Privacy
1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
noem GmbH i.G.
Haasestraße 4
10245 Berlin, Germany
Email: write@noem.digital
2. General Information on Data Processing
We process personal data of our users only insofar as this is necessary to provide a functional website along with our content and services. Processing generally takes place only with the user's consent or where a legal basis permits the processing.
The legal bases are, in particular, Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract / pre-contractual measures), and Art. 6(1)(f) GDPR (legitimate interest).
3. Hosting and Provision of the Website
Our website is built and hosted via the provider Lovable:
Lovable Labs Incorporated
lovable.dev
When you access the website, the hosting provider automatically collects and stores information transmitted by your browser in server log files. This typically includes: IP address, date and time of access, the page/file accessed, the volume of data transferred, the browser and operating system used, and the previously visited page (referrer).
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable provision of the website.
Server location / transfer to third countries: As Lovable is a US-based provider, personal data may be transferred to the United States. This transfer takes place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR).
A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
4. Email Communication (Google Workspace)
If you contact us by email, your details (email address, name, content of the message) are processed to handle your inquiry. For our email communication we use Google Workspace, a service provided by
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to the initiation or performance of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).
In the course of using Google Workspace, personal data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses are additionally in place. A data processing agreement pursuant to Art. 28 GDPR is in place with Google.
Your data will be deleted once it is no longer required to achieve the purpose for which it was collected and no statutory retention obligations prevent deletion.
5. Newsletter (Brevo)
Our website gives you the option to subscribe to a free newsletter. For distribution we use the service Brevo, provided by
Sendinblue SAS (Brevo)
17 rue de Salneuve, 75017 Paris, France
Registration via double opt-in: After signing up, you will receive an email asking you to confirm your registration. This ensures that only the owner of the email address can subscribe to the newsletter.
Upon registration, we log the IP address used as well as the time of registration and confirmation. This serves as proof of proper registration and as protection against misuse.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link at the end of every newsletter. The withdrawal does not affect the lawfulness of processing carried out up to that point.
A data processing agreement pursuant to Art. 28 GDPR is in place with Brevo. Brevo stores the data on servers within the EU. Should any transfer to third countries occur (e.g. via sub-processors), it takes place on the basis of the EU Standard Contractual Clauses.
6. Cookies
Our website uses only technically necessary cookies that are required for the operation of the site. The legal basis is Section 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR. No analytics or tracking tools are used.
7. Your Rights as a Data Subject
You have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of a given consent (Art. 7(3) GDPR)
To exercise your rights, an email to write@noem.digital is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
8. Currency and Amendment of this Privacy Policy
This privacy policy is current as of 25 August 2026. As our website develops or due to changed legal requirements, it may become necessary to amend this privacy policy.