1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Nordline GmbH i. G. (in formation)
Templiner Straße 10
10119 Berlin, Germany
Represented by the Managing Director, Sven Hock
Email: [email protected]
2. Overview
This website is deliberately minimal. It does not use analytics, tracking, advertising or marketing cookies, and it does not embed content from third parties such as social media plugins, maps or videos. All fonts are hosted on our own infrastructure, so no data is transmitted to font providers when you visit the site.
Personal data is processed in only two situations: when you visit the website (hosting), and when you contact us by email.
3. Hosting and server log data
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). When you access the website, your browser automatically transmits information that is processed by Cloudflare in order to deliver the site. This may include:
your IP address; the date and time of the request; the page or file requested; the referring URL; the browser type and version; and the operating system of your device.
This processing is necessary to deliver the website securely and reliably and to protect it against attacks and misuse. The legal basis is our legitimate interest in the secure and efficient provision of our website pursuant to Art. 6 (1) (f) GDPR. The data is not combined with other data sources and is retained only for as long as required for these purposes.
We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Because Cloudflare is based in the USA, data may be transferred to a third country. Cloudflare is certified under the EU–US Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR. Further information is available in Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Where Cloudflare sets technically necessary cookies to protect the website against automated attacks, this is done on the basis of § 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as such storage is strictly necessary to provide the service you have requested.
4. Contact by email
If you contact us by email, we process the information you provide — typically your name, email address and the content of your message — in order to handle your enquiry and any follow-up questions.
Where your enquiry relates to the conclusion or performance of a contract, the legal basis is Art. 6 (1) (b) GDPR. In all other cases, the legal basis is our legitimate interest in responding to enquiries addressed to us pursuant to Art. 6 (1) (f) GDPR.
We delete your data once it is no longer required for the purpose for which it was collected, unless statutory retention obligations — in particular under commercial and tax law — require us to keep it for longer.
5. Your rights
Under the GDPR, you have the following rights with regard to your personal data:
the right of access (Art. 15 GDPR); the right to rectification (Art. 16 GDPR); the right to erasure (Art. 17 GDPR); the right to restriction of processing (Art. 18 GDPR); and the right to data portability (Art. 20 GDPR).
Right to object. Where we process your data on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise any of these rights, an informal email to [email protected] is sufficient.
6. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
7. No obligation to provide data; no automated decision-making
You are not legally or contractually obliged to provide personal data. Without the technical data described in section 3, however, the website cannot be displayed. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
8. Changes to this privacy policy
We will update this privacy policy if the website or the underlying legal requirements change. The current version is always available on this page.
Last updated: September 2026