This page explains what happens with personal data when you visit novavaleai.com.
The controller responsible for data processing on this website is:
Görres Facility Management GmbH
Gewerbegebiet Zingsheim Süd 39
53947 Nettersheim, Germany
Represented by Detlef Görres and Franziska Görres
E-mail: hello@novavaleai.com
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you open a page, IONOS processes the technically necessary connection data on our behalf. The legal basis is our legitimate interest in a secure and reliable operation (Art. 6 (1) (f) GDPR). A data processing agreement under Art. 28 GDPR is in place with IONOS.
With every request the web server automatically records access data: the IP address of the requesting device, date and time, the page requested and the amount of data transferred, whether the request was successful, browser type and operating system, and the referring page. This data is needed to deliver the website and to defend it against attacks (Art. 6 (1) (f) GDPR). It is not combined with other data sources and is deleted automatically after a short period.
Visiting this website does not require cookies, and we do not set any analytics or marketing cookies. Technically necessary files may be used to speed up delivery (page cache) or to protect the website against attacks (§ 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR).
The fonts used on this website are delivered from our own server. No connection to third-party servers is established for this, and no data is passed on.
To see which pages are read and from which platform visitors arrive, we use the open-source software Umami. We run Umami ourselves on a server rented from Hetzner Online GmbH in Falkenstein, Germany. The data is not passed on to third parties.
Umami sets no cookies and stores nothing on your device. It records the page you opened, the page you came from, campaign parameters in the link (for example utm_source=instagram), browser, operating system, device type, screen size, language and an approximate location (country, region, city). Your IP address is processed only briefly to derive that location and, together with browser data, to form a pseudonymous identifier. The IP address itself is not stored, and the data is not combined with anything else.
The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6 (1) (f) GDPR). Because nothing is stored on or read from your device, no consent under § 25 TDDDG is required. You can object at any time (see section 9).
This website links to Nova Vale’s profiles on Instagram, TikTok, YouTube, Facebook, Pinterest and X. These are plain links. Nothing is loaded from those platforms while you are on this website, and they learn nothing about your visit until you click a link. What happens after that is governed by the privacy policy of the platform you open.
On this website you can sign up for the newsletter of Cassuna, the fashion magazine of the same company (Görres Facility Management GmbH). It brings new looks, deals, giveaways and news. Nova Vale does not run a separate list: your sign-up is passed to Cassuna on our own server and stored there. For the sign-up we only need your e-mail address.
Double opt-in: after signing up you receive an e-mail with a confirmation link. Only when you confirm are you subscribed. Unconfirmed sign-ups are deleted automatically after 30 days.
What we store: your e-mail address, time and IP address of sign-up and confirmation, the wording of your consent and the page on which you signed up. This serves as proof of your consent, which we are legally required to provide.
The legal basis is your consent (Art. 6 (1) (a) GDPR); for the proof data, our legitimate interest in being able to demonstrate consent (Art. 6 (1) (f) GDPR). The data is stored on our web server at IONOS (see section 2) and is not passed on to third parties. You can unsubscribe at any time via the link in every newsletter e-mail or by writing to hello@novavaleai.com. After unsubscribing we no longer use your address for the newsletter; the proof of your earlier consent is kept as long as claims arising from it are possible.
Our shopping and look pages link to products at partner retailers. These links are marked as advertising. If you buy something after clicking such a link, we receive a commission; the price stays the same for you. We do not set any cookies for this ourselves. When you click, you leave novavaleai.com and the retailer or affiliate network records the click on its own website, usually with a cookie or a reference in the link, to attribute a later purchase to us. What happens there is governed by the privacy policy of that provider.
We work with the affiliate network Awin (AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany) and with the Amazon Associates Program (for amazon.com: Amazon.com Services LLC, 410 Terry Avenue North, Seattle, WA 98109, USA; for amazon.de: Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg). As an Amazon Associate we earn from qualifying purchases. We only receive anonymous reports about clicks and sales, never your name, address or order details. The legal basis for linking is our legitimate interest in financing this website through commissions (Art. 6 (1) (f) GDPR).
To see which pages and products are of interest, Umami (section 6) counts clicks on shop links without cookies.
If you write to us, we process your e-mail address and the information in your message in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR where the request concerns a contract, otherwise Art. 6 (1) (f) GDPR. Messages are deleted as soon as they are no longer needed and no statutory retention periods apply.
You have the right to information about the data we hold about you (Art. 15 GDPR), to correction (Art. 16), to deletion (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). To exercise these rights, write to hello@novavaleai.com.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Last updated: October 2026