Privacy Policy
Last updated: 2026-07-26
Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data-protection laws is:
Midnight Tech
Koppoldstr. 1 · 86551 Aichach · DE
Email: mail@notmon.day Phone: +49 30 555 70662
Provision of the website and server log files
Each time you visit our website, our hosting provider automatically captures technical information that your browser transmits. This is stored temporarily in so-called log files:
- IP address of the requesting device
- Date and time of access
- Name and URL of the requested file
- Volume of data transferred and HTTP status code
- Browser type and version, operating system
- Referrer URL (the previously visited page)
Processing is carried out on the basis of Art. 6(1)(f) GDPR. The legitimate interest of Midnight Tech is the secure and stable operation of the website and the prevention of attacks. Log files are automatically deleted after 30 days, unless a security incident requires longer retention.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Data processors
To carry out our tasks, we use carefully selected service providers who process personal data on our behalf ("data processors" pursuant to Art. 28 GDPR). A data-processing agreement (DPA) is in place with each of these providers.
| Provider | Purpose | Country | DPA |
|---|---|---|---|
| Hetzner Online GmbH | Hosting (Webserver) | DE | Agreement |
| Scaleway SAS | Domain und DNS | FR | Agreement |
| Migadu Email AB | E-Mail-Postfach für die Kontaktadresse | CH | Agreement |
Our website is hosted with Hetzner Online GmbH (DE).
Retention period
We retain personal data only for as long as is necessary for the respective processing purposes or as required by statutory retention periods (in particular under § 257 HGB and § 147 AO — typically 6 or 10 years).
Specific retention periods for individual processing activities are set out in the relevant sections of this privacy policy.
Your rights as a data subject
You have the following rights at any time with regard to your personal data:
- Access to the data stored about you (Art. 15 GDPR)
- Rectification of incorrect or incomplete data (Art. 16 GDPR)
- Erasure of your data ("right to be forgotten", Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of a consent given with effect for the future (Art. 7(3) GDPR)
To exercise these rights, an informal notification to mail@notmon.day is sufficient.
Independently, you have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR; see below).
Right to Object (Art. 21 GDPR)
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your data, where such processing is carried out on the basis of legitimate interests (Art. 6(1)(f) GDPR) or in the public interest (Art. 6(1)(e) GDPR).
Where your data are processed for the purposes of direct marketing, you have the right to object at any time and without giving reasons. After your objection, your data will no longer be processed for that purpose.
You may submit your objection informally to: mail@notmon.day
Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR you have the right to lodge a complaint with a data-protection supervisory authority concerning the processing of your personal data — in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.
Competent supervisory authority for the controller:
Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61, 10555 Berlin