Imprint and Privacy

Impressum

Now We Make UG (Haftungsbeschränkt)
c/o Red Tape Translation UG
Berliner Straße 69, 13189 Berlin
Germany
E-Mail: hello@nowwemake.com
Website: www.nowwemake.com
Managing Director: Toby Knyvett

Registration

Amtsgericht Berlin Charlottenburg
HRB: 283055 B
St.Nr.: 29/458/33653
VAT: DE460760064

Privacy Policy

This policy explains how Now We Make handles personal data on nowwemake.com, tobyk.com.au, noubin.com and noub.in. You can browse most of these websites without giving us your name or email address.

Who is responsible

The data controller is Now We Make UG (Haftungsbeschränkt), located in Berlin, Germany, represented by managing director Toby Knyvett. Contact: hello@nowwemake.com.

Purposes

We collect your data only for the purposes outlined below. Your data is not used for any other purpose. For each purpose we say what we collect, why we collect it and the legal basis, how long we keep it, and which companies we work with.

Purpose: Mailing list

When you consent and provide your email address we will add you to the mailing list.

What we collect

• Your name
• Your email address
• The time and date you subscribed
• The country you subscribed from
• Whether you opened emails we sent
• Whether you clicked links in emails we sent

Technical identifiers like your IP address may be temporarily stored by servers processing your requests relating to the mailing list.

Why we collect it

We use this data to tell you about updates to the products from NowWeMake.com. The legal basis is your consent (Article 6(1)(a) GDPR). Giving us this data is entirely voluntary.

You can withdraw consent at any time by clicking the unsubscribe link in any mailing list email. Alternatively email us at hello@nowwemake.com.

If we or any successor proposes changes to the use of your data for this purpose then we will ask you for your consent.

How long we keep it

Until you opt out. Then we delete your data from the list.

Third parties

Service providers: We use MailerLite to run the mailing list. That includes sign up forms, sending bulk emails, maintaining the subscriber database, and providing an unsubscribe service. We use Google for business email related to the mailing list. Your data may also be stored on our own servers. We will not permit these third parties to use your personal data for any purpose other than our mailing list. We will remain the controller of the data and you can address deletion requests and queries to us at hello@nowwemake.com.

Business associates: We may provide your data to business associates when they are legitimately involved in organising the marketing and/or communications of any of our products. We will only transfer data in this way for the purpose of continuing your subscription to the mailing list about NowWeMake.com products, not adding your data to new mailing lists.

Successor entities: We may provide your data to the successor of this business entity as a new data controller if our business structure changes. We will only transfer data in this way for the purpose of continuing your subscription to a mailing list about our products.

All third parties: We will ensure all third parties have a privacy policy that gives you the same rights as this policy for the purposes you consented to. If we cease a business relationship with a third party we will instruct them to delete your data. When third parties are outside the European Economic Area, UK or Switzerland, we transfer data as described under Transfers outside the EU below.

Apart from the stated third party uses we will not provide your data to third parties.

Purpose: Hosting, business email and contact forms

When you visit our websites, send us email, or use a contact form, we process data so we can serve the site, receive your message, and reply.

What we collect

• Technical identifiers such as your IP address and device information needed to connect to the site
• Location derived from IP address
• The pages and files you request, and ordinary server logs
• The content of messages you send us, including your name and email address if you provide them
• Emails we send and receive in the course of running the business

Why we collect it

The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in:

• serving you the content you request
• answering your messages
• preventing abuse and spam
• understanding where our visitors come from so we can improve the service

Where processing is necessary to comply with a legal obligation, for example sanctions that restrict access from certain locations, the legal basis is that legal obligation (Article 6(1)(c) GDPR).

How long we keep it

We keep technical data in website logs for as long as needed for security and abuse prevention. We keep business email and contact messages for as long as needed to handle the conversation and keep ordinary business records. We keep city level location statistics for as long as reasonably necessary to understand geographic usage and improve the service.

We only use functional cookies and similar local storage where needed to make the service work. We do not use any tracking cookies.

Third parties

Service providers: Hostineer (website hosting), Namecheap (domain names and related services), Cloudflare (content delivery and security), Backblaze (backups), and Google (business email and documents).

Apart from the stated third party uses we will not provide your data to third parties.

Purpose: Noubin linkhost visitors

This purpose covers people who visit noubin.com and noub.in to view hosted content, without signing up for an account.

What we collect

Technical data, for example your IP address and browser agent string. Your approximate location derived from your IP address.

Why we collect it

The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in:

• serving you the content you request
• preventing abuse and spam
• meeting our legal obligations (e.g. deny access to locations where we are legally required to do so)
• To understand where our visitors come from in order to improve our services. We also provide this geographic visit data to our customers about the visitors to their pages so they can understand where their users come from and improve their own services. Note these geographic visit statistics are anonymised by being summed on a per-city basis, without per visit records of IP address, time of visit or other technical identifiers. Summing occurs at fixed time periods and customers cannot see visit counters increasing in real time. Furthermore we use a random sampling technique (e.g. sampling only 1 in 10 visits and giving that visit a weight of 10) to further anonymise the visit data set.

