Privacy policy

Last updated: 23 October 2026

1. Controller

The controller responsible for processing personal data on this website is:

DNX DigitalerNachlass GmbH
Managing Director: Karsten Wunsch
Auflegerstraße 42
81735 Munich
Germany

2. Scope

This privacy policy applies to visits to nachlassgestalten.de (including www) and the features offered there — in particular signing up for information. The desktop and mobile software DigitalerNachlass.App is covered by the separate software privacy policy. For our social-network profiles see the separate privacy notice.

Personal data means any information relating to an identified or identifiable person.

3. Hosting and access logs

We operate the website ourselves on a server at Hetzner Online GmbH in Germany (web server: Caddy). Hetzner acts as a processor for the server infrastructure (Article 28 GDPR).

When you visit the website, access logs are created in our web-server environment. We store only operational metadata in those logs: date and time, request method and path or URL (without sensitive query parameters), host, HTTP status code, and duration and amount of data transferred. We do not record user agent (browser type/operating system), referrer or client IP address in these logs. The sole purpose is secure, stable operation (error analysis, availability). There is no analysis for advertising, tracking or profiling.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

Further information: Hetzner privacy policy.

4. Signing up for information

If you sign up to receive information, we process your email address and, optionally, your first name. We also store the site language at the time of signup (German or English), the signup source or variant (e.g. which page you came from) and technical details required for double opt-in and abuse protection.

Signup runs via our website API to a CRM/newsletter system we operate and uses double opt-in. The purpose is to send information about estate planning and about DigitalerNachlass.App (features, availability, further development). We do not pass data to third parties for their advertising.

Legal basis: Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future, for example via the unsubscribe link in emails.

5. Email delivery

For the technical sending of emails in connection with signup (in particular double opt-in and information emails) we use NetBeat GmbH (netbeat) as a processor. Email address, optional first name, language and technical delivery data may be transmitted to netbeat.

Legal basis: Article 6(1)(a) GDPR; Article 28 GDPR vis-à-vis netbeat.

Further information: netbeat privacy policy.

6. No tracking

This website does not use tracking tools, analytics services for advertising or marketing cookies. User behaviour is not analysed for advertising or profiling.

7. Cookies and local storage

We do not use cookies for analytics, tracking or marketing.

On the overview page, a technical timestamp is stored in your browser’s local storage (localStorage) to display a continuous model counter. This value is used solely to continue the counter state when you return later.

If you dismiss the English-version prompt on the German overview page with “Nein, Danke.”, that choice is also stored in localStorage so the prompt is not shown again. No personal data is stored and nothing is sent to our servers for that entry.

In addition, temporary session data is stored in the browser (sessionStorage) for purely technical functionality (e.g. selected jurisdiction view, one-time UI states, and when using the guided tour, technical progress data). This data is limited to the current browser session and is deleted when the browser is closed.

Fonts for the website are served by us (no Google Fonts or similar CDN requests). You can delete browser storage data at any time in your browser settings.

8. Retention

Website access logs: at most 14 days (rotation by size or age — whichever comes first), then deletion; no marketing analysis.
Information signup: until withdrawal or unsubscribe; hard-delete of any residuals within at most 30 days, and beyond that only where legal retention obligations require otherwise.
netbeat: under the provider’s documented deletion periods; we do not keep our own long-term copies beyond that.

9. Disclosure of data

Data is disclosed only where required to operate the website and the features you use (Hetzner, netbeat), where we are legally obliged to do so, or where you have consented. No disclosure for third-party advertising.

10. Your rights

Under the GDPR you have in particular the right of access, rectification, erasure, restriction of processing, data portability, withdrawal of consent with effect for the future, objection in accordance with the statutory provisions, and complaint to a competent data protection supervisory authority.

An informal message to datenschutz@nachlassgestalten.de is sufficient to exercise your rights.