Privacy policy
This English version is provided for convenience. Only the German version is legally binding.
Information pursuant to Art. 13 GDPR on the processing of your personal data via sightadel.com.
Below, pursuant to Art. 13 GDPR, we inform you about how your personal data is processed via the website sightadel.com (hereinafter "Website") and about the rights you have. Personal data means any information relating to an identified or identifiable natural person.
Controller
neonotu GmbH
Represented by: Armin Haller
E-mail: [E-mail address – please enable JavaScript or use the contact form]
Telephone: +49 89 2000 7975 0
Website: https://www.neonotu.com/de/
Data protection officer
Our data protection officer can be contacted at:
E-mail: [E-mail address – please enable JavaScript or use the contact form]
Address: Edelsbergstraße 8 80686 München Germany
Collection and storage of personal data
a. Data processing when visiting the Website (server log files)
When you access our Website, your browser automatically causes information to be stored in log files. This includes in particular:
IP address
Date and time of the request
Browser type and version
Operating system
Referrer URL
This data is technically necessary to display the Website correctly and to ensure its stability and security. The data is stored for up to 30 days and then deleted, unless a security-related analysis is required.
The legal basis for this data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the Website.
b. When using the contact form
When you fill in the contact form, we collect the following data:
Name
Company name
Business e-mail address
Telephone number
Content of the enquiry
This data is processed exclusively for the purpose of handling your enquiry and, where necessary, contacting you. The data is deleted as soon as the enquiry has been fully handled, unless statutory or other retention obligations apply.
Processing is carried out pursuant to Art. 6(1)(b) GDPR where the enquiry relates to the performance of pre-contractual measures.
To protect against automated requests, our forms use ALTCHA. Your browser solves a small computational task; no cookies are set and no data is transferred to third parties. The form data is transmitted to and processed by the backend of our platform (api.sightadel.com, hosted by Hetzner in Germany). The legal basis for spam protection is Art. 6(1)(f) GDPR.
Cookies and similar technologies
Our Website may use "cookies" and comparable technologies to ensure the functionality of the site and to make it easier to use. Cookies are small text files that are stored on your device and do not cause any harm there. We distinguish between the following categories:
Technically necessary cookies
These cookies are required for the Website to function properly (e.g. to display the site, to use the contact form or to store your cookie settings). Processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in a functioning website. Consent is not required for this.
Optional cookies
We only use optional cookies if you have previously given your express consent (Art. 6(1)(a) GDPR). These cookies help us, for example, to analyse user behaviour or to optimise marketing measures. You can withdraw your consent at any time via the cookie banner.
You can configure your browser so that no cookies are stored or only certain cookies are permitted. You can delete cookies that have already been stored at any time. If technically necessary cookies are deactivated, the functionality of the Website may be restricted.
Web analytics with Matomo
To understand how our website is used and to improve it, we use the open-source software Matomo. Matomo is operated for us by the service provider netalytics (sonar.netalytics.de), with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR.
Without your consent, Matomo works without cookies and stores no information on your device. In particular, we process: pages visited, date and time of access, referrer URL, browser, operating system, screen resolution, language setting and a shortened IP address. We do not link this data to you as a person. If you give your consent via the banner, Matomo also sets cookies that recognise returning visits.
The legal basis for measurement without cookies is our legitimate interest in improving our website pursuant to Art. 6(1)(f) GDPR. The legal basis for the cookies is your consent pursuant to Art. 6(1)(a) GDPR and section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). We store your choice in your browser's local storage (technically necessary pursuant to section 25(2) no. 2 TDDDG).
You can withdraw your consent to cookies at any time with effect for the future via the “Cookie settings” link in the footer of every page. You can object to measurement without cookies pursuant to Art. 21 GDPR by activating “Do Not Track” in your browser; we respect this setting and no measurement takes place. The analytics data is deleted after 14 months at the latest.
Newsletter
We offer a newsletter in which we provide information about news concerning our platform, product updates, security-related information, events and promotional content (e.g. product announcements, offers, marketing information).
1.1 Newsletter subscription
We need your e-mail address to send you the newsletter. Subscription takes place via a double opt-in procedure: after subscribing, you receive an e-mail in which you must confirm your subscription. Your e-mail address is only activated for the newsletter after this confirmation.
