Privacy Policy for Apps
Privacy Policy for App Use:
Privacy Information for Our Web Apps
Effective: October 18, 2026 This page provides information about the processing of personal data in our in-house developed web apps. The privacy policy at www.nicolai-christ.com/datenschutz applies to our website. General Privacy Information
Effective: October 18, 2026 This page provides information about the processing of personal data in our in-house developed web apps. The privacy policy at www.nicolai-christ.com/datenschutz applies to our website. General Privacy Information
1. Data Controller
Nicolai Christ Performance Architects S.L.
Plaza de la Marina 2, 6th floor, left
29015 Málaga, Spain
Email: datenschutz@ncf.solutions
2. Scope
This notice applies to the applications we have developed in-house—Appointment Booking, Cards, Survey, and Vote—as well as to the short links and QR codes we use. It is supplemented by the application-specific privacy notices provided below. The privacy policy at www.nicolai-christ.com/datenschutz applies to our website.
3. Purposes of Processing and Legal Bases
The applications are used to organize appointments, collaborate on digital bulletin boards, and conduct surveys and polls. The data processed and the relevant legal bases under Article 6(1) of the GDPR are described in the application-specific information.
To ensure secure and reliable technical operation, we may process IP addresses, access times, browser and device information, and technical log data. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest lies in ensuring functionality, troubleshooting, and IT security.
4. Hosting and Email Delivery
Our applications and their data are hosted on a virtual private server (VPS) provided by IONOS in Germany. We have a data processing agreement with IONOS in accordance with Article 28 of the GDPR. For application-related emails, we use SMTP services from DomainFactory; we also have a data processing agreement with DomainFactory in accordance with Article 28 of the GDPR. In particular, recipient addresses, message content, and technical delivery data are processed. The legal basis for sending these emails is the legal basis specified for the respective application in accordance with Article 6(1) of the GDPR.
We receive and process emails that you send to us (for example, to datenschutz@ncf.solutions) via Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin). We also have a data processing agreement with Microsoft in accordance with Article 28 of the GDPR. Microsoft stores the data in the EU; for potential access from the U.S., Microsoft is certified under the EU–U.S. Data Privacy Framework (Article 45 of the GDPR).
5. Cookies, Analytics, and Fonts
Our applications do not use analytics or advertising tracking technologies, nor do they use advertising cookies. To the extent that technically essential cookies or comparable storage technologies are used, they serve to ensure the availability, functionality, or security of the applications. According to Article 22.2 of Spanish Law 34/2002 (LSSI-CE), no prior consent is required for these. The fonts used are loaded exclusively from our own server; there is no connection to Google Fonts.
6. Recipients, Visibility, and Transfers to Third Countries
Access to personal data is restricted to authorized individuals and the service providers used for hosting and email delivery, to the extent necessary. Depending on the app settings, posts or results may be accessible to other participants or, if publicly shared, to third parties as well. Our applications are used worldwide. If you use them from outside the European Economic Area (EEA), you yourself transmit your information to us; our emails to you are also sent to the address you have provided. This does not constitute a transfer by us to a third country. Content that is visible to other participants (for example, posts on a wall or poll results) can also be accessed by them from outside the EEA. Beyond that, we do not transfer personal data to countries outside the EEA. To the extent that service providers we use carry out such transfers, the requirements of Articles 44 et seq. of the GDPR apply.
7. Retention Period and Deletion
We store personal data only for as long as is necessary for the respective processing purposes or as long as statutory retention requirements or other legally permissible grounds justify further storage. As soon as the data is no longer needed for the respective purposes and there are no legal grounds for its further retention, it will be deleted. To the extent that Spanish law requires the blocking of personal data, this is carried out in accordance with Article 32 of Organic Law 3/2018 (LOPDGDD).
Specifically: Technical log data is automatically deleted after a few weeks. Cookies become invalid once their purpose has been fulfilled and can be deleted from the browser at any time. Backup copies are overwritten regularly; as a result, deleted data is also removed from the backups. The criteria specified for each individual application apply to that application.
8. Rights of Data Subjects
Subject to the statutory requirements, data subjects have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). In cases where processing is based on legitimate interests, data subjects have the right to object on grounds relating to their particular situation pursuant to Article 21(1) of the GDPR. Consent that has been given may be withdrawn at any time with future effect in accordance with Article 7(3) of the GDPR. Please direct any inquiries to datenschutz@ncf.solutions.
9. Right to File a Complaint
Under Article 77 of the GDPR, you have the right to file a complaint with a competent data protection supervisory authority, in particular with the Spanish Agencia Española de Protección de Datos (AEPD), www.aepd.es.
10. Governing Law
The governing laws include, in particular, Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Spain’s Organic Law 3/2018 (LOPDGDD; in particular, Articles 11 and 32), and, where applicable, Law 34/2002 (LSSI-CE; in particular, Article 22.2). Supplementary national provisions of other EU member states may apply where relevant.
Privacy Notice – Appointment Scheduling
1. Purposes and Types of Data The application is used to schedule, coordinate, organize, and conduct appointments. The data processed includes names, email addresses, phone numbers (if applicable), preferred appointment times, availability, and voluntary information. The data is also used for appointment confirmations and reminders.
1. Purposes and Types of Data The application is used to schedule, coordinate, organize, and conduct appointments. The data processed includes names, email addresses, phone numbers (if applicable), preferred appointment times, availability, and voluntary information. The data is also used for appointment confirmations and reminders.
2. Legal Basis
To the extent that processing is necessary for the performance of a contract or for pre-contractual measures taken at the request of the data subject, it is carried out pursuant to Article 6(1)(b) of the GDPR. Other business-related scheduling arrangements are carried out, to the extent justified by a balancing of interests, pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest is the efficient and reliable organization of appointments.
