Legal
Privacy Policy
Last updated: October 2026
This is a translation provided for convenience. In case of any discrepancy, the German version of this document prevails.
01
Controller
The controller responsible for processing personal data on this website is:
NeuBit Owner: Anatoliy Neuberger Bertha-Kipfmüller-Straße 8 85051 Ingolstadt Deutschland
Phone: 0176 45808040 Email: [email protected]
02
General information
We take the protection of your personal data seriously.
We process personal data only within the framework of the applicable data protection law, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, email address, phone number, IP address, and photo and video recordings.
03
Visiting our website
When you visit our website, technically necessary data that your browser transmits automatically is processed.
This may include in particular:
- IP address
- date and time of access
- pages and files requested
- browser type and version
- operating system
- referrer URL
- amount of data transferred
- technical information about the device used
The processing serves to provide the website technically, to ensure its security and stability, and to detect and fend off attacks and abusive access.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
04
Hosting and domain – netcup
Our website neu-bit.de, the associated domain and the server we operate for the website and the online gallery are provided by netcup GmbH.
netcup GmbH Emmy-Noether-Straße 10 76131 Karlsruhe Deutschland
The website and the online gallery run on a VPS at netcup used by NeuBit.
In the course of technical operation, personal data may be processed, in particular IP addresses and technical access and connection data.
The processing serves the technical provision, security and stability of our website and of the services running on the server.
The processing is based on Art. 6(1)(f) GDPR.
Where netcup processes personal data on our behalf, it does so on the basis of a data processing agreement under Art. 28 GDPR.
netcup provides a corresponding data processing agreement (AVV) for this purpose.
For more information on how netcup processes personal data, please see netcup’s privacy policy (in German).
05
Cloudflare
Our website uses services of Cloudflare, Inc., in particular to provide the DNS infrastructure and to secure and technically optimise the website.
Cloudflare may act as an intermediary, security and network service between the visitor and our server at netcup.
When our website is accessed, technical information such as IP address, time stamp, information about the browser and device, and information about network traffic may be processed via the Cloudflare network.
The processing serves in particular:
- the secure and stable availability of our website,
- protection against abusive traffic,
- the detection and prevention of attacks,
- the technical optimisation and delivery of the website.
The legal basis for using Cloudflare is Art. 6(1)(f) GDPR. Our legitimate interest lies in particular in securing our website and delivering it reliably.
Cloudflare processes certain data as a processor in the course of its services and provides a Data Processing Addendum (DPA) for this purpose. For transfers of personal data from the European Economic Area to third countries, Cloudflare relies, among other things, on appropriate safeguards such as standard contractual clauses.
For more information on how Cloudflare processes data, please see Cloudflare’s privacy policy.
06
SSL/TLS encryption
Our website uses SSL/TLS encryption.
You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.
The encryption protects the transmission of personal and confidential data from access by third parties.
07
Contacting us by email
If you contact us by email, we process the personal data you provide.
This may include in particular:
- name
- email address
- phone number
- event date
- venue
- details of the event
- services requested
- any other information you choose to give us
The processing serves to handle your enquiry, to communicate with you and, where applicable, to prepare or perform a contract.
The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract, or otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in handling customer enquiries.
For our email inbox we use the Gmail service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Emails you send us and the notifications of enquiries from our contact form are stored there.
A transfer of personal data to Google LLC in the United States cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision.
The legal basis for using Gmail is Art. 6(1)(f) GDPR. Our legitimate interest lies in reliable and secure email communication.
For more information, please see Google’s privacy policy.
08
Contact and enquiry form
Our website offers the option of contacting us through a contact or enquiry form.
The following data in particular may be processed:
- name
- email address
- phone number
- event date
- venue
- message
- any other details you choose to provide
The details marked as required fields are necessary for us to handle your enquiry.
The processing serves to handle your enquiry and, where applicable, to prepare a contract.
Your enquiry is stored on our server at netcup and also sent by email to our Gmail inbox (see section 07). We use the service provider Resend (Resend, Inc., USA) to send that email; the details from the form are therefore transferred to the United States.
