Privacy policy
Last updated: September 2026
This is an English translation for convenience. Only the German version is legally binding. German version
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
hafencity.dev GmbH
Am Strandkai 8
20457 Hamburg
Germany
Represented by the managing directors Hendrik-Hauke Rux and Marius Gill
Email: moin@hafencity.dev
Phone: +49 40 18030691
We have not appointed a data protection officer. For privacy questions, please contact moin@hafencity.dev.
2. Overview
This website provides information about Nuowei, a product of hafencity.dev GmbH. We only process personal data to the extent necessary to operate the website, run the waitlist and respond to your enquiries.
We do not use any analytics, tracking or marketing tools, and we do not embed third-party content (such as social media plugins, videos, maps or externally loaded fonts).
3. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes information transmitted by your browser in so-called server log files:
- IP address
- date and time of access
- requested page or file
- browser type and version (user agent) and operating system
- referrer URL (the previously visited page)
This processing is necessary to deliver the website and to ensure its stability and security (e.g. defending against attacks). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing the website securely and without technical errors. Vercel stores log data only for a limited period and then deletes it.
We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR (Vercel Data Processing Addendum: https://vercel.com/legal/dpa). Data may be transferred to the USA. Vercel is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 (2) (c) GDPR). More information: https://vercel.com/legal/privacy-policy.
4. Cookies and local storage
This website does not set any cookies and does not store any information in your browser's local storage or session storage. There is no tracking.
On your first visit, we redirect you to the German or English version based on the language preference sent by your browser (Accept-Language). This information is only evaluated, not stored.
5. Fonts
The fonts used on this website (Geist and Geist Mono) are served locally from our own server. No connection to servers operated by Google or other font providers is made when you visit the website.
6. Waitlist
If you join our waitlist, we process the following data:
- work email address (required)
- company (optional)
- plan of interest – Observe, Defend or Enterprise (optional)
- selected language and the time of your consent
Purpose: we inform you by email about the launch of Nuowei and access to the product. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, for example by emailing moin@hafencity.dev. The lawfulness of processing carried out before the withdrawal remains unaffected.
Retention: we store your data until you withdraw your consent or until it is no longer needed to inform you about the launch; it is then deleted.
We use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor pursuant to Art. 28 GDPR to send emails and manage the contact list. Your data is transferred to the USA in this context. The transfer is based on standard contractual clauses (Art. 46 (2) (c) GDPR) or, where Resend is certified under the EU-US Data Privacy Framework, on the adequacy decision (Art. 45 GDPR). More information: https://resend.com/legal/privacy-policy.
To protect against automated spam submissions, the form contains a field that is invisible to people. No additional personal data is collected for this.
7. Contact by email
If you contact us by email, we process your email address and the information in your message in order to respond to your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). We delete the data once your enquiry has been fully dealt with, unless statutory retention obligations apply.
8. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar. Data you send to us, for example via the waitlist form, cannot be read by third parties.
9. No automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
10. Your rights
Within the scope of the statutory provisions, you have the right at any time to:
- access the data we hold about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7 (3) GDPR)
To exercise these rights, simply contact moin@hafencity.dev.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany (https://datenschutz-hamburg.de).
11. Right to object (Art. 21 GDPR)
Where we process data on the basis of Art. 6 (1) (f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
12. Changes
We update this privacy policy when the website or legal requirements change. The version published here applies.