Privacy Policy

1. Responsible Party

The party responsible for data processing on this website is:

naid GmbH
Aussere Bayreuther Strasse 55
90409 Nuremberg, Germany
Email: info@naid.io

The responsible party decides, alone or jointly with others, on the purposes and means of the processing of personal data.

2. Data Protection Contact

Contact for data protection questions:

Nawid Tabibi
Email: info@naid.io

3. Hosting and Server Log Files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in a data center in Nuremberg (Germany). A data processing agreement (DPA, Auftragsverarbeitungsvertrag) in accordance with Art. 28 GDPR is in place with Hetzner.

To deliver the website, your IP address is technically processed, as it is required for the connection between your device and our server. The legal basis is our legitimate interest in a secure and functional provision of the website (Art. 6(1)(f) GDPR). We do not currently store server log files of page visits.

4. Cookies

The publicly accessible pages of this website (homepage, imprint, privacy policy) set no cookies and do not embed any third-party services.

Only within the protected administration area are technically necessary cookies set, to secure the login process and the session:

  • oauth_state and oauth_code_verifier — securing the login process (CSRF and PKCE protection), lifetime approx. 10 minutes
  • harp_session — maintaining the logged-in session, lifetime approx. 8 hours

These cookies are strictly necessary for the service explicitly requested by the user (login). Their storage is permitted under Section 25(2) No. 2 TDDDG (German Telecommunications-Telemedia Data Protection Act) without consent; the legal basis for the associated processing is Art. 6(1)(f) GDPR. A cookie banner is not required for this.

5. Fonts

This website exclusively uses fonts hosted locally on our own servers. When the pages are accessed, no connections are established to third-party servers (e.g. Google Fonts), and no personal data (in particular your IP address) is transmitted to third parties.

On our website we link to the external appointment booking service Google Calendar Appointments (calendar.google.com). Only when you actively click such a link will you be redirected to the provider's page, where data (e.g. your IP address) may be processed by the provider. No data is transmitted to Google through our own website as a result. Google's privacy policy applies.

7. Your Rights

With respect to your personal data, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach.

8. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements, or to implement changes to our services. The new privacy policy will then apply to your renewed visit.

Last updated: July 2026