Skip to content

Legal

Data Privacy

How NautilusLog collects, processes, and protects your personal data in accordance with the GDPR.

I. Controller and Data Protection Officer

The controller responsible for data processing on this website is:

NautilusLog GmbH
c/o Digital Hub Logistics Hamburg
Am Sandtorkai 32
20457 Hamburg, Germany
Email: ahoy@nautiluslog.com
Phone: +49 40 432 803 53

II. General Data Processing Information

Extent of Processing

NautilusLog collects and uses personal data only to the extent necessary to provide a functional website and our services. Personal data is generally only collected and used with the user's consent. An exception applies where obtaining prior consent is practically impossible and where data processing is permitted by applicable law.

The types of data we process include:

  • User data (visited websites, content interests, access times)
  • Meta and communication data (device information, IP addresses, access status)

Legal Basis

Processing of personal data relies on the following legal bases under GDPR Article 6:

  • User consent — Art. 6(1)(a)
  • Contract performance — Art. 6(1)(b)
  • Legal obligations — Art. 6(1)(c)
  • Legitimate interests — Art. 6(1)(f)

Data Deletion and Retention

Personal data is deleted or blocked as soon as the purpose for storage no longer applies. Retention beyond this point occurs only where required by European or national law. Data is erased at the end of any legally prescribed retention period unless continued storage is necessary for contract performance or initiation.

III. Website Access and Log Files

Each time you access our website, our system automatically collects data and information from your device. The following data is collected:

  • Visited website and URL referrer
  • Data transmission volume
  • Browser type and version
  • Operating system
  • IP address
  • Date and time of access

Log files are retained for malfunction analysis only and will be erased at the latest within seven days. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in website security and optimisation). Data is not used for marketing analysis or identity inference.

IV. Cookie Usage

Technical Cookies

Session and flash cookies are technically necessary for the operation of the website. They enable browser recognition across page changes and are stored without explicit consent on the basis of Art. 6(1)(f) GDPR (legitimate operational interest). User data from technical cookies is not used to determine identity or create user profiles.

Persistent Cookies

Optional persistent cookies may be used to enhance user-friendliness, effectiveness, and security. These require your affirmative consent under Art. 6(1)(a) GDPR. You may withdraw consent at any time through your browser settings.

V. Web Analytics

NautilusLog uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer data to servers in the United States.

Google uses cookies to evaluate website usage and compile activity reports. Processed data may be used to create pseudonymous user profiles. The service operates with activated IP anonymisation; IP addresses are shortened within EU/EEA member states before any transfer. The legal basis is Art. 6(1)(a) GDPR.

Google Analytics is loaded only after you give consent through our cookie banner. Until then no analytics cookies are set and no data is sent to Google (Google Consent Mode, denied by default). You can change or withdraw your choice at any time via the “Cookie settings” link in the website footer.

You can also prevent analytics tracking by:

VI. Your Rights as a Data Subject

1. Right to Information

You may request confirmation of whether we process personal data about you and obtain details regarding the purposes of processing, categories of data, recipients, storage duration, your rights to rectification or erasure, how to lodge a complaint, the origin of data, and any third-country transfer safeguards.

2. Right to Rectification

You can request correction of inaccurate or incomplete personal data without undue delay.

3. Right to Restricted Processing

You may request that we restrict processing in the following circumstances:

  • The accuracy of data is disputed while we verify it
  • Processing is unlawful but you prefer restriction over erasure
  • The data is no longer needed by us but you require it for legal claims
  • An objection to processing is pending

4. Right to Erasure

You may request erasure of personal data where it is no longer needed for the original purpose, consent has been withdrawn, you have successfully objected, processing is unlawful, or a legal obligation requires deletion. We will inform other processors of your request where applicable.

Exceptions apply where processing is necessary for freedom of expression, legal obligations, public health matters, or the assertion of legal claims.

5. Right to Notification

Where rectification, erasure, or restriction occurs, we will notify all recipients of your data unless this is impossible or would involve unreasonable effort. You may request information about those recipients.

6. Right to Data Portability

Where processing is based on consent or a contract and is carried out by automated means, you may receive your personal data in a structured, commonly used, machine-readable format and transfer it to another controller without obstruction from us. Direct controller-to-controller transfer is available where technically feasible.

7. Right of Objection

You may object to processing based on Art. 6(1)(e) or (f) GDPR at any time, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests or the processing is required for legal claims. For direct marketing, you may object at any time with immediate effect.

8. Right to Revoke Consent

You may withdraw consent to data processing at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

9. Automated Decisions and Profiling

You have the right not to be subject to decisions made exclusively by automated processing — including profiling — that produce legal or similarly significant effects, unless such processing is necessary for a contract, permitted by law with appropriate safeguards, or based on your explicit consent. Where automated decisions are made, you have the right to request human review, express your view, and contest the decision.

10. Right to Lodge a Complaint

Without prejudice to any other administrative or legal remedy, you have the right to lodge a complaint with a supervisory authority — in particular one located in the EU member state of your habitual residence, place of work, or the place of the alleged infringement — if you consider that processing of your personal data infringes the GDPR.

Last updated: 2026. Questions? Contact us at ahoy@nautiluslog.com.