// Privacy

Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Party” in this privacy policy.

How do we collect your data?

Your data is collected in part by you providing it to us. This may be data that you enter in a contact form, for example. Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system or time of page access).

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data.

2. Responsible Party

nh labs UG

Coethner Str. 61

04155 Leipzig

Germany

Phone: +49 172 7 6464 37

Email: lab@nh-labs.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

3. Data Collection on This Website

Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not share this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries directed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.

Enquiry by Email or Phone

If you contact us by email or phone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

Consultation Booking

When you book a consultation via our website, we collect your name, email address, optionally your phone number, as well as the desired date and time. This data is used exclusively for scheduling and confirming the appointment. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures).

4. Payment Processing

For payment processing, we use the service Stripe (Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA). Payment data (e.g. credit card number, expiry date, CVC) is processed directly by Stripe. We do not store any complete payment data ourselves. Further information can be found in the Stripe Privacy Policy. The legal basis is Art. 6 (1) (b) GDPR (contract fulfilment).

5. Email Dispatch

For sending confirmation and notification emails, we use the service SendGrid (Twilio Inc., 375 Beale Street, Suite 300, San Francisco, CA 94105, USA). Your email address and, where applicable, your name are transmitted to SendGrid. The legal basis is Art. 6 (1) (b) GDPR (contract fulfilment) or Art. 6 (1) (f) GDPR (legitimate interest).

6. Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The use of the hoster is in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR).

7. Your Rights

You have the following rights with respect to personal data concerning you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

8. SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock icon in your browser bar.

Last updated: February 2026