Privacy / Last updated: 1 November 2026

Privacy policy.

This privacy policy explains which personal data we process when you visit the NexuFed AI website or contact us. You can use the website without consenting to analytics or advertising features.

1. Controller and contact

Controller within the meaning of the General Data Protection Regulation (GDPR):

René Glitza, Luca Manuel Becker and Alexandru-Ioan Andreica (jointly responsible for the NexuFed AI website)

René Glitza, Luca Manuel Becker and Alexandru-Ioan Andreica NexuFed AI c/o Ruhr-Universität Bochum Institut für Kommunikationsakustik Gebäude ID / Fachnr. 36 Universitätsstraße 150 44801 Bochum Germany

The three founders jointly determine the purposes and means of the website’s data processing. The email address below is their central privacy contact; you may also exercise your GDPR rights against any of the three founders (Art. 26 GDPR).

For privacy inquiries, contact us at info@nexufed.ai. Further information about the website operator is in our imprint.

2. Hosting and technical delivery

The website is configured for delivery through Cloudflare Workers Static Assets. When you access it, your IP address, requested URL, access time, browser and connection information are processed to the extent necessary to deliver and secure the website. The purpose is reliable and secure website delivery; the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a functioning website protected against misuse.

Hosting, processing on our behalf and log retention: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, provides the website's Cloudflare Workers Static Assets delivery and related security functions. We do not operate a separate visitor-log database. Cloudflare processes technical request and security information under its applicable terms and service-specific retention settings. Further information: https://www.cloudflare.com/privacypolicy/ and https://www.cloudflare.com/cloudflare-customer-dpa/..

Processing locations and any transfers to third countries: Cloudflare operates a global network, which can involve processing outside the European Economic Area, including the United States. Cloudflare's Data Processing Addendum provides EU Standard Contractual Clauses for restricted transfers and refers to the EU-U.S. Data Privacy Framework for eligible transfers: https://www.cloudflare.com/cloudflare-customer-dpa/.

Depending on the enabled Cloudflare security features, strictly necessary security cookies may be used to protect the website. These are not Google Analytics or advertising cookies.

3. Local content and external links

Fonts, images and product screenshots are served with the website. We do not embed external fonts, videos or Notion content. The interactive learning visualization runs in your browser; it does not control machines or transmit operational data to an AI service. The website does not offer accounts, contact forms or file uploads.

External links, for example to GitHub, PyPI or publications, open services operated by others. The respective service receives connection data when you follow a link; its own privacy policy then applies. If you consent to Analytics, Google may also record the outgoing-link click as an Enhanced Measurement event.

4. Email inquiries

Email links open your own email application. If you write to us, we process your email address, information you provide voluntarily, message content and correspondence data to handle your inquiry. The legal basis is Art. 6(1)(f) GDPR, based on our interest in responding to inquiries. If the inquiry concerns steps towards a contract with you, Art. 6(1)(b) GDPR applies.

Service providers and recipients authorized to access the data: Google Workspace, provided in the EEA by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The three founders and other specifically authorized project members may access correspondence where required. Provider information: https://policies.google.com/privacy..

Processing locations and transfers: Google Workspace services may involve processing by Google group companies and sub-processors outside the European Economic Area, including the USA. Applicable safeguards include adequacy decisions for certified recipients, where available, or contractual safeguards including EU Standard Contractual Clauses. Information: https://cloud.google.com/terms/data-processing-addendum.

We retain correspondence only as long as necessary to handle the inquiry, meet any statutory retention obligations or protect legal claims. Specific deletion periods: Routine inquiries are normally deleted within 12 months after receipt, unless continued correspondence, statutory retention obligations or the establishment, exercise or defense of legal claims require longer storage..

5. Careers and applications

You can send general expressions of interest to info@nexufed.ai. The website itself does not accept application files. Information you submit is used to assess your expression of interest and communicate with you. For specific recruitment processes, depending on the employment relationship, § 26(1) BDSG or Art. 6(1)(b) GDPR may apply; general inquiries use the legal basis described in section 4. Please send only the information needed for your inquiry.

Section 4 applies to email service providers and recipients. Retention and deletion of applicant information: Unsuccessful applications are normally deleted no later than six months after a final recruitment decision, unless legal requirements or claims justify longer storage. Inclusion in a longer-term candidate pool requires separate consent. General expressions of interest are deleted when no longer needed..

Current opportunities are linked on the external Notion careers page. Reading our website does not trigger a request to Notion. When you open the link, Notion processes connection data and may use its own cookies. Details are available in the Notion privacy policy. The link does not submit an application through our website.

6. Google analytics and advertising — only with consent

Google Analytics 4 is configured on the website at https://nexufed.ai with measurement ID G-S8T8X439TL for statistical analysis of visits and interactions. Privacy settings offers separate Analytics and Advertising choices, both off by default. The Google tag is loaded and a connection to Google established only after Analytics consent. Advertising is an additional optional choice and requires Analytics; accepting Analytics alone does not permit advertising purposes. Without Analytics consent or after rejecting all optional purposes, neither the tag nor analytics or consent pings are sent to Google. The same configuration applies on local and preview versions of this website.

