Last updated 2026-11-02
Privacy Policy
The short version. This site sets no cookies, runs no third-party analytics and does not follow you around the web. If you join the waitlist we keep the email address and the answers you chose, use them only to write to you about nnipa, and delete them when you ask. The waitlist form has no free-text field, so it cannot hold information about a person you support, and we ask you not to send us any.
1. Who is responsible
The controller within the meaning of Art. 4(7) GDPR is Sascha Wagner (nnipa), Ditzingen, Germany. Full postal address in the Imprint. Email: privacy@nnipacare.com. We have not appointed a data protection officer, as we are not required to under Art. 37 GDPR.
2. The waitlist
If you join the waitlist we store: your email address; your name and agency name, if you give them; which role you chose and how many homes you run, if you chose; the page you joined from; a two-letter country code derived at the network edge; and the time. Nothing else. We use this to tell you when nnipa can take you on, and to understand which kinds of providers are interested. We do not sell it, share it or add you to anyone else's list.
Legal basis: your consent, Art. 6(1)(a) GDPR, given by submitting the form. You can withdraw it at any time by writing to privacy@nnipacare.com, and we delete your entry. Retention: until you ask us to delete it, or until nnipa opens to you and you decide not to continue, whichever comes first.
3. Anonymous traffic counters
To know whether anyone reads the site and which guides are useful, we keep anonymous first-party events containing only: a country code, the hostname of the referring site (never the full URL), the path of the nnipa page, and for links in the resource library a broad action label such as “next article” or “source”. One counter records that a page was served; a small script reports back about a second after the page loads, which we count as a visit. It stores nothing on your device: no cookie, no identifier, no local storage. We do not store your IP address, and the events cannot be linked to you or to each other.
Legal basis: legitimate interest, Art. 6(1)(f) GDPR, in understanding the reach of our own website. Because nothing is stored on or read from your device, no consent is required under § 25 TDDDG.
4. Hosting and processors
The site, the waitlist database and the counters run on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), under its data processing addendum. Cloudflare processes connection data, including your IP address, transiently to deliver pages and defend against attacks; we do not receive server logs containing IP addresses. Transfers to the USA rely on Cloudflare's certification under the EU-U.S. Data Privacy Framework and on standard contractual clauses. Fonts are loaded from Google Fonts (Google Ireland Ltd.), which receives your IP address when your browser requests them.
5. The nnipa product
This policy covers the website only. The nnipa application, which processes information about people served, is not open to the public. Providers it serves will receive a separate agreement covering that processing before any such information is uploaded.
6. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21), and to withdraw consent at any time. Write to privacy@nnipacare.com. You may also complain to a supervisory authority; ours is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.