Privacy
This notice explains which personal data is processed on nexcorn.com, for which purposes and on which legal basis.
Last updated: September 2026
1. Controller
The controller responsible for data processing on this website is:
- Operator
- NEXCORN TECHNOLOGIES
- Responsible person
- Deniz YILDIRIM
- Address
- In den Raisen 1
73660 Urbach
Deutschland - Legal contact
- kontakt@nexcorn.com
- Website
- https://nexcorn.com
2. Scope of this notice
This notice applies to the website nexcorn.com, its contact form and the public service-status interface. It describes which personal data is processed when you use this website, for which purposes and on which legal basis.
3. Hosting and technical delivery
This website is a static frontend built with Vite (HTML, CSS and JavaScript, no frontend framework) and is hosted on a virtual server operated by IONOS. When you open a page, your browser connects to that server and the technically necessary connection data — including your IP address — is processed to deliver the content. The site loads no third-party content delivery networks, external fonts or remote scripts; all assets are served from the same system.
4. Server and security logs
The web server and application process technical log data for operation, security, troubleshooting and abuse prevention. Application log entries for contact requests are limited to operational events — a request identifier and the result state (accepted, rejected or delivery failed) — and are designed not to contain message bodies or full form contents. IP addresses are processed transiently for HTTP handling and rate limiting; the application does not store IP addresses in a database. Log retention follows the actual server configuration and is limited to what is necessary for security and troubleshooting.
5. Contact form
If you contact us via the contact form, we process the data you enter: name, surname, email address, subject, message and the selected language — optionally also phone number, website and company. The data is validated server-side and protected by anti-abuse measures (rate limiting, a hidden honeypot field and a minimum fill-time check). These technical safeguards do not create user profiles. Submissions are not stored in a database and are not written to files.
5a. Contact form telemetry
When you submit the contact form, the browser sends first-party session telemetry: the current and landing page, the referring page (host and path only, with query strings and fragments removed), the duration of the current browser session, the number of Nexcorn pages viewed in that session, the browser timezone, screen dimensions, and coarse device/OS/browser metadata derived from the user-agent or client hints. The server records the client IP address, an approximate IP-based geolocation (country, region, city and timezone where available) from a local IP2Location LITE BIN database, and a local proxy / VPN / hosting signal classification (where available) from a local IP2Proxy LITE BIN database. Lookups run entirely offline on the server; the visitor IP is not sent to IP2Location or any third-party IP intelligence service. The IP address is not stored in a database, not added to normal application logs, not exposed back to the browser and not used for tracking. The resulting contact email contains this telemetry so the message can be handled in the right operational context. This processing supports answering your enquiry and preventing abuse.
6. Email delivery
Accepted form submissions are sent by email to our operational mailbox support@nexcorn.com via SMTP. Email is hosted on Namecheap cPanel mail infrastructure. Your email address is used as the reply address so we can respond to you; it is not used as the sender address. For legal enquiries you can write to kontakt@nexcorn.com.
7. Language preference (localStorage)
Your browser stores the selected language (key nx-lang) in localStorage so that the site opens in your preferred language. No cookies are set and no other data is stored in your browser by this site. You can remove the entry at any time via your browser settings.
8. Service status system
The public service status is collected exclusively server-side. The interface (GET /api/status) returns only a generation timestamp, an overall state and the normalized states of seven public service identifiers (e.g. .midgard-www.srv). Your browser never probes internal infrastructure, and no internal addresses, ports or topology are disclosed.
9. Domain and DNS
The domain nexcorn.com is managed through Namecheap; its DNS A record points to the IONOS server that delivers this site. This configuration does not give rise to any additional processing of user data beyond the technical delivery described above.
10. Legal bases
Where the GDPR applies, processing is based on: Art. 6(1)(b) GDPR — handling and answering your enquiry and, where applicable, steps prior to entering into a contract; Art. 6(1)(f) GDPR — our legitimate interest in the secure and stable operation of this website (technical delivery, abuse prevention, security logging); Art. 6(1)(c) GDPR — where statutory retention obligations exist.
11. Recipients / service providers
Personal data is processed by or via the following service providers to the extent technically necessary: IONOS (web hosting, server operation) and Namecheap (domain, DNS and email infrastructure). Data is not sold and not passed on for advertising purposes.
12. Retention
Contact submissions and the associated telemetry are stored in the operational support mailbox. They are normally retained for 180 days after the last substantive interaction, unless a longer period is necessary for active contractual handling, the establishment, exercise or defence of legal claims, or a concrete applicable legal obligation. The support mailbox is reviewed manually for deletion; no automated erasure is currently configured. Technical logs are kept only as long as necessary for security, troubleshooting and abuse prevention under the actual server policy.
13. Your rights
You have the following rights regarding your personal data:
- access to the personal data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
- withdrawal of consent where processing relies on it (Art. 7(3) GDPR)
- lodging a complaint with a supervisory authority (Art. 77 GDPR)
To exercise these rights, write to kontakt@nexcorn.com.
14. Supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for our registered seat is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
15. Security and TLS
When this site is accessed over HTTPS, the connection between your browser and the server is encrypted using TLS. Form submissions are relayed to the mail server over an encrypted SMTP connection. Access to systems and mailboxes is restricted to authorized persons.
16. External links
This website may contain links to external sites. Their operators are responsible for their content and data processing; their own privacy notices apply.
17. Changes to this notice
This notice reflects the current technical implementation of the website. It is updated when the processing changes — for example when new services are added. The version published on this page applies.
18. IP intelligence attribution
This site uses IP2Location LITE data available from lite.ip2location.com for IP geolocation. Proxy, VPN and hosting signal data is provided by the IP2Proxy LITE database, also from lite.ip2location.com, where required by the applicable LITE license. IP2Location does not endorse Nexcorn; the names are used for attribution only. The LITE database files are not redistributed inside the application image or in the Git repository.
19. No advertising analytics or cross-site tracking
This website does not use analytics tools, advertising trackers, marketing cookies, behavioral profiling, third-party embedded content, social-media widgets or CAPTCHA services. Because none of these technologies are implemented, the site does not display a marketing cookie banner. If such a technology is introduced in the future, this notice will be reviewed and updated before it is enabled.