Privacy policy

1. Controller

NanoFract GmbH
Alt Salbke 6–10
39122 Magdeburg, Germany
E-mail: info@nanofract.com

2. This website

An information site with an enquiry form. No cookies are set. There is no tracking, no consent banner and no non-essential access to your device (section 25 TDDDG). No third-party embeds (fonts, maps, videos, social plugins). LinkedIn appears only as a text link.

3. Hosting and server logs

The host is Hetzner Online GmbH, Germany. It acts as a processor (Art. 28 GDPR).

When you open a page the web server processes: IP address, date and time, URL requested, referrer and user agent. The purpose is delivery and abuse protection. The legal basis is Art. 6(1)(f) GDPR. We delete server log files after 7 days.

4. Enquiry form

Via POST /api/anfrage we process: material, project details (feed form, target size, quantity, timeframe, application, processes tried so far), name, e-mail address, company, and whether you want a non-disclosure agreement.

Name, e-mail, company and material are required. Without them we cannot process the enquiry.

The purpose is handling the enquiry and initiating an order. The legal basis is Art. 6(1)(b) GDPR.

We reply by e-mail to the address you provide.

We keep the enquiry until it has been handled, otherwise at most twelve months, unless a longer statutory duty applies.

To prevent abuse we store the IP address for 60 seconds after a send. The legal basis is Art. 6(1)(f) GDPR.

Acknowledgement on the form

This sentence appears under the form. The box is not pre-ticked. It is not consent.

I have taken note of the information in the privacy policy (Art. 13 GDPR).

Sending via SMTP2GO

The enquiry is sent via SMTP2GO (Sand Dune Mail Limited, New Zealand) as a processor (Art. 28 GDPR). Sending and storage take place in a data centre in the EU. This is a transfer to New Zealand (Art. 13(1)(f) GDPR); the adequacy decision 2013/65/EU applies. The processor stores data only as long as sending and proof of sending require.

E-mail mailbox

After sending, the enquiry is held in our mailbox at Microsoft Ireland Operations Ltd., Dublin, as a processor (Art. 28 GDPR). Storage is in the EU (EU Data Boundary). Residual transfers to the United States take place under the EU-US Data Privacy Framework or standard contractual clauses (Art. 13(1)(e) and (f) GDPR, Art. 44 et seq. GDPR).

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Write to info@nanofract.com.

Complaint: State Commissioner for Data Protection of Saxony-Anhalt, Otto-von-Guericke-Straße 34a, 39104 Magdeburg, Germany.

Last updated: 5 September 2026