Privacy policy

1. Who is responsible

The controller under the GDPR is Napradha Software Solutions UG (haftungsbeschränkt), Adolfstr. 5, 14165 Berlin, Germany, represented by its managing director Narayanaraj Dharmalingam, e-mail hello@napradha.com.

2. In short

This website has no account, no newsletter, no contact form, no cookies and no analytics service. It processes personal data in two situations: when your browser loads a page (server logs, which are also counted into anonymous statistics), and when you write to us by e-mail.

3. Hosting and server logs

The website runs on nCloud, our own cloud platform, on servers rented from Contabo GmbH, München, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). The servers are located in Germany.

When a page is requested, the server records the IP address, date and time, the page requested, the referring page, the browser identification and the response status. This is necessary to deliver the website and to detect and investigate attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). The logs are rotated automatically and deleted once they are no longer needed for these purposes.

4. Our own visitor statistics

We count page requests ourselves, from the server logs described above, to see which pages are read. This happens for every visit and cannot be switched off, so it is built to make identifying you impossible rather than merely discouraged.

We also count clicks on our e-mail addresses and on the links to our products (NestSafe, Paas24, Chatellite), because those never reach our server otherwise. When you click one, the page asks our own server for an empty address such as /e/contact/hello, which is logged and counted exactly like a page request. It names only which link was clicked, and nothing else is sent.

No cookie is set and nothing is stored on your device. The web server shortens your IP address before writing it down — the last part of an IPv4 address and everything below the first 48 bits of an IPv6 address are replaced by zeros — and the shortened address is used once, to derive a country, and then discarded. The referring page is reduced to its domain name, and the part of a web address after “?” is never recorded. There is no visitor identifier of any kind: no cookie, no device fingerprint, and no hash of your address and browser. That means we cannot tell whether two page views are the same person, and we do not report “unique visitors” anywhere.

The data stays on our own infrastructure in Germany; it is not sent to any analytics provider. Legal basis: our legitimate interest in understanding which content is useful (Art. 6(1)(f) GDPR). Because the logs are collected for security, using them for statistics is a further purpose; it is compatible with the original one (Art. 6(4) GDPR) precisely because the data is shortened first and holds nothing that singles you out. The resulting event records are kept for 90 days, the aggregated counts indefinitely. Country information is derived from the DB-IP Lite database.

5. E-mail

If you write to us, we process your address and your message to answer your enquiry and, where it leads to one, to prepare and carry out a contract (Art. 6(1)(b) GDPR), otherwise on the basis of our legitimate interest in answering (Art. 6(1)(f) GDPR). Our mailbox is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We keep correspondence as long as the enquiry needs it, and business correspondence for the periods required by German commercial and tax law.

6. Fonts, images and other resources

Fonts, images and all other files of this website are served from its own server. No font service, analytics service or content delivery network is contacted when you load a page.

7. Links to other websites

Links to our products' websites and to other sites are plain links. Nothing is sent to those sites until you click one; from then on, their own privacy policies apply. A click on a link to one of our products is counted on our own server as described in section 4.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to hello@napradha.com.

You may also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

There is no automated decision-making or profiling.