Draft – have it legally reviewedThis privacy policy is a draft and has not yet been legally reviewed. Placeholders in square brackets must be completed before publication.
Privacy policy
This English version is provided for convenience; the German version is legally binding.
1. Controller
NetBoosting GmbHZeilweg 44
60439 Frankfurt am Main
Germany
Phone: +49 69 1561117
Email: hello@netboosting.de
Data protection officer: [if appointed: name and contact – to be clarified]
2. Summary
- This website does not set cookies.
- We do not use analytics, tracking or advertising tools.
- Fonts are not loaded from third parties. The Schibsted Grotesk typeface is hosted on this website's own server; no data is sent to third parties.
- No third-party content is embedded, for example no videos, maps or social media plugins.
- The website does not store any data in your browser.
- We only process personal data when you contact us via the request form, by email or by phone, and in the server log files required for operation.
3. Hosting and server log files
This website is hosted by [hosting provider, registered office and server location – to be decided]. When a page is requested, the server automatically processes the following data:
- IP address of the requesting device
- date and time of access
- page or file requested and amount of data transferred
- referrer (the previously visited page, if transmitted)
- browser and operating system (user agent)
- HTTP status code
The purpose is to deliver the website and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. Log files are deleted after [number – to be decided] days. A data processing agreement under Art. 28 GDPR will be concluded with the hosting provider. [status – to be clarified]
4. Request form (Placement Audit)
When you use the request form, we process the details you enter: name, company, email address and strategy or fund, and, if provided, phone number, website, target audiences, competitors, message and preferred language. We also store the time of the request.
The purpose is to handle your request and prepare a possible engagement. The legal bases are Art. 6(1)(b) GDPR (pre-contractual measures at your request) and your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, for example by email to hello@netboosting.de.
Your details are transmitted in encrypted form to our server at [provider and location of the form backend – to be decided] and stored there. If no engagement follows, we delete the data once your request has been dealt with, at the latest after [number – to be decided] months. If an engagement follows, the statutory retention periods apply.
To protect against automated requests, the form contains a hidden field that people do not see. We do not use cookies or a CAPTCHA service for this.
If the form is unavailable, the page offers to prepare an email in your own email program. No data is transmitted to us until you send that email yourself.
5. Contact by email or phone
If you contact us by email or phone, we process your details to handle your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR. Emails are processed by [email provider – to be decided].
6. Recipients and transfers to third countries
We do not pass your data on to third parties, except to service providers we use as processors (hosting, form backend, email). No transfer to countries outside the EU or EEA is planned. [to be checked depending on the providers chosen]
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR) and withdraw consent at any time (Art. 7(3) GDPR). An informal message to hello@netboosting.de is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information in Wiesbaden.
8. Automated decision-making
We do not make automated decisions within the meaning of Art. 22 GDPR and do not create profiles of visitors to this website.
9. Data security
The website and the request form are transmitted in encrypted form over HTTPS.
10. Changes
We update this privacy policy when the website or the services we use change. The version published here applies.
Status: draft of 17 October 2026