Privacy information.
This information explains how Nimblique Studio handles public-site visits and inquiries sent through the contact form.
Controller and contact
Nimblique Studio, Oldendorf., 25588 Schleswig-Holstein, Germany.. Privacy contact: info@nimblique.studio.
Contact-form data
The form processes name, work email, company or project, website, inquiry type, subject, message, privacy acknowledgement. The data is used only to assess and respond to the inquiry.
Purpose and legal basis
Inquiries connected to a possible agreement are handled to take requested pre-contractual steps under Article 6(1)(b) GDPR. Other relevant inquiries are handled for the legitimate interest in operating the studio and responding to useful communications under Article 6(1)(f) GDPR.
Security metadata
The endpoint uses Same-origin form token, minimum completion time, hidden honeypot, and short-lived rate limiting are enforced by the contact endpoint. A strictly necessary HttpOnly contact-security cookie expires after two hours.
Hosting
The website runs on an unmanaged Hetzner cloud server in Germany. Site access logging is disabled; dedicated warning and error logs may contain limited request metadata and are rotated for no more than 14 days.
Email delivery
The production server sends inquiry email through the Nimblique Studio Google Workspace encrypted SMTP relay. No automatic confirmation email is sent. The visitor email is used only as Reply-To.
Storage and retention
The website does not store inquiries in an application database or queue; submission content is not written to application logs. A short-lived one-way keyed rate-limit identifier and attempt timestamps are retained for up to 15 minutes. Delivered inquiry email remains only as long as needed to handle the request and meet applicable legal obligations.
International transfers
Google Workspace may process mailbox data in countries where Google or its subprocessors operate; restricted transfers are governed by the applicable Google Cloud Data Processing Addendum transfer mechanisms. This statement does not claim a tenant data-region setting that has not been verified.
No unrelated use
Inquiry data is not sold, used for unrelated marketing, added to mailing lists, or used to train public or private AI models.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You may also lodge a complaint with a competent data-protection authority. Contact info@nimblique.studio to exercise a right.
Analytics and external links
No analytics provider, advertising tracker, third-party embed, or non-essential cookie is loaded in the production build. External marketplace and product links lead to services with their own privacy practices.