Through this privacy notice, Maximilian Näther (hereinafter referred to as „the Company“) provides information about the processing of personal data in connection with the use of the website www.houseofnather.com, as well as in connection with other processing activities carried out by the Company.

Personal data means any information relating to an identified or identifiable natural person. This includes, in particular, information that allows conclusions to be drawn about your identity, such as your name, telephone number, address, or email address. Certain identifiers, such as the IP address or the device ID of the device you are using, also constitute personal data.

The contact person and controller responsible for the processing of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) when visiting this website is:

Maximilian Näther
Weißen 42, 07407 Uhlstädt-Kirchhasel, Germany
Phone: +49 98742 671281
Email: resonance@houseofnather.com
Website: www.houseofnather.com

For any questions regarding data protection in connection with our services or the use of our website, you may contact us at any time using the contact details listed in the imprint, or via the postal address or email address given above (keyword: „Data Protection“). Please note that content sent to this email address is not exclusively reviewed by the personnel responsible for data protection. If you wish to exchange confidential information, we therefore ask that you first establish direct contact with us via this email address.

The contact person and controller responsible for the processing of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) when visiting this website is:

Maximilian Näther
Weißen 42, 07407 Uhlstädt-Kirchhasel, Germany
Phone: +49 98742 671281
Email: resonance@houseofnather.com
Website: www.houseofnather.com

For any questions regarding data protection in connection with our services or the use of our website, you may contact us at any time using the contact details listed in the imprint, or via the postal address or email address given above (keyword: „Data Protection“). Please note that content sent to this email address is not exclusively reviewed by the personnel responsible for data protection. If you wish to exchange confidential information, we therefore ask that you first establish direct contact with us via this email address.

The Company does not currently operate a newsletter.

Our website does not use cookies. We also do not use comparable technologies to store information on your device or to read information already stored there. In particular, we do not use analytics, tracking, or marketing technologies that evaluate or recognize your usage behavior across our website.

A cookie consent banner is therefore not required for the current technical configuration of our website. Independently of this, technically necessary connection and log data is processed when our website is accessed. For further information, please see Section 3, „Data Processing on Our Website.“ Should cookies or comparable technologies be used in the future, we will update this privacy notice accordingly and, where legally required, obtain your consent before their use.

We maintain an online presence on LinkedIn to provide information about our services, communicate with prospective and existing clients, and conduct public relations. The platform is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

When you interact with our LinkedIn page — for example through comments, reactions, or direct messages — we process the personal data provided in the process. This may include, in particular, your username, profile picture, communication content, and any other contact details you provide. Processing takes place to handle your inquiries, to communicate with you, and for public relations purposes. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in maintaining a contemporary public presence and in communicating with prospective and existing clients. Where your inquiry is directed at concluding or performing a contract, processing is based on Art. 6(1)(b) GDPR.

When you visit our LinkedIn page, LinkedIn processes personal data under its own responsibility. This may include, in particular, usage data, technical connection data, and information about your interactions with the platform. LinkedIn may use this data, among other things, to provide and improve its services, to create usage profiles, and for advertising purposes. Cookies and comparable technologies may also be used in the process. We have only limited influence over LinkedIn’s independent data processing. Further information can be found in LinkedIn’s privacy policy.

LinkedIn provides us with statistical evaluations of the use of our page („Page Analytics“). To the extent this data is processed under joint controllership, the agreements between LinkedIn and us pursuant to Art. 26 GDPR apply. The essential content of this agreement is available via LinkedIn’s Page Insights Joint Controller Addendum.

The recipient of data processed in connection with our LinkedIn presence is, in particular, LinkedIn. Processing of personal data in third countries, in particular the USA, may be carried out by LinkedIn. Information on the relevant transfer mechanisms and safeguards is provided by LinkedIn in its own privacy notices.

We store personal data from communications via LinkedIn only for as long as necessary to process the relevant matter, or as required by statutory retention obligations. The retention period for data processed independently by LinkedIn is governed by LinkedIn’s own policies.

Where we process personal data, you may exercise your rights as a data subject using the contact details provided in this privacy notice. Information on your rights can be found in Section 9, „Your Rights.“ For processing carried out by LinkedIn, you may also contact LinkedIn directly. Where joint controllership applies, you may generally assert your rights against either joint controller.

LinkedIn’s Privacy Policy:
https://www.linkedin.com/legal/privacy-policy

Joint Controller Agreement:
https://legal.linkedin.com/pages-joint-controller-addendum

Data we collect is disclosed only if:

• you have given your express consent pursuant to Art. 6(1)(a) GDPR;
• disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the assertion, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in the data not being disclosed;
• we are legally obligated to disclose the data pursuant to Art. 6(1)(c) GDPR; or
• disclosure is legally permitted and necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract with you or for the implementation of pre-contractual measures carried out at your request.
• Where we engage service providers as processors, this is done on the basis of Art. 28 GDPR.

Part of the data processing may be carried out by our service providers. In addition to the service providers named in this privacy notice, these include, in particular, data centers hosting our website and databases, IT service providers maintaining our systems, and consulting firms. Data is disclosed to service providers solely for the performance of their respective tasks; these providers have been carefully selected and engaged by us. They are contractually bound by our instructions, maintain appropriate technical and organizational measures to protect the rights of data subjects, and are reviewed as part of our statutory obligations.

Data may also be disclosed in connection with requests from authorities, court orders, or legal proceedings, where necessary for the assertion or enforcement of legal claims.

