Privacy Policy

Last updated: 15 January 2026

Introduction

This Privacy Policy explains how novyraw GmbH ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our website or services, you consent to the data practices described in this policy.

Data Controller Information

The data controller for your personal information is:

Company: novyraw GmbH

Address: Kirchstraße 92, 04134 Leipzig, Saxony, Germany

Registration Number: HRB582741

VAT Number: DE879562314

Email: privacy@novyraw.world

Phone: +49 341 990 3865

Data We Collect

We collect various types of information to provide and improve our services. The data we collect includes:

Personal Information

  • Name and contact details (email address, phone number, postal address)
  • Company information (company name, job title, business address)
  • Communication preferences and marketing consents
  • Information provided in forms, surveys, or correspondence

Technical Information

  • IP address and browser information
  • Device information and operating system
  • Website usage data and analytics information
  • Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect for various purposes, including how we use your information to provide and improve our services. Our use of your data includes:

  • Providing and maintaining our IT infrastructure services
  • Responding to your enquiries and providing customer support
  • Processing service requests and managing client relationships
  • Sending important notices about our services and policies
  • Improving our website and services based on usage analytics
  • Complying with legal obligations and regulatory requirements
  • Marketing our services (with your consent where required)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract: To perform our services and fulfil contractual obligations
  • Legitimate Interest: To improve our services and communicate about our business
  • Consent: For marketing communications and optional data processing
  • Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • With trusted service providers who assist in operating our business
  • When required by law or to protect our legal rights
  • In connection with a business transfer or acquisition
  • With your explicit consent for specific purposes

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. Our data retention periods are based on business needs and legal requirements. Generally, we retain client data for the duration of our business relationship plus seven years for legal and tax purposes. Website analytics data is typically retained for 26 months, whilst marketing consent records are kept until you withdraw consent.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Request transfer of your data
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent for consent-based processing

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website traffic. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

International Data Transfers

As a company based in the European Union, we primarily process data within the EU/EEA. Any transfers outside this region are conducted in accordance with GDPR requirements, including appropriate safeguards such as adequacy decisions or standard contractual clauses.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the information below:

Privacy Contact: privacy@novyraw.world

General Contact: contact@novyraw.world

Phone: +49 341 990 3865

Address: Kirchstraße 92, 04134 Leipzig, Saxony, Germany

You also have the right to lodge a complaint with the relevant data protection authority if you believe your data protection rights have been violated.