Where processing is necessary to comply with a legal obligation, for example sanctions that restrict access from certain locations, the legal basis is that legal obligation (Article 6(1)(c) GDPR).

How long we keep it

We keep technical data as long as needed for operational reasons (e.g. database backups), security and abuse prevention. Generally unless there is a specific reason to keep data longer (e.g. a legal dispute) all data of this type is normally deleted after maximum 12 months. Anonymised data is kept indefinitely.

We only use functional cookies and similar local storage where needed to make the service work. We do not use any tracking cookies.

Third parties

Service providers: Cloudflare (content delivery and security), Resend (mail service for links) and Backblaze (backups).

We share aggregated city level visitor numbers with our customers who host on the site. For example, a customer may see that their page was visited by 12 people from Berlin and 3 from Hamburg.

Apart from the stated third party uses we will not provide your data to third parties.

Purpose: Noubin linkhost customers

This purpose covers people who sign up for an account on noubin.com or noub.in, free or paid, to host their content, and people who send us support requests about that service.

What we collect

• Account data such as name, email address, location, and technical identifiers including IP address
• Billing data if you have a paid account
• Release data you ask us to host, for example titles, artwork, credits and other information you ask us to publish.
• The content of support requests or abuse reports you send us
• Logs of account actions, e.g. that a page was published or deleted.

Why we collect it

We need this data to provide the hosting service you signed up for, whether free or paid, so the legal basis is performance of our contract with you (Article 6(1)(b) GDPR). We also have a legitimate interest (Article 6(1)(f) GDPR) in keeping accounts secure, preventing fraud and abuse, operational management of the service (e.g. backups, logs) and answering support requests.

Release data is published because that is the service. You need to ensure that data you ask our service to publish is ok to be published. For example if you include people's names in credits, you are responsible for that being appropriate to make public.

How long we keep it

• We keep account data for as long as the account exists and for a period afterwards as needed for operational reasons (backups) and security and legal obligations. Generally unless there is a specific reason to keep data longer (e.g. a legal dispute) all data of this type is normally deleted after maximum 12 months.
• We keep billing records for as long as German commercial and tax law requires.
• We keep support messages for as long as needed to deal with the request and keep ordinary business records.
• We keep logs of account deletion requests as long as needed to prove that we acted on a request to delete an account.

We only use functional cookies and similar local storage where needed to make the service work. We do not use any tracking cookies.

Third parties

Service providers: Cloudflare (content delivery and security), Resend (mail service for transactional emails such as login and account messages), Google (business email), Backblaze (backups), and Discord (our internal support channel).

Apart from the stated third party uses we will not provide your data to third parties.

Purpose: Community engagement

We run a Discord server and accounts on social media. Those services are the primary controllers of your own account with them. Their privacy policies apply to how they run the platform, your profile, and your use of the service.

What we collect

Only personal data you choose to disclose to us on those community channels. For example a direct message asking for support, or information you send so we can help with a product or account.

Why we collect it

We use that data to reply to you and to run the community. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in supporting people who contact us and keeping the community usable. If the message is about an account or paid service, the Noubin linkhost customers purpose also applies.

We do not add you to the mailing list from a community account. Joining the mailing list is a separate purpose and needs your consent.

How long we keep it

We keep community support messages for as long as needed to deal with the request.

Third parties

We may copy a support message into our internal Discord support channel or business email so the team can help you.

Service providers: Discord, the social media platforms you used to contact us, and Google for business email.

Apart from the stated third party uses we will not provide your data to third parties.

Embedded content and links to other websites

Pages on our websites may include embedded content (for example YouTube videos). Where we embed third party content, your browser may connect directly to the provider of that content, just as if you had visited their website yourself. We do not control the data processing carried out by those providers.

Those providers may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracing your interaction if you have an account and are logged in with them.

We will ask your consent before we show you this content. Your preference will be stored in a cookie or localstorage value on your device. This is set on the basis of

Our website contains links to other websites. Following a link takes you to the third party's site, and their privacy policy applies there, so you should read it.

Transfers outside the EU

Some of the companies we work with are based outside the European Economic Area, the UK or Switzerland, or store data there.

When we transfer personal data outside these areas we rely on a lawful safeguard. In practice that means one of the following:

• An adequacy decision. The European Commission has decided that the destination country, or a specific framework there, provides an adequate level of protection. For example transfers to the United Kingdom, or to organisations in the United States that are certified under the EU-US Data Privacy Framework for the services we use.
• Standard Contractual Clauses. These are contracts approved by the European Commission. They require the receiving company to protect your data to EU standards when no adequacy decision applies.

We will not transfer your personal data to a third country unless one of these safeguards is in place.

Your Rights

• The right to withdraw consent
• The right of access
• The right to erasure
• The right to rectification
• The right to restriction of processing
• The right to data portability
• The right to object
• Notification of data breaches
• The right to lodge a complaint with a supervisory authority

To make relevant requests email hello@nowwemake.com

We do not use your data for automated decision-making that has legal or similarly significant effects on you.

Our supervisory authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (the Berlin data protection authority). You can also complain to the data protection authority where you live.