly may set its own session cookies. You can review or change your choice at any time via "Cookie Settings" in the footer.

5. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure ("right to be forgotten") (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7(3))

To exercise any of these rights, contact us at contact@nupact.ai.

6. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Friedrichstr. 219, 10969 Berlin
www.datenschutz-berlin.de