Privacy Policy

1. Controller

Cemil Caliskan — COLIBRI Germany / COLIBRI NEXUS
Hasenpfühlerweide 6, 67346 Speyer, Germany
Email: contact@colibri-nexus.com
Phone: +49 162 9773765

A dedicated data protection officer is not required under Art. 37 GDPR / § 38 BDSG. Data protection inquiries can be sent to the address above.

2. Legal bases

Depending on the processing activity, we rely on: Art. 6 (1)(a) GDPR (consent), Art. 6 (1)(b) GDPR (contract or pre-contractual measures), Art. 6 (1)(c) GDPR (legal obligation) and Art. 6 (1)(f) GDPR (legitimate interests, in particular secure operation of our website and business communication).

3. Hosting and server log files

The website is delivered via the Lovable Cloud infrastructure. When you visit the website, technical access data is automatically transmitted by your browser and processed by the hosting infrastructure to enable delivery and to ensure stability and security (Art. 6 (1)(f) GDPR):

• IP address (in shortened / anonymised form where technically possible)
• date and time of the request
• requested URL, HTTP status and transferred data volume
• referrer URL and user-agent string

These log entries are stored short-term for operational and security purposes and are not merged with other data sources.

4. Transport encryption

All connections to this website are encrypted via TLS (HTTPS) to protect the confidentiality and integrity of the data transferred between your browser and our servers.

5. Cookies and similar technologies

This website does not use tracking cookies, analytics cookies, marketing cookies or third-party advertising technologies. Only technically necessary storage may be used to remember your language preference (e.g. a local browser storage entry). No consent under § 25 TDDDG is required for such strictly necessary storage.

6. Contact form

When you submit our contact form, we process the data you provide (name, and — if entered — company, country, email, phone, message and the selected interface language) in order to respond to your inquiry and to initiate or execute business communication.

Legal basis: Art. 6 (1)(b) GDPR for inquiries aimed at a (potential) contract and Art. 6 (1)(f) GDPR for general business inquiries. Submissions are stored in our backend database (Lovable Cloud / Supabase, EU region) and are only used to handle your request. Storage duration follows the purpose of the inquiry and applicable statutory retention obligations (e.g. commercial and tax law).

7. Email and telephone communication

If you contact us by email, telephone or messenger, we process the personal data you provide (e.g. name, contact details, content of the message) for the purpose of handling your inquiry and any resulting business relationship. Telephone conversations are not recorded.

8. Transactional emails

Emails triggered by your interaction with the website (e.g. confirmation of a contact request) are sent through our email infrastructure via a verified subdomain of colibri-nexus.com. Delivery metadata may be processed by the email provider to ensure deliverability and to handle bounces and complaints, on the basis of Art. 6 (1)(b) and (f) GDPR.

9. International business communication

COLIBRI NEXUS operates internationally. Business contact data (such as name, company, role, business email, business phone) of buyers, suppliers, service providers, consultants and our Brazilian partner office may be processed for the purpose of executing international projects, sourcing, export and import coordination and partner communication (Art. 6 (1)(b) and (f) GDPR). Processing is limited to what is necessary for the respective business purpose.

10. Recipients and processors

Personal data is only disclosed to third parties where necessary for the purposes above or where required by law. Typical categories of recipients are:

• our hosting and backend provider (Lovable Cloud / Supabase) as processor under Art. 28 GDPR;
• our transactional email provider used to deliver messages sent from the website;
• international business partners strictly to the extent required to execute the respective project;
• tax advisors, auditors and authorities where legally required.

11. Transfers to third countries

Where the execution of an international project involves the transfer of personal data outside the European Economic Area (e.g. to our partner in Brazil or to counterparties in the USA, Canada, Turkey or Paraguay), such transfers are based on Art. 44 et seq. GDPR — in particular on adequacy decisions of the European Commission where available, on EU Standard Contractual Clauses, or on the exceptions of Art. 49 GDPR (e.g. necessity for the performance of a contract concluded in your interest).

12. Storage duration

We store personal data only for as long as necessary for the purpose for which it was collected and in line with statutory retention obligations under German commercial and tax law (typically 6 or 10 years). Beyond that, data is deleted or anonymised.

13. Security

We take appropriate technical and organisational measures within the meaning of Art. 32 GDPR to protect personal data against loss, alteration, unauthorised access and other unlawful processing. These measures include transport encryption (TLS), access controls to our backend systems, role-based access, and regular review of our processing activities. No certification claims are made unless explicitly stated in writing.

14. Your rights

Under the GDPR you have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you have the right to withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR).

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). The supervisory authority responsible for the controller is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (LfDI Rheinland-Pfalz).

16. Changes to this policy

We may update this privacy policy to reflect changes in our processing activities or in the applicable legal framework. The current version is always available on this page.