The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
09
Contact by phone and callback
If you contact us by phone or request a callback through our website, we process the contact details you provide and the information you share in the course of the conversation.
This may include in particular your phone number, your name, and details of your event and the services you would like.
The processing serves to handle your enquiry and to communicate with you.
The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
10
Contact via WhatsApp
Our website offers the option of contacting NeuBit via WhatsApp.
If you use this channel, your phone number and the messages and other content you send may in particular be processed.
WhatsApp or Meta additionally processes data under its own privacy terms. NeuBit does not have full control over that processing.
We use the information sent via WhatsApp to handle your enquiry, to communicate with you and, where applicable, to prepare or perform a contract.
The legal basis for processing by NeuBit is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
11
Online gallery
After events, NeuBit provides digital photos and, where applicable, 360° videos through its own online gallery.
The online gallery runs on NeuBit’s own VPS at netcup. No separate external gallery provider is used.
The gallery can be accessed, for example, through a link or a QR code.
The photos and videos provided may contain personal data, in particular recognisable images of people.
The standard retention period of the online gallery is 3 months, unless a different period has been agreed with the respective customer.
When the retention period ends, the recordings concerned are deleted, unless statutory retention obligations or other legal grounds require them to be kept longer.
When the gallery is accessed, technically necessary data such as IP address, date and time of access, and technical information about the browser and device used may be processed.
12
Photo and video recordings at events
Among other things, NeuBit offers a Magic Mirror / photo mirror and a 360° video platform.
As part of these services, photo and video recordings of event guests may be made. These may constitute personal data.
Responsibility under data protection law depends on the individual event and on the contractual arrangements with the respective client.
Where NeuBit processes photo and video recordings on behalf of an event organiser, it does so under the relevant contractual arrangements and, where applicable, on the basis of a data processing agreement under Art. 28 GDPR.
The respective organiser is responsible for informing the guests appropriately about the making and use of photo and video recordings and, where necessary, for ensuring the relevant legal basis under data protection law.
13
QR codes and digital delivery
Our photo and video services may use QR codes through which guests can access digital photos or videos.
When such a link is opened, technically necessary access data may be processed.
The QR codes serve to provide and retrieve the agreed digital content.
The digital content is provided for the agreed retention period and deleted afterwards.
16
Google Maps
On our contact page you can display a map from the Google Maps service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The map is not loaded automatically. Only when you click “Load map” does your browser connect to Google’s servers. No data is sent to Google before that.
After the click, Google may receive in particular your IP address, the date and time of the request, the page visited and information about your browser and device. Google may use cookies or comparable technologies in doing so.
A transfer of personal data to Google LLC in the United States cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by clicking. It applies to that page view only; on your next visit the map again loads only after a click. You can withdraw your consent at any time with effect for the future by reloading the page.
For more information, please see Google’s privacy policy.
17
No analytics or marketing services
As things stand, our website does not use any analytics or marketing services such as Google Analytics or Meta Pixel.
No user profiles are therefore created for analytics or advertising purposes.
Should analytics, tracking or marketing services be used in future, this privacy policy will be updated accordingly before they are deployed.
18
Retention period
As a rule, we store personal data only for as long as necessary for the respective purpose.
In addition, statutory retention obligations may apply, in particular retention periods under commercial and tax law.
When the respective periods expire, the data is deleted unless there is another legal basis for storing it further.
19
Your rights
Subject to the statutory requirements, you have in particular the following rights:
- right of access under Art. 15 GDPR
- right to rectification under Art. 16 GDPR
- right to erasure under Art. 17 GDPR
- right to restriction of processing under Art. 18 GDPR
- right to data portability under Art. 20 GDPR
- right to object under Art. 21 GDPR
- right to withdraw consent given under Art. 7(3) GDPR
To exercise your rights, you can contact us at any time:
Email: [email protected] Phone: 0176 45808040
21
Data security
We take appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation and unauthorised access.
However, data transmission over the internet can involve security risks despite such measures. Complete protection against access by third parties can therefore not be guaranteed.
22
Updates to this privacy policy
We reserve the right to amend this privacy policy if legal requirements, our services or the technical functions of our website change.
The current version published on this website applies in each case.