Legal
Privacy
Information on the processing of personal data on this website.
Translation notice
Translated from the German original; the German text is authoritative.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Nakiki SE
Hanauer Landstrasse 204
60314 Frankfurt am Main, Germany
E-mail: info@nakiki.se
Represented by the Management Board: Andreas Wegerich. Further details are available in the Imprint.
General
This website is a statically exported offering with no login area, no contact forms, and no shopping-cart or account functions. It sets no cookies and uses no tracking, analytics, or advertising services (no Google Analytics, no Matomo, no consent-management tool, and no comparable service). No data is stored in visitors' browsers either (no localStorage, no sessionStorage). Fonts are served exclusively from our own server (self-hosted), not from Google Fonts or any other external font provider.
There are two deliberate exceptions to this rule: embedded YouTube videos and a share-price widget from Deutsche Börse AG. Both are described in their own sections below.
Provision of the website and server log files
When you access this website, the web server we use (nginx) automatically processes technical data transmitted by your browser. This includes, in particular, the IP address, the date and time of the request, the page requested, the HTTP status code, the amount of data transferred, the referrer URL (the previously visited page), and the user agent (browser and operating system information). This processing is technically necessary to display the website to you and to safeguard the operation of our systems (e.g. to detect attacks and analyse errors).
The legal basis for this processing is our legitimate interest in a stable and secure operation of our website (Art. 6(1)(f) GDPR).
The log data is stored only for as long as is necessary for operation. A fixed, configured retention period beyond that is not currently documented.
The website runs as a static export on a Kubernetes cluster; delivery is handled by an nginx server (a container image based on nginx:alpine), and the container image is stored in the GitHub Container Registry. The connection is encrypted via TLS; certificates are issued automatically via Let's Encrypt (cert-manager).
Contacting us by e-mail
If you contact us by e-mail, we process your details (e.g. your e-mail address and the content of your message) solely to answer your enquiry. This website does not offer a contact form; contact is made exclusively via the e-mail address given (info@nakiki.se). Depending on the content of your enquiry, the legal basis is either the performance of pre-contractual or contractual obligations (Art. 6(1)(b) GDPR) or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
IR newsletter
For the investor relations area, we do not offer an automated newsletter dispatch with a sign-up form; the "Newsletter" button merely opens a pre-filled e-mail addressed to info@nakiki.se. We do not automatically store addresses in a mailing tool. Only the details you provide yourself in that e-mail are processed; the legal basis corresponds to the e-mail contact described above.
Embedded videos (YouTube)
On some pages (e.g. "Videos & Interviews" on the home page and the press page) we embed videos from the provider YouTube, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are embedded as an <iframe> via the domain youtube-nocookie.com when the page loads; there is no prior consent prompt and no preview image. Consequently, a connection to YouTube/Google is established as soon as you open a page containing videos, and YouTube/Google processes at least the IP address and technical data of your browser; further data may be processed in accordance with Google's own privacy policy, and data may also be transferred to the USA. Playback starts only when you click the player's play button (no autoplay). We use YouTube's so-called extended privacy mode ("youtube-nocookie"), for which YouTube states that it does not store information about visitors before they watch the video; which data YouTube/Google actually processes when loading and playing is determined solely by Google. Alternatively, you can watch the videos directly on youtube.com via the link provided. Further information on data processing by Google: https://policies.google.com/privacy .
Share price data from Deutsche Börse AG
On individual pages (e.g. "Share", homepage) we display our current share price via a price widget and/or a share price chart provided by Deutsche Börse AG, 60485 Frankfurt am Main. Technically this is done via an <iframe> that loads the domain xms.deutsche-boerse.com together with the page. As a result, Deutsche Börse AG receives the IP address and technical browser data (e.g. user agent) of the visitor. Per our own check on 2026-09-14 (isolated browser context, <iframe> embed matching the live integration), the module set no cookies and did not contact any domain other than xms.deutsche-boerse.com; this check only covers the observed window (a few seconds per module) and does not necessarily cover later interaction with the module (e.g. changing the time span in the share price chart). The price widget loads automatically with the page; the share price chart requires an additional click before it loads. Further information on data processing by Deutsche Börse AG is available in its own privacy notice: https://live.deutsche-boerse.com/en/privacy (checked 2026-09-14 as the only reachable Deutsche Börse Group privacy page we could find; a separate German-language version under its own URL was not confirmed).
External links
At several points on the website we link to third-party profiles (e.g. LinkedIn, X/Twitter) as well as to external documents and websites (e.g. Deutsche Börse, the Federal Gazette). These are exclusively ordinary text links (<a href>); no social-media plugins, "like" buttons, or other embedded widgets from these providers are active on our website. Clicking such a link takes you away from our website; the operator of that site is solely responsible for the data processing there, and its privacy policy then applies.
Rights of data subjects
As a data subject, you have various rights under the GDPR, in particular arising from Art. 15 to 21 GDPR:
- Right of access (Art. 15 GDPR): confirmation of whether and which data we process about you.
- Right to rectification (Art. 16 GDPR) and right to erasure (Art. 17 GDPR) as well as the right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR).
- Right to object (Art. 21 GDPR): you may object to processing based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
- Right to withdraw consent: you may withdraw any consent given at any time, with effect for the future.
- Right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data-protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.
To exercise these rights, you may contact us at the e-mail address given above.
Changes
We will adapt this privacy notice whenever changes to the website or to the processing described here make it necessary. Please check its content regularly.
As of: 2026-09-19