Legal
Privacy
Controller
The controller for data processing on this website is NOVATIS GmbH, Hermann-Oberth-Straße 12A, 90537 Feucht, Germany.
Represented by the managing directors Daniel Cozmuta and Marius Hodirnau. Commercial register: HRB 45734, Amtsgericht Nürnberg. VAT ID: DE461729504.
Phone: +49 176 40722635. Email: office@novatis-gmbh.de.
Hosting
This website is hosted by Netlify. The provider is Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.
Netlify processes technical data transmitted by your browser on our behalf when you open the site. This is necessary to deliver the website securely, reliably and with adequate performance.
The legal basis is our legitimate interest in the secure and reliable provision of this website (Art. 6(1)(f) GDPR).
Server and access data
When the website is opened, technically necessary access data is processed. This typically includes the IP address of the requesting device, the date and time of the request, the address requested, the referrer transmitted, and information about the browser and operating system.
This data is required to deliver the website and to detect attacks or malfunctions. We do not combine it with other data sources.
Contact by email and telephone
This website contains no contact form. Contact is made solely via the email addresses and telephone numbers provided.
If you write or call, we process the information you provide in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry serves the initiation or performance of a contract, and otherwise Art. 6(1)(f) GDPR.
Applications sent to jobs@novatis-gmbh.de are processed for the purpose of the application procedure on the basis of § 26 BDSG and Art. 6(1)(b) GDPR.
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics is loaded only after your explicit consent. Without consent no Google script is loaded and no analytics processing takes place.
We operate Google Analytics with IP anonymisation. Google Signals, advertising features, remarketing and personalised advertising are disabled. We do not transmit names, email addresses, telephone numbers, message content or application data to Google.
We record the pages opened and a narrowly limited set of interaction events (clicking an email address, clicking a telephone number, clicking a careers action).
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw consent at any time via “Cookie settings” in the footer.
Consent management
We store your privacy decision locally in your browser so that we do not have to ask again on later visits. We store only a version number of the consent model, whether you allowed analytics, and the time of your decision.
No identifier that could identify you is stored. The record is kept in your browser’s local storage and is not transmitted to our server.
If the consent model changes materially, we raise the version number and ask for your consent again.
Cookies and local storage
The specific storage mechanisms we use, their purpose and how long they are stored are set out in detail in the Cookie Policy.
Legal bases
- Art. 6(1)(a) GDPR and § 25(1) TDDDG — for Google Analytics, on the basis of your consent.
- Art. 6(1)(b) GDPR — for enquiries serving the initiation or performance of a contract, and for application procedures.
- Art. 6(1)(f) GDPR — for the secure and reliable provision of the website and for answering other enquiries.
- § 26 BDSG — for processing application data.
Recipients and processors
We pass on personal data only where necessary for the purposes described or where we are legally obliged to do so.
As service providers we use Netlify, Inc. (hosting) and — following your consent — Google Ireland Limited (web analytics). Data processing agreements under Art. 28 GDPR are in place with these providers.
Transfers to third countries
When using Netlify and Google Analytics, personal data may be processed in the United States.
For these transfers we rely on the European Commission’s Standard Contractual Clauses and, where the provider concerned is certified, on the EU-US Data Privacy Framework.
There is a risk that US authorities may access transmitted data without the remedies customary in the EU being fully available.
Retention
We retain personal data only for as long as necessary for the respective purposes or as required by statutory retention periods.
Email and telephone enquiries are retained until the matter is concluded and no statutory retention obligations prevent deletion. The retention period for server log data collected by Netlify follows the provider’s specifications.
The retention period for data collected by Google Analytics follows the retention setting configured in the Google Analytics property.
Your rights
- Access to the data processed about you (Art. 15 GDPR).
- Rectification of inaccurate data (Art. 16 GDPR).
- Erasure (Art. 17 GDPR).
- Restriction of processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR).
- Objection to processing based on legitimate interests (Art. 21 GDPR).
Withdrawing your consent
You can withdraw consent at any time with effect for the future. Open “Cookie settings” in the footer and switch off the Analytics category.
After withdrawal, analytics consent is set to denied and Google Analytics is no longer loaded. The lawfulness of processing carried out before withdrawal is unaffected.
Right to complain
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.
Status of this notice
This privacy notice describes the technology actually in use on this website. If that technology changes, we update this notice.
Last updated: 24 August 2026