Privacy policy

1. Controller

The controller responsible for personal data processed on novissium.com is Jens Pfortje (Novissium).

2. General information

We process personal data only as necessary to operate and secure this website, respond to enquiries or where another lawful basis applies. Swiss data protection law applies; where the European Union's General Data Protection Regulation applies, its requirements are also observed.

3. Website access and server logs

When you access this website, technical connection data is processed. This includes in particular your IP address, date and time, requested URL, response status and potentially browser and referral information. We use this data to deliver the website, diagnose technical issues and prevent abuse.

Novissium administers the website, newsletter service and outgoing mail itself. The rented server infrastructure is supplied by OVH and IP-Projects; the servers used are located in Germany. Newsletter data is stored in our own listmonk database and newsletter files on the local server filesystem.

Domain logs for novissium.com and newsletter.novissium.com are configured with a 10-day retention setting. A daily job rotates and compresses logs and removes older files according to their age. Global Apache logs rotate daily with 14 archived generations; mail and other security logs follow separate rotation schedules. Rotation is not a universal deletion deadline for all data.

Daily local newsletter backups contain the database, application, configuration and files. The automated backup job removes its backup files once they are older than 14 days. Manually created backups are not automatically covered by that job. Unsubscribing does not immediately remove existing backup copies.

Where the GDPR applies, this processing is based on our legitimate interest in operating a safe and reliable website (Article 6(1)(f) GDPR).

Additional processing by IP-Projects

IP-Projects GmbH & Co. KG, Am Vogelherd 14, 97295 Waldbrunn, Germany, supplies part of our server infrastructure. The provider may process connection and traffic data on its network and DDoS protection infrastructure to provide and secure its services. This processing is separate from the server logs administered by us and described above.

On 12 October 2026, we requested specific information about data categories, retention and deletion periods or their determining criteria, involved service providers, processing locations and data protection roles. We have not yet received an answer covering our self-administered servers. We therefore do not state an unverified retention period. We will supplement this notice after receiving and reviewing the response. Please contact us with questions; you do not need to obtain this provider information yourself.

IP-Projects privacy notice

4. Contact enquiries

If you contact us by email, we process your contact details and message to respond. Contacting us does not automatically subscribe you to marketing emails. Messages are retained and deleted according to the purpose of the communication and applicable retention obligations.

Where the GDPR applies, the legal basis depends on the enquiry and may be Article 6(1)(b) or 6(1)(f) GDPR.

5. Newsletter and release information

Signup takes place through our protected form at newsletter.novissium.com. You voluntarily choose from six topics in German or English. No topic is preselected and general news is not added automatically. We process your email address, an optional name if you provide one, selected lists and their subscription status for product news and release information. The language is determined by the selected German or English lists.

Signup uses email confirmation (double opt-in) and self-hosted ALTCHA abuse protection. Contact enquiries do not subscribe you to newsletters. Open and click tracking are disabled in the newsletter service. listmonk does not store the opt-in IP address; necessary server logs may independently contain IP addresses.

You can withdraw consent at any time through subscription management, the unsubscribe link in our newsletters or by contacting us. Unsubscribing stops delivery for the relevant list but does not automatically delete the subscriber record. Email address, optional name, internal identifier, list status and creation and modification timestamps may remain stored. Subscription management provides data export and self-deletion. You can also contact us directly with deletion requests.

Where the GDPR applies, newsletter delivery is based on your consent (Article 6(1)(a) GDPR). Specific legal retention obligations may prevent immediate complete deletion. We currently do not promise automatic deletion of unconfirmed or unsubscribed records after a fixed number of days; existing backups must be considered separately.

Messages are sent through our own mail server using newsletter@novissium.com as sender. Your email provider also processes the message and technical delivery data to deliver it. Depending on your chosen email provider, that processing may take place outside Germany.

6. Appearance preference

If you select light, dark or system appearance, your browser stores this preference locally to remember your choice. It is used solely for the display you requested, not to build advertising profiles.

Website analytics is optional and requires your consent.

7. Optional website analytics

Optional website analytics uses Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google tag loads only after your voluntary consent. Page views, technical device and browser information and cookie identifiers are transferred to Google; processing in the United States is possible. Analytics helps us improve the website. Advertising signals and ad personalization are disabled in our integration.

You may decline analytics and withdraw consent at any time through Privacy settings. Your choice is recognised for up to 180 days; the local entry may remain until your next choice or manual deletion. Our integration limits analytics cookies to 180 days and deletes accessible website analytics cookies on withdrawal. Where the GDPR applies, processing is based on consent (Article 6(1)(a) GDPR); where applicable, storage and access on your device requiring consent is based on Section 25(1) TDDDG.

Google privacy information · Google Analytics data retention information

8. External websites

This website may link to third-party websites. Visiting those services is subject to their operators' privacy notices.

9. Your data protection rights

Subject to applicable law, you may request access to your data and correction of inaccurate information. Other rights, such as deletion, may apply in the relevant circumstances. Where the GDPR applies, you may also have rights to object, restrict processing, data portability and complain to a competent supervisory authority. You can withdraw consent at any time for future processing without affecting earlier lawful processing. Please use the contact details above for requests. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), or the competent supervisory authority where the GDPR applies.

10. Updates

We update this notice when our website's actual processing activities change materially. Last updated: 12 October 2026.