Caroline Grosch, operating under the business name “nxtchapter”, takes the protection of your personal data seriously. This Privacy Policy explains what personal data we process when you visit www.nxtchapter.eu (hereinafter: “Website”), why we process it, the legal bases relied on, how long we retain it and what rights you have.
1. Controller
The controller responsible for processing your personal data on this Website is:
Caroline Grosch trading as nxtchapter
Kurfürstenstr. 1
80801 Munich
Germany
Phone: +49 (0)89 - 80044406
Email: hi(at)nxtchapter.eu
Imprint: https://nxtchapter.eu/#imprint
No data protection officer has been appointed. For privacy enquiries and requests relating to your rights, please contact Caroline Grosch at hi(at)nxtchapter.eu.
2. General information about processing
We process personal data only where permitted by applicable law. Depending on how you use the Website or contact us, the categories of personal data may include:
your name;
your email address;
your company name;
the content of your enquiry or message;
where you contact us by post, your name and postal address as shown on the correspondence;
technical data, such as your IP address, browser type and version, operating system, date and time of access, requested pages or files and referrer URL; and
information about your privacy or cookie settings stored by the Website.
You do not generally need to provide personal data merely to browse the informational sections of the Website. Where information is required to respond to an enquiry, the relevant form fields are identified as mandatory.
3. Visiting the Website and server logs
When you access the Website, your browser automatically transmits certain information to the web server. This may include your IP address, the date and time of access, the requested page or file, the referrer URL, browser type and version, operating system and other technical information. We process this information in order to:
establish and maintain a technically secure connection;
make the Website available and technically functional;
detect, prevent and investigate attacks, misuse and other security incidents; and
analyse and improve the stability and performance of the Website.
The legal basis is our legitimate interest under Article 6(1)(f) GDPR in providing a secure and functional Website and protecting our IT systems. Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR may apply. Server-log data is retained for eight weeks and then deleted or anonymised, unless longer retention is required for the investigation of a security incident or for the establishment, exercise or defence of legal claims.
4. Cookies and similar technologies
The Website does not currently use analytics, advertising or other optional tracking services. It uses only technically necessary browser storage to remember your privacy settings. The Website stores the following information in your browser’s local storage under the key “nxtchapter_cookie_consent”:
essential: true, confirming the necessary setting;
analytics: false, recording that analytics is disabled; and
savedAt, recording when the choice was saved.
This information is used to remember and apply your privacy settings and to avoid repeatedly displaying the consent interface. The entry is automatically deleted after six months, after which the Website may ask you to make the choice again. You can reopen the settings through the permanently available “Cookie settings” link in the Website footer. You can also delete local-storage data through your browser settings. Deleting or blocking necessary browser storage may affect the Website’s ability to remember your privacy choice. The technical classification of browser storage under Section 25 of the German Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG), and the related GDPR legal basis, should be confirmed against the final implementation before publication.
5. Contact by email, telephone, post or contact form
If you contact us by email, telephone, post or through the contact form, we process the information you provide in order to respond to your enquiry, handle your request and maintain business communications. This may include your name, email address, company name, the content of your enquiry and, in the case of postal correspondence, your postal address as shown on the correspondence. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries and maintaining business communications. If your enquiry concerns the initiation or performance of a contract, Article 6(1)(b) GDPR may apply instead. Article 6(1)(c) GDPR may apply where processing or retention is required by law. We retain enquiry-related data only for as long as necessary to handle the enquiry. After the enquiry has been handled, the information is deleted unless a longer period is required by law, the information is needed to establish, exercise or defend legal claims, or the enquiry has developed into a client, contractual, invoicing or accounting relationship.
6. Contact form
The Website provides a contact form with the following fields: name, email address, company name and an optional message or enquiry. Name, email address and company name are mandatory. The message field is optional. The form does not accept file attachments. The form is implemented as a client-side email hand-off. The information entered into the fields is not submitted to or stored on the Website server. When you submit the form, your email application is opened and the information is prepared for transmission to hi(at)nxtchapter.eu. The information is processed only if you complete and send the email. The form does not use a separate form-processing provider. Email transmission and mailbox services are provided through IONOS as described in Section 9. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries. Where the enquiry concerns a contract or pre-contractual measure, Article 6(1)(b) GDPR may apply.