As described in this privacy notice, we use services whose providers are, in some cases, based in so-called third countries (e.g. the USA). These countries may not offer the same level of data protection as the European Union. However, an adequacy decision by the European Commission exists for the USA (the EU-U.S. Data Privacy Framework), ensuring an adequate level of data protection for certain transfers. Where no adequacy decision (Art. 45 GDPR) exists for other third countries, we have taken measures to ensure an adequate level of data protection, such as the application of the European Union’s Standard Contractual Clauses and binding internal data protection rules.

Where such measures are not possible, we rely on the exceptions set out in Art. 49 GDPR, in particular your express consent or the necessity of the transfer for the performance of a contract. These exceptions are applied only on a case-by-case basis.

Please note that when personal data is transferred to third countries without an adequacy decision or suitable safeguards, a risk exists: authorities in the relevant third country (e.g. government agencies) may access and process the transferred data. In addition, your rights as a data subject may not be enforceable in such countries. Where your consent is obtained via a consent banner, you will also be informed of these risks at that time.

As a general rule, we store personal data only for as long as necessary to fulfil the purposes for which the data was collected. We then delete the data once the purpose no longer applies, or restrict its processing, unless we still require it until the expiry of statutory limitation periods for evidentiary purposes in relation to civil claims, or due to statutory retention obligations.

Where no specific retention period is stated within this privacy notice, your personal data remains with us until the purpose of processing no longer applies. If you assert a legitimate request for deletion, your data will be deleted, unless other legally permissible grounds for retention exist (e.g. tax or commercial law retention periods). In such cases, deletion takes place once those grounds no longer apply.

For evidentiary purposes, we are required to retain contract data for three years from the end of the year in which the business relationship with you ends, since any claims would, at the earliest, become time-barred at that point under the standard statutory limitation period. Beyond this, we are required to retain certain data for accounting purposes. This statutory documentation obligation arises from the German Commercial Code (Handelsgesetzbuch) and the German Fiscal Code (Abgabenordnung). The statutory retention periods here range between two and ten years.

You have the right at any time to request information about the processing of your personal data by us. As part of providing this information, we will explain the data processing to you and provide you with an overview of the data stored about you. Should the data we hold be inaccurate or outdated, you have the right to rectification. You may also request the deletion of your data, provided no other legal grounds for retention exist (e.g. statutory retention periods). In such cases, the data is restricted and processed only for legally permitted purposes. You may also request the restriction of processing of your data, in particular if you believe the data to be incorrect. You further have the right to data portability — upon request, we will provide you with a digital copy of the personal data you have provided to us.

You have the right to request information about the personal data concerning you that we process. This includes the right to obtain a copy of that personal data.

• Legal basis: Art. 15 GDPR

• Exception: Access may be refused if your request is manifestly unfounded or excessive, if your identity cannot be clearly established, or if the disclosure would infringe the rights and freedoms of others.

You may request the immediate rectification of inaccurate data and the completion of incomplete data — including by means of a supplementary statement.

• Legal basis: Art. 16 GDPR

Under certain conditions, you have the right to request the deletion of your data.

• Legal basis: Art. 17 GDPR

• Exception: Erasure may be refused where the data is required, for example, to exercise the right to freedom of expression, to comply with a legal obligation, or to establish, exercise, or defend legal claims.

Under certain conditions, you may request the restriction of processing — for example, where the accuracy of the data is disputed or the data is required for the defense of legal claims.

• Legal basis: Art. 18 GDPR

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or, where technically feasible, to have it transferred to another controller.

• Legal basis: Art. 20 GDPR

• Exception: This right applies only to data that has been processed using automated means and that was collected either on the basis of a contract or of consent.

You may withdraw any consent given at any time, with effect for the future.

Where processing is based on our legitimate interest under Art. 6(1)(f) GDPR, you may object to that processing.

• Legal basis: Art. 21(1) GDPR

• Exception: We may continue processing despite an objection where we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves the assertion, exercise, or defense of legal claims.

You have the right to object at any time to the processing of your data for the purposes of direct marketing.

• Legal basis: Art. 21(2) GDPR

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you.

• Legal basis: Art. 22 GDPR

• Exception: This right does not apply where the automated decision is necessary for entering into or performing a contract with you, where it is authorized by law, or where you have given explicit consent.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority — in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement — if you consider that the processing of your personal data infringes the GDPR.

• Legal basis: Art. 77 GDPR

• Competent supervisory authority:

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit

(Thuringian State Commissioner for Data Protection and Freedom of Information)

Postfach 900455

99107 Erfurt, Germany

Exercising Your Rights

To exercise your rights, you may contact us at any time using the contact details provided above. This also applies if you wish to obtain copies of safeguards demonstrating an adequate level of data protection. Provided the relevant legal requirements are met, we will comply with your request.

Retention of Requests Relating to Data Subject Rights

Requests to exercise data subject rights, and our responses to them, are retained for documentation purposes for up to three years. In individual cases, storage may extend beyond this period, for example to defend against civil claims. The legal basis for this is Art. 6(1)(f) GDPR, based on our legitimate interest in defending against potential claims and fulfilling our accountability obligations under Art. 5(2) GDPR.

If you contact us to purchase goods, products, or services and provide your email address in doing so, we reserve the right to use it to send newsletters containing direct advertising for our own similar goods or services. This is done on the basis of our overriding legitimate interest in advertising to our customers, following a balancing of interests. You may object to this use of your data at any time, as described in this privacy notice under „Your Rights.“ A message to the contact details listed above is sufficient for this purpose, at no cost to you other than standard transmission charges.

Where newsletter dispatch results from the sale of goods or services, it is based on Section 7(3) of the German Act Against Unfair Competition (UWG) in conjunction with Art. 6(1)(f) GDPR.

This privacy notice is updated from time to time, for example when we adapt our website or when statutory or regulatory requirements change. We therefore recommend that you review this notice regularly to stay informed about the protection and processing of your data.

Last updated: September 2026