This English version is provided for convenience. In case of doubt, the German version applies.
The protection of your personal data matters to us. This privacy policy explains which data we process when you use our website and our website builder, for which purposes, and which rights you have. Last updated: October 2026.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
NoraMedia
Owner: Mikail Aykul
Leipziger Straße 33a, 36037 Fulda, Germany
Email: info@norapix.de
Phone: 0661 94180510
Where customers operate their own websites with NoraPix and process data of their visitors or customers, the respective operators are controllers themselves. We process this data on their behalf (see section 14).
We only process personal data where this is necessary to operate our website, to provide our services or to comply with legal obligations, or where you have given consent. The legal bases are:
Our website is operated by an external hosting provider: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit the website, technical data is collected automatically and stored in server log files, in particular IP address, date and time of the request, requested page, amount of data transferred, browser type and operating system, and the previously visited page. This processing is necessary to deliver the website, ensure its security and prevent abuse. The legal basis is Art. 6 (1) (f) GDPR. Log data is only stored as long as necessary for these purposes. We have concluded the agreements on data processing required by data protection law (Art. 28 GDPR) with the hosting provider.
This website only uses technically necessary cookies, for example for login, the session and the security of forms. We do not use analytics, tracking or marketing cookies. You will find details in our Cookie Policy.
If you contact us via contact form or email, we process your details (name, email address, message and, if applicable, phone number) to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, otherwise Art. 6 (1) (f) GDPR. We delete your request once it has been fully handled and no statutory retention obligations apply.
To use the website builder you create a customer account. We process username, email address, password (only in encrypted form), name, company name, address, phone number and country, as well as the packages and terms you choose. This processing is necessary to perform the contract (Art. 6 (1) (b) GDPR). We store the data for the duration of the contractual relationship and delete it afterwards unless statutory retention obligations apply.
Payment for your package is handled by payment service providers. We do not receive full card details. They are processed directly by the respective provider.
The legal basis is Art. 6 (1) (b) GDPR. On the checkout page a script library of the payment provider is loaded, which transfers your IP address to that provider.
If you book a package as a subscription, we store the references required for renewal (for example customer and subscription identifiers of the payment provider, term and status). This processing serves the performance of the contract (Art. 6 (1) (b) GDPR).
Cancellation via the "Cancel contracts here" button: if you cancel a contract using this button, we process your name, your email address, optionally your username and contract details, and the date, time and IP address of receipt. We use this data to match and carry out your cancellation and to confirm receipt to you (Art. 6 (1) (b) GDPR, Section 312k German Civil Code).
Proof of your confirmation when ordering: for paid orders we store proof of your confirmation that the service should start before the withdrawal period expires (time, IP address, browser identifier and wording of the confirmation). This serves to meet our statutory duties of proof and to protect our legitimate interests (Art. 6 (1) (c) and (f) GDPR). We keep this proof until the statutory retention and limitation periods have expired.
When you search for a domain, we transmit the entered domain name to our service provider Hostinger International Ltd. and the responsible registries to check availability. The search is possible without logging in and we do not store any information about you. If you register a domain, we pass on the data required for registration (for example name, address, email address) to the registrar and the respective registry. Depending on the extension, parts of this data may be visible in public directories (WHOIS). The legal basis is Art. 6 (1) (b) GDPR.
We send system messages, for example confirmations, payment information or notices about your account. We use an email delivery service for this. The legal basis is Art. 6 (1) (b) GDPR.
If you sign up for our newsletter, we process your email address to send you news about our offering. The legal basis is your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, for example by email to info@norapix.de. The lawfulness of processing carried out before the withdrawal remains unaffected.
If you use the AI features of the website builder (for example to generate texts and content automatically), the details you enter are transmitted to an external AI provider to produce the result, currently Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google LLC, USA). Please do not enter personal data of third parties or confidential information in these features. The legal basis is Art. 6 (1) (b) GDPR because you actively use the feature. Transfers to the USA are based on standard contractual clauses and, where certified, the EU US Data Privacy Framework.
Our website links to profiles on Instagram and GitHub. These are simple links, not embedded plugins. Data is only transferred to the respective provider once you click a link. The respective provider is responsible for data processing there.
If customers operate their own websites, online shops, booking or course offerings with NoraPix, we process personal data of their visitors and customers on their behalf. Our customers are responsible for this processing. On request we conclude a data processing agreement under Art. 28 GDPR with our customers. Please contact info@norapix.de for this.
We only store personal data for as long as necessary for the stated purposes. Data subject to commercial or tax retention obligations (for example invoices and accounting records) is kept for the statutory periods. Under Section 147 AO and Section 257 HGB these are generally six or ten years.
Where we use service providers outside the European Union or the European Economic Area, we ensure an adequate level of data protection, for example through an adequacy decision of the EU Commission or standard contractual clauses.
You have the following rights towards us:
Right to object: Where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
To exercise your rights, an informal message to info@norapix.de is sufficient.
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de.
There is no solely automated decision making, including profiling, within the meaning of Art. 22 GDPR.
For security reasons our website uses SSL or TLS encryption. You can recognize an encrypted connection by the padlock icon in your browser address bar and by the address starting with https.
We adapt this privacy policy when our offering or the legal situation changes. The current version on this page applies.