Privacy Policy

1. Controller

Sarah Blattmann
Wesendonkstraße 50
81925 Munich
Germany
Email: hello@namiclub.de

2. Data we collect

When you sign up for early access, we process the information you submit through the form:

• Name
• Email address
• Submission timestamp

3. Purpose of processing

We process this data to manage the Nami Club early-access list, send a one-time welcome confirmation, and contact you when launch communication is available. We do not use it for marketing unrelated to Nami Club.

4. Legal basis

The legal basis for processing is your consent under Art. 6(1)(a) GDPR, given by submitting the signup form. The form treats the act of submission as explicit consent to be contacted about Nami Club. Where the inquiry is understood as pre-contractual, Art. 6(1)(b) GDPR also applies.

You can withdraw your consent at any time by writing to hello@namiclub.de. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. Service providers

We use the following processors to operate the website and the early-access flow. Each is bound by a data processing agreement under Art. 28 GDPR.

• Vercel Inc. (United States), website hosting and serverless functions. Server-side region selection routes most processing through European edge locations where available.
• Supabase, Inc. (United States), database and authentication. The Nami project runs in the EU region; submitted form data is stored in the EU.
• Resend, Inc. (United States), transactional email. Used to send the welcome email after signup. Recipient name and email are passed to Resend strictly to deliver the message.

Where processors are located in the United States, transfers rely on the EU-U.S. Data Privacy Framework where the processor is certified, or on Standard Contractual Clauses (SCCs) under Art. 46 GDPR.

6. Server logs

When you visit the website, technical connection data such as IP address, request details, user agent, and timestamps may be processed in server logs to ensure operation, stability, and security of the service. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Logs are retained for a short period (typically up to 30 days) and then deleted or anonymized.

7. Storage period

Personal data submitted through the early-access form is stored until you ask us to delete it, or until the early-access program ends and we no longer need the list. Statutory retention obligations may require longer storage in specific cases.

8. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise any of these rights, contact:

hello@namiclub.de

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de

10. Cookies

The website does not set tracking or advertising cookies. Strictly necessary cookies may be set by the hosting provider for technical operation; they do not require consent under § 25 Abs. 2 TDDDG.