Privacy policy

Who we are

The controller for personal data processed through this website, within the meaning of the EU General Data Protection Regulation (GDPR), is:

The short version

• We don't use cookies, analytics or tracking of any kind.
• We don't load fonts, scripts or other content from third parties. Everything is served from our own domain.
• We only receive personal data that you choose to send us, for example when you email us.

What we process and why

Visiting this website

This website is hosted on Cloudflare. To deliver the pages and protect the site against attacks and abuse, Cloudflare processes the technical data your browser sends with every request: your IP address, browser and device information, the page requested, the referring page, and the date and time.

Legal basis: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR). We don't use this data to identify you or build a profile, and we don't store website access logs ourselves.

If you switch language or close the hint pointing to the German version, your browser saves that choice locally (localStorage). It is never sent to us.

Emailing us

When you email us, for example to request a demo or a pilot, we process your email address, your name and anything else you include, so we can reply and follow up on your request.

Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).

Social media links

Our footer links to our LinkedIn, X and Instagram profiles. These are plain links: nothing is shared with those platforms unless you click one. Once you are on a platform, its own privacy policy applies.

Who receives the data

• Cloudflare, Inc. (hosting and network security), acting as our processor.
• Google Ireland Limited (Google Workspace, our email provider), acting as our processor, for messages you send us.

We don't sell personal data or share it for advertising.

Transfers outside the EU

Cloudflare and Google may process data outside the European Economic Area, including in the United States. These transfers are covered by Cloudflare, Inc.'s and Google LLC's certifications under the EU–U.S. Data Privacy Framework and by the European Commission's standard contractual clauses.

How long we keep it

We keep email correspondence for as long as needed to handle your request and any business relationship that follows, and longer only where the law requires it, for example for accounting records. We then delete it.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we process it;
• receive your data in a portable format;
• object to processing based on our legitimate interests.

To use any of these rights, write to max@nokslabs.com. We reply within one month.

You also have the right to lodge a complaint with the supervisory authority in Cyprus, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy), or with the authority in the EU country where you live or work.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.