With Analytics consent, Google may process pages visited, access times, browser/device information, interaction events and pseudonymous identifiers. The connection also technically transmits your IP address. Enhanced Measurement ("Optimierte Analysen") is enabled in the property and can automatically measure page/history changes, scrolling, outgoing-link clicks and, where applicable, site searches, downloads, video and form interactions. Event details can include page/referrer and destination URLs, link text, search terms or other interaction metadata. Our explicit initial page-view event removes URL query parameters and fragments; that is not a guarantee that every automatically measured event or destination URL is query-free. Google Analytics can set cookies such as _ga and _ga_*.

Google Signals, user-provided-data collection and permission for personalized advertising in all supported regions are enabled in the property. They do not override your browser choice. With Analytics alone, advertising storage, advertising data use and personalization remain denied, and our tag disables Google Signals and personalization signals. Only additional Advertising consent permits these consent types and signals. Google may then associate visits with information from eligible signed-in Google accounts, support cross-device measurement, demographic and interest reporting, advertising measurement, audience creation and personalized ads where the relevant services are configured. Declining Advertising does not prevent you from using the website or choosing Analytics alone.

The property-level user-provided-data permission is not itself a customer data upload. This website has no account, contact form or upload flow, and we have not implemented the sending of visitor email addresses, phone numbers, names or addresses as user-provided identifiers to Google. Sending us email does not authorize importing that correspondence or applicant information into Analytics or advertising systems. No separate Google Ads conversion tag or customer-list upload is implemented here. A future identifier-collection flow requires its own implementation, appropriate consent and an updated disclosure; hashing identifiers would not make them anonymous.

The legal bases are your consent under Art. 6(1)(a) GDPR and, for non-essential storage or access on your device, § 25(1) TDDDG. Consent is given separately for Analytics and the additional Advertising purposes. Google is the recipient; the contracting entity and applicable safeguards for possible transfers to third countries: Google Analytics is offered in the EEA by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing may also involve Google LLC in the USA and other recipients. Applicable safeguards for international transfers include adequacy decisions such as the EU-U.S. Data Privacy Framework for certified organizations, or EU Standard Contractual Clauses where required. See https://policies.google.com/privacy/frameworks.. Information about the service is available in the Google privacy policy.

Analytics property retention periods and cookie lifetimes: Our Google Analytics 4 property is configured for 14-month user- and event-level retention. Reset on new user activity is enabled: new activity renews the retention period for the user identifier, so a returning user's identifier can remain longer than 14 months from their first visit. Eligible expired data is deleted in Google's monthly processing cycle; standard aggregated reports may remain available longer. The first-party _ga and _ga_* cookies are configured for up to 730 days (two years), renewed on activity. Browser restrictions can shorten cookie lifetimes. Advertising-related cookies and Google-account information are governed separately by the applicable Google services and your consent; this 14-month setting is not a promise that all Google data or cookies are erased after 14 months.

7. Saving your choice and withdrawing consent

You can choose Analytics alone, add Advertising, reject all optional purposes or withdraw consent at any time using “Privacy settings” in the footer. Accept all grants both optional purposes; Save preferences applies only your selected switches. Turning Analytics off also turns Advertising off. Closing the panel without saving does not change your choice. Your choices are stored locally in your browser under nexufed.analytics-consent with the policy version, measurement ID, Analytics status, separate Advertising permission and the date of your decision. It is not transmitted as a separate consent database. The decision expires after 180 days, or earlier if you clear browser storage or we change the policy version or measurement ID. This strictly necessary storage implements your privacy choices under § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

Rejected, expired or invalid saved choices do not activate Google. We clear accessible first-party Google analytics and advertising cookies left by an earlier choice, without deleting unrelated essential cookies.

Changing an active Google preference disables collection first and clears visible first-party Google analytics and advertising cookies before reloading with the saved choices. Withdrawing Advertising alone can leave Analytics enabled after that reload. Cookies belonging to Google's own domains, HTTP-only cookies and data already held by Google cannot be removed by this website. The page reloads only after saving is confirmed or the previous grant is removed. If saving and removal fail, collection remains disabled on the current page. Follow the prompt to reject again before navigating or reloading. Data already sent or transfers already underway cannot be undone. Withdrawal does not affect the lawfulness of processing before withdrawal.

8. Your rights

Subject to the applicable legal conditions, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3)).

Contact info@nexufed.ai to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), particularly where you habitually reside, work or where the alleged infringement occurred. Supervisory authority responsible for the controller: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; poststelle@ldi.nrw.de; https://www.ldi.nrw.de/..

The connection data needed to provide the website is technically necessary. Providing data for inquiries, optional analytics or advertising is voluntary. Without the contact details needed for a reply, we cannot answer your inquiry. No automated decision-making, including profiling with legal or similarly significant effects under Art. 22 GDPR, takes place through this website.