The legal basis for sending the newsletter, including advertising, is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with section 7(2) no. 3 of the German Act against Unfair Competition (UWG).
Your consent covers both information about our platform and promotional content (e.g. information about new features, offers, events or services).
1.2 Mailing service providers
We use external service providers (e.g. e-mail or marketing providers) to send the newsletter. Processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.
We will provide a current list of the service providers used on request.
1.3 Logging
In connection with newsletter subscription and dispatch, the following data is logged:
Time of subscription and confirmation
IP address at the time of subscription
Technical metadata (e.g. browser, device type)
Open and click rates (if you have consented)
Performance measurement (open and click rates) is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
Logging is carried out on the basis of Art. 6(1)(f) GDPR in order to be able to demonstrate the subscription process and to optimise the newsletter technically.
1.4 Withdrawal and unsubscribing
You can withdraw your consent at any time. You can unsubscribe via the link at the end of every newsletter. Once you have unsubscribed, your e-mail address is removed from the newsletter mailing list without undue delay.
NIS2 Scoring (nis2scoring.eu)
At www.nis2scoring.eu we offer a free self-assessment on implementing NIS2. The site can also be reached at nis2-scoring.eu and under the endings .de and .com; these addresses redirect to www.nis2scoring.eu. The controller is neonotu GmbH as named above.
a. Self-assessment without contact details
You choose your country, your sector and the size of your company and answer the questions. Your browser sends this information to our server, which calculates the assessment and shows it immediately. We do not store your answers. We do not ask for your name, company or email address for this step.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide the assessment.
b. Report by email
If you request the detailed report, we collect:
Name
Company name
Email address
optionally: your request for feedback on the result
From your answers we create a PDF report and send it to the email address you provide. We do not store the finished report. The legal basis is Art. 6(1)(b) GDPR, as you request the report from us.
We also store your answers and form details on our server in encrypted form for 30 days, so that we can send you the report again if it does not arrive. After that, they are deleted automatically. The legal basis is our legitimate interest in reliable delivery (Art. 6(1)(f) GDPR).
In addition, our team receives an internal message with your name, your company, your email address and a summary of the result (overall score, classification, weakest areas, number of open points). We enter the same details in our CRM system Twenty, which we run on our own server at Hetzner Online GmbH in Germany. We use them to answer questions about the report and to inform you about suitable Sightadel offers. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in maintaining business contacts. If you asked for feedback, we will get in touch with you; the legal basis is then Art. 6(1)(b) GDPR.
You can object to the use of your details for contacting you at any time, for example via our contact form. We will then delete the data. Without an objection, we delete it no later than 24 months after the last contact, unless statutory retention obligations apply.
c. Protection against misuse
To protect against automated requests, your browser solves a small computing task when you submit the form. No cookies are set and no data is passed to third parties. We also limit the number of requests per IP address and per email address. For this we store these details briefly, for no more than 24 hours. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in operating the service securely.
d. Web analytics and server log files
We also use Matomo on www.nis2scoring.eu as described in the section “Web analytics with Matomo”, with the same consent request. For server log files, the section on data processing when visiting the website applies.
Disclosure of data
Data is only disclosed to third parties if this is necessary to handle your enquiry or if we are legally obliged to do so. Recipients may in particular be IT service providers, hosting providers or communication service providers.
Your rights
You have the following rights at any time:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Special information on the right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR. Where processing is based on consent, you can withdraw that consent at any time. An informal notification to us is sufficient to exercise your rights.
Security of data processing
We use technical and organisational measures to protect your data against loss, misuse or unauthorised access.
Hosting and technical service providers
Where external service providers (e.g. hosting providers) are used, this is done on the basis of data processing agreements pursuant to Art. 28 GDPR. Our Website and the platform are hosted by Hetzner Online GmbH in data centres in Germany. The website www.nis2scoring.eu and the sending of its emails run at creoline GmbH in data centres in Germany, with which a data processing agreement pursuant to Art. 28 GDPR is in place.
Processing by our hosting providers is based on Art. 6(1)(f) GDPR (operation of a secure and reliable IT infrastructure).
Contacting the data protection supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
Validity and amendment of this privacy policy
This privacy policy is currently in force. We reserve the right to amend this privacy policy where necessary due to changes in the law, technical developments or new features.
Last updated: 9 October 2026