7. Links to social-media profiles
The Website contains a normal link to the LinkedIn profile of Caroline Grosch:
https://www.linkedin.com/in/carolinegrosch/
The link does not by itself load LinkedIn content or transmit personal data to LinkedIn merely because you visit the Website. If you follow the link, LinkedIn may process personal data as an independent controller in accordance with its own privacy policy. LinkedIn is operated by LinkedIn Ireland Unlimited Company. Further information is available at https://www.linkedin.com/legal/privacy-policy.
8. Scope of this Privacy Policy
This Privacy Policy describes processing connected with the Website. It does not comprehensively describe all processing carried out in the course of client engagements, customer relationship management, market mapping or other business operations outside the Website. Separate information may be required for those activities.
9. Hosting, email and recipients
We disclose personal data only where permitted by law and only to the extent necessary for the relevant purpose. Access to Website enquiries and the hi(at)nxtchapter.eu mailbox is currently limited to Caroline Grosch, subject to access by providers acting on our behalf. The Website is hosted and business email is provided by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
IONOS processes website and email data on its servers, including technical data, communication data, contractual data and website-access data. An agreement on commissioned processing under Article 28 GDPR has been concluded with IONOS. IONOS uses specialised group companies and sub-processors for parts of its services. Based on the information provided for this draft, only EEA countries are identified for the relevant processing; this should be checked against the current IONOS sub-processor information before publication.
We may disclose data to professional advisers, courts or public authorities where this is legally required or necessary to establish, exercise or defend legal claims.
10. Transfers outside the EU/EEA
Based on the providers and configuration identified for this draft, no routine transfer of Website data outside the European Economic Area (EEA) is intended. IONOS has been identified as using EEA processing locations for the relevant services.
11. Automated decision-making and profiling
We do not use personal data collected through this Website for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
12. Retention period
Unless a specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary to fulfil the purposes for which it was collected. We may retain data for longer where required by statutory retention obligations or where necessary to establish, exercise or defend legal claims. The consent-setting entry in local storage is intended to be deleted automatically after six months. Server-log data is retained for eight weeks. Enquiry data is deleted after handling unless a longer period is required for legal, contractual, invoicing, accounting or tax reasons.
13. Your rights
Subject to the legal requirements, you have the following rights under the GDPR:
Right of access. You have the right to request confirmation as to whether we process personal data concerning you and, where applicable, to obtain access to that data and further information under Article 15 GDPR.
Right to rectification. You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data under Article 16 GDPR.
Right to erasure. You have the right to request the erasure of your personal data under Article 17 GDPR, unless processing is still required for a legally recognised reason, such as compliance with a legal obligation or the establishment, exercise or defence of legal claims.
Right to restriction of processing. You have the right to request restriction of processing under Article 18 GDPR, for example where you dispute the accuracy of the data, the processing is unlawful but you oppose erasure, or we no longer need the data but you require it for legal claims.
Right to data portability. Where the legal requirements are met, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller under Article 20 GDPR.
Right to withdraw consent. Where processing is based on consent, you may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to object to processing based on legitimate interests. You have the right to object, on grounds relating to your particular situation, at any time to processing based on Article 6(1)(e) or (f) GDPR. We may continue processing if we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or if processing is required for the establishment, exercise or defence of legal claims.
Right to object to direct marketing. You may object to the processing of your personal data for direct-marketing purposes at any time. If you object, we will stop processing your data for those purposes. To exercise your rights, please contact hi(at)nxtchapter.eu or write to Caroline Grosch at the postal address stated in Section 1.
14. Right to lodge a complaint
If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with a competent data-protection supervisory authority. You may contact the authority responsible for our place of business or another supervisory authority competent under Article 77 GDPR, including in the EU/EEA Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority identified for this draft is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Telephone: +49 (0)981 180093-0
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example where the Website, the services used or the applicable legal requirements change. The current version will be published on this Website. The date shown at the beginning of this Privacy Policy indicates when it was last updated.
