1. Controller and privacy contact
Nord-48 LLC
1-10-8 Dogenzaka, Shibuya-ku
Tokyo 150-0043
Japan
Email: contact@nord-48.com
Phone: +49 156 79827349
2. Hosting and security with Cloudflare
We use Cloudflare Workers and the content delivery network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, to deliver and protect this website. This involves processing IP addresses, request dates and times, requested pages and files, HTTP status, data volumes, browser and device information and, where available, the referring page. The purposes are website delivery, troubleshooting and preventing abuse. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in secure, reliable operation. Cloudflare may process technical access and security logs. Retention depends on the service, configured retention periods and the security purpose. See Cloudflare’s privacy policy.
3. Language preference, cookies and fonts
When you select a language using the language switcher, we store the cookie nord48_locale with the value de or en for one year. It only remembers your language choice. You can delete it in your browser settings at any time. This storage supports the language function you explicitly request (§ 25(2) no. 2 TDDDG); related personal data processing is based on Art. 6(1)(f) GDPR. Without a saved preference, visits to the root address are directed using your browser language and country information provided by Cloudflare. We do not use our own analytics, advertising or tracking services on the agency website. Fonts for the agency website are served locally. External content in the website examples is covered by the additional information below.
3a. External content in website examples
Some website examples contain embedded Google Maps and may load external Google fonts. Opening such an example may load this content automatically, transmitting your IP address, browser information and the page visited to Google. Google may use cookies or similar technologies and process data outside the EEA, including in the United States. These services display features of the example websites. For details of Google’s processing, retention, international transfers and privacy controls, see Google’s privacy policy. These external services are separate from the locally served content of the agency website.
4. Project inquiries, email and telephone
When you contact us, we process your contact details and inquiry. The form requires a service selection, project description, name and email address; company, timeframe and budget are optional. Submissions are sent to us by email. We use Resend (Plus Five Five, Inc., USA) for delivery. Resend processes sender and recipient addresses, message content and technical delivery data. See Resend’s privacy policy. We use your details to answer your inquiry and, where appropriate, prepare a contract. The legal basis is Art. 6(1)(b) GDPR for inquiries about a contract with you; other inquiries, including those made on behalf of a company, rely on Art. 6(1)(f) GDPR and our legitimate interest in business communication. Acknowledging the privacy notice in the form does not constitute consent to advertising. Contacting us is voluntary; we cannot process a form submission without the required details.
5. Recipients and processing outside the EEA
People handling your inquiry and providers supporting hosting, security and email delivery receive access as necessary. We are based in Japan; Cloudflare and Resend may process data in the United States and other countries outside the European Economic Area. Processing therefore does not take place exclusively in the EU. The data processing agreements of Cloudflare and Resend describe processing arrangements and safeguards for covered international transfers, particularly EU Standard Contractual Clauses. An applicable adequacy decision may also provide a basis for a transfer. Contact us for information about the safeguards applicable to a particular transfer and to obtain a copy.
6. Retention
We keep inquiries and related contact details for as long as necessary to handle them, perform a resulting contract or establish, exercise or defend legal claims. Statutory retention obligations may require longer storage, based on Art. 6(1)(c) GDPR. Data is deleted when these purposes and obligations end. Technical logs and delivery records are subject to our providers’ service-specific retention periods, taking account of operational and security needs and any investigation of a specific incident.
7. Your rights
Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you may withdraw it at any time with effect for the future. To exercise these rights, email contact@nord-48.com. We do not carry out profiling or make solely automated decisions that have legal or similarly significant effects.
Right to object
Where processing relies on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then continue processing only if the legal conditions allow it. You may object to processing for direct marketing at any time without giving a reason.
Right to complain
You may lodge a complaint with a data protection supervisory authority, particularly in the EU Member State where you habitually live or work or where the alleged infringement occurred. See the European Data Protection Board’s directory.
8. Last updated
21 October 2026