Privacy policy

1. Controller

NLTS Global Analytics s.r.o., Malá 43/6, 301 00 Plzeň, Czech Republic – Email: info@nlts.eu

2. Hosting and server logs

This website is a static corporate presentation delivered via Cloudflare (provider: Cloudflare, Inc., USA, with EU infrastructure). When you visit, Cloudflare processes technically necessary connection data (IP address, time, requested URL, user agent, referrer) to deliver the site, maintain security and prevent abuse. Legal basis: Art. 6(1)(f) GDPR. Transfers to the USA may occur as part of Cloudflare services; Cloudflare relies on Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

3. Audience measurement (Cloudflare Web Analytics)

We use Cloudflare Web Analytics for anonymised measurement of page views and performance. The service does not set cookies and does not store personal profiles. It processes aggregated usage data (e.g. pages viewed, referrers, approximate location, device type, performance metrics). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding site usage and performance). You may object via usual browser settings or by emailing info@nlts.eu.

4. Google Analytics

We use Google Analytics 4 to analyse website usage (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). Measurement ID: G-5MX5XJ2RJG. The measurement script is loaded from googletagmanager.com. Cookies or comparable identifiers are set or read on your device. Data processed include truncated IP address, device/browser information, page views (path, title, referrer), site language/locale, and interaction events such as scroll depth, clicks on contact channels (email/phone) and outbound clicks to our consumer portals. We do not use Google Ads, remarketing or ad personalisation on nlts.eu. Transfers to the USA may occur; Google relies on Standard Contractual Clauses and/or the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR (consent via the cookie notice). Google Analytics is loaded only after you consent (Consent Mode: no analytics storage without consent). You can withdraw or change consent at any time via “Cookie settings” in the footer. More information: https://policies.google.com/privacy

5. Consent and storage of your choice

We store your Google Analytics choice locally in your browser (localStorage key nlts-eu-consent-v1) so the notice is not shown on every visit and we can apply your preference. This storage is required to manage your consent. Without consent we do not load Google Analytics; hosting logs and Cloudflare Web Analytics continue as described above.

6. Contact

If you contact us by email (info@nlts.eu), phone (+49 30 2204402180) or post, we process the data you provide to handle your request. Details on the customer support system, AI-assisted handling, the telephone hotline and incoming mail are set out in sections 6a to 6d. Legal basis: Art. 6(1)(b) and (f) GDPR. nlts.eu itself does not operate a contact form; requests via forms on our brand websites are handled as described in section 6a.

6a. Customer support system

We handle email and contact-form requests in customer service software from Help Scout Inc., 131 Tremont Street, Boston, MA 02111, USA, acting as a processor under Art. 28 GDPR solely on our instructions. Name, email address and the content of the communication are processed. Transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Legal basis: Art. 6(1)(b) GDPR, otherwise (f) (legitimate interest in orderly handling of requests). Requests relating to one of our brands (selbstauskunft.de, rundfunkbeitrag-24.de, deutsche-rentenauskunft.de, prozesskostenhilfe.de, inkassochecker.de, boni-check.at) are forwarded internally to the relevant mailbox; the privacy policy of the respective brand also applies.

6b. AI-assisted handling of support requests

To handle your requests we use an AI language model. This applies to email and contact-form requests, calls to our telephone hotline (see section 6c), and letters and file attachments you send us. The model assigns your request to a matter type, reads the related case data and prepares a draft reply from text modules we have approved. In certain categories – for example status updates, sending documents or explanations of an invoice – we send the reply automatically; such an email is marked as automatically generated, and you may at any time request review by a staff member by replying to the email. Requests that involve a decision about your rights (in particular cancellations, refunds, disputed claims, deadlines) and requests from lawyers, authorities or concerning data-subject rights are always handled by a staff member.

Data processed: content and history of your request, subject line, email address; for calls the call transcript; for letters the scan; for attachments the file content; from our case system name, customer and invoice number, invoice amount, payment and dunning status, order date, processing and shipping status of your order, and details of a cancellation or withdrawal. Bank details and payment data of our payment provider are not transmitted.

Provider: Anthropic PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA, as a processor under Art. 28 GDPR via the commercial API. Anthropic does not use your data to train its own models and stores them only briefly for abuse prevention (30 days). Transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Legal basis: Art. 6(1)(b) GDPR (handling requests relating to a contract or pre-contractual steps), otherwise Art. 6(1)(f) GDPR (legitimate interest in fast and consistent replies). If your request contains health data you provided for your order, we process it on the basis of the consent given for that purpose (Art. 9(2)(a) GDPR); no automated reply is sent in those cases.

Retention: we store support requests for 90 days after final handling. If the request relates to a contract or a claim, we keep it for evidence until the regular limitation period expires (three years to year-end), and for ongoing proceedings until they end.

6c. Telephone hotline with voice assistant

Our telephone hotline (+49 30 2204402180) is operated by an AI voice assistant; we inform you of this at the start of every call. The call is converted to text for handling; audio recording and transcript are deleted at the provider after 60 days at the latest. The transcript is handled like a written request under section 6b; you receive our reply in writing at the email address of your order. On the phone we disclose case data only after identification via invoice number and a further feature of your order.

Provider: smao GmbH, Glogauer Straße 5, 10999 Berlin, as a processor under Art. 28 GDPR; processing and hosting exclusively in Germany (sub-processors for hosting, language-model operation and telephony seated in Germany). Your call data are not transferred to third countries; only reply texts generated by the voice assistant may go to a US-based provider for speech synthesis, which processes them in the EU without storage (EU-U.S. Data Privacy Framework, plus Standard Contractual Clauses). The full list of sub-processors is published by the provider at https://trust.smao.ai/subprocessors.

Legal basis: Art. 6(1)(b) GDPR, otherwise (f). By continuing the call after the opening notice you agree to conversion into text; alternatively you can reach us in writing at any time at info@nlts.eu.

6d. Incoming mail

Letters to our German correspondence address (c/o CAYA GmbH, Postbox 733865, 96035 Bamberg) are opened by a scanning provider, digitised and delivered to us electronically; the original is kept for up to 90 days and then destroyed or forwarded to us. Provider: Caya GmbH, Ritterstraße 24–27, 10969 Berlin, as a processor under Art. 28 GDPR; scanning centres, OCR and hosting (Frankfurt) exclusively in the EU, no third-country transfer. The scan is then evaluated under section 6b. Legal basis: Art. 6(1)(b) and (f) GDPR.

7. Retention

Server logs are retained by the hosting provider only as long as needed for security and operations. Cloudflare Web Analytics data is aggregated and retained under Cloudflare’s retention periods. Google Analytics data is retained according to the retention setting in our Google Analytics account (currently up to 14 months). Your consent choice remains in the browser until you change it via “Cookie settings”, clear local storage, or the key is overwritten. For retention of support requests see section 6b.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, objection (especially against processing based on Art. 6(1)(f) GDPR) and data portability, and the right to withdraw consent at any time with effect for the future. Please send requests to info@nlts.eu. Complaints may be filed with the Czech supervisory authority (Úřad pro ochranu osobních údajů, UOOU) or your local data protection authority.