Privacy Policy

1. Controller

nativDigital GmbH
Stahltwiete 21
22761 Hamburg
Germany

Managing Directors: Sebastian Brost, Kristina Lizenberger
kontakt@nativdigital.com

Commercial Register: 158114
Registry Court: Hamburg

2. Hosting

Our website is hosted by: ALL-INKL.COM – Neue Medien Münnich, Owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany

When you access our website, the following data is automatically stored in server log files:

  • IP address

  • Date and time of request

  • Pages viewed

  • Browser type and version

  • Operating system

  • Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation).
Log files are automatically deleted when no longer required.

3. Cookies & Consent Management (Usercentrics)

We use the Usercentrics Consent Management Platform to obtain and manage your cookie and tracking consent.

Usercentrics stores:

  • Your consent choices

  • Rejections

  • Timestamp

  • Browser & device data

Legal basis: Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(a) GDPR (consent)

You can change or revoke your consent at any time via the Cookie Settings.

4. Contact via HubSpot

We use the HubSpot CRM system (HubSpot, Inc., USA / HubSpot Ireland Ltd.) to process contact form submissions.

The data you enter (e.g. name, email, message) will be processed via HubSpot.

Data processed includes:

  • to process your enquiry

  • for communication

  • on organisation in the CRM system

Legal basis:

  • to respond to inquiries (Art. 6(1)(b) GDPR)

  • Art. 6 Abs. 1 lit. a DSGVO (Einwilligung beim Absenden des Formulars)

with your consent when submitting the form (Art. 6(1)(a) GDPR)

Legal basis for international transfers: EU Standard Contractual Clauses (SCCs).

Further information: https://legal.hubspot.com/de/privacy-policy

5. Google Analytics 4

We use Google Analytics 4 (GA4) provided by Google Ireland Limited.

Google Analytics is only activated after consent (via Usercentrics).

Data processed:

  • IP address (anonymized within the EU)

  • Device & browser information

  • Interaction and usage behavior

  • Click paths

  • Page views

Legal basis: Art. 6(1)(a) GDPR (consent).

Data transfers to the USA

  • rely on Standard Contractual Clauses (SCCs).Datenübermittlung in die USA:Auf Basis von Standardvertragsklauseln (SCCs)

  • Additional security measures by Google in accordance with GDPR requirements

Retention period: 14 months.

Opt-out options:
https://tools.google.com/dlpage/gaoptout/

https://tools.google.com/dlpage/gaoptout/

 

6. LinkedIn Insight Tag

We use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) for analytics and conversion tracking.

Data processed:

  • IP address (shortened)

  • Browser & device information

  • Page views

  • LinkedIn User ID (if logged in)

  • Conversion events

Legal basis: Art. 6(1)(a) GDPR (consent).

Data may be transferred to the USA under Standard Contractual Clauses (SCCs).

Opt-out:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

7. Integration of Third-Party Services

We integrate external content and services within our Online Services (e.g., embedded videos, fonts, tools).

When loading external services, the provider must process your IP address to deliver the content.

Examples include:

  • embedded videos (YouTube, Vimeo)

  • CDN providers

Legal basis:

  • Art. 6(1)(a) GDPR (consent) for tracking-related services

  • rt. 6(1)(f) GDPR (legitimate interest) where technically necessary

8. Rights of Data Subjects

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

  • Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

9. Withdrawal of Consent

You may revoke your consent at any time via Usercentrics or by adjusting your browser settings.

10. Data Deletion

Personal data is deleted according to Art. 17 GDPR when:

  • to Art. 17 GDPR when:

  • storage is no longer required, or

  • no statutory retention obligations exist.

11. Changes to This Privacy Policy

We update this Privacy Policy as needed to reflect changes in law, technology, or our processing activities.

Please review this page regularly.