3. Recipients and Visibility
When coordinating schedules with multiple people, names and availability may be visible to other invited participants, depending on the selected setting. Application-related emails are sent via DomainFactory.
4. Retention Period
Personal data is stored for the purpose of organizing, conducting, and, if necessary, following up on the respective appointments. As soon as the data is no longer needed for these purposes and there are no statutory retention requirements or other legally permissible grounds for retention, it will be deleted. This applies to bookings once the appointment has taken place and been followed up on, and to appointment scheduling once a date has been set or the scheduling process has been completed.
5. Required Information
The information necessary for scheduling is required in order to complete the booking or coordination. Any additional information is optional.
Privacy Policy – Cards
1. Purposes and Types of Data
Cards is used for the collaborative collection, editing, and display of ideas and content on digital bulletin boards. The data processed may include names, text posts, comments, uploaded files, and technical usage data; for registered users, it may also include their email address if they wish to receive notifications about changes.
2. Legal Basis
Processing is carried out, to the extent justified by the necessary balancing of interests, pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest consists of conducting interactive events, collaborating with others, and documenting work results.
3. Posts and Visibility
Posts can be published without the author’s name being visible. This does not necessarily mean that no personal data is processed from a technical standpoint. Depending on the settings, message boards and files may be accessible only to authorized users or to the public. Content made public can also be viewed and shared by third parties.
4. Retention Period
Personal data, posts, and uploaded files are stored for the purpose of providing the bulletin board, facilitating collaboration, and, where necessary, for documentation and follow-up. Once these purposes no longer apply and there are no statutory retention obligations or other legally permissible grounds, the relevant personal data will be deleted. Posts, comments, and files will remain stored until the author or we delete them, or until the bulletin board is deleted, whichever comes first.
Privacy Policy – Survey
1. Purposes and Types of Data
Survey is used to conduct and analyze surveys, questionnaires, and feedback requests. The data processed includes responses, ratings, free-text entries, and, where applicable, names, contact information, and technical usage data. The purposes include, in particular, evaluation, quality assurance, and the improvement of our services.
2. Legal Basis
Standard feedback and evaluation surveys are conducted, to the extent justified by the necessary balancing of interests, pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest is to analyze feedback and improve our services. To the extent that processing is based on consent, Article 6(1)(a) of the GDPR applies. For special categories of personal data under Article 9(1) of the GDPR, an additional exception under Article 9(2) of the GDPR is required, such as explicit consent under subparagraph (a).
3. Anonymity and Visibility
Surveys can be set up to be anonymous or to track individual respondents. Whether responses can be linked to specific individuals is disclosed before the survey begins. For anonymous surveys with personal invitations, your participation may be recorded—but not your specific responses—so that reminders are sent only to those who have not yet responded. A survey is considered anonymous only if identification is not possible even using technical identifiers and other available information. Depending on the configuration, results may be displayed to authorized individuals or other participants.
4. Retention Period
Personal data and survey results are stored for the purposes of conducting, evaluating, and, if necessary, following up on the survey. As soon as these purposes no longer apply and there are no statutory retention requirements or other legally permissible grounds, personal data will be deleted or effectively anonymized. This is the case once the survey has been completed and evaluated; at that point, we delete the survey or the information that identifies individuals (such as the names and email addresses of invited participants). Results that have been effectively anonymized may continue to be used for statistical and documentary purposes.
5. Voluntary Participation
Participation in voluntary surveys is not mandatory. Information required for the specific purpose of the survey will be identified accordingly.
Privacy Policy – Vote
1. Purposes and Types of Data
Vote is used to conduct and evaluate interactive polls, ratings, and opinion surveys at events, workshops, and meetings. The data processed includes votes, response options, ratings, free-text entries, and, where applicable, names, participant IDs, and technical usage data.
2. Legal Basis
Standard interactive polls are conducted, to the extent justified by the necessary balancing of interests, pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in the interactive design of events and the analysis of public opinion. To the extent that processing is based on consent, Article 6(1)(a) of the GDPR applies. For special categories of personal data under Article 9(1) of the GDPR, an additional exception under Article 9(2) of the GDPR is required, such as explicit consent under subparagraph (a).
3. Anonymity and Visibility
Votes are stored anonymously. To ensure that each device can vote only once per question, Vote stores a random identifier in a cookie; votes are assigned to this identifier, not to a specific person. You provide a name only if you choose to do so, such as when asking the moderator a question or participating in a quiz. Questions and contributions can be displayed on the screen along with this name. Depending on the settings, results can be displayed only to the organizer or also to other participants.
4. Retention Period
Personal data and voting results are stored for the purposes of conducting the event, evaluating the results, and, where necessary, documenting and following up on the event. As soon as these purposes no longer apply and there are no statutory retention requirements or other legally permissible grounds, personal data will be deleted or effectively anonymized. This is the case once the event has concluded and been followed up on; at that point, we will delete the presentation along with the votes, contributions, and names. Results that have been effectively anonymized may continue to be used for statistical and documentary purposes.
5. Voluntary Participation
Participation in voluntary votes is not mandatory. If required information is not provided, it may not be possible to cast a vote.
};
if (document.readyState === 'loading') {
document.addEventListener('DOMContentLoaded', run);
} else {
run();
}
})()
Copyright 2026 Nicolai Christ Performance Architects S.L.| All rights reserved.
The offers and content on this site are expressly intended only for entrepreneurs within the meaning of §14 BGB (German Civil Code).