Contact Us
Englisch

Privacy Policy

This Privacy Policy explains how Nasaff GmbH—including its branch or representative office in Pakistan, which operates under the name “ITCES – Branch of Nasaff GmbH”—collects, uses, stores, discloses, and protects personal data when you visit or use our website https://nasaff.com and the associated services. For the purposes of this Privacy Policy, the terms “we,” “us,” and “our” refer to Nasaff GmbH as well as to the respective branch, office, employees, contractors, and service providers involved in the operation of this website. This Privacy Policy applies to visitors, customers, applicants, business contacts, and users of our website and online services.

1) Who We Are

Website: https://nasaff.com
Operator: Nasaff GmbH / ITCES – A Branch of Nasaff GmbH
Office in Germany: Riedstadt, Hesse
Office in Pakistan: A-52, Saima Villas, Super Highway, Karachi, Sindh, Pakistan
Email: info@nasaff.com
Phone (Pakistan): +92 334 7518021
Phone (Germany): +49 160 1269368

2) Personal data we collect

Depending on how you use our website, we may collect the following categories of personal data.

2.1) Personal Data We Collect

We may collect personal data when you fill out a contact form, request information about our services, sign up for a course, consultation, or online service, send us an email, WhatsApp message, or other communication, apply for a job, internship, freelance position, or collaboration, or subscribe to updates or marketing communications.

 

This may include the following:

 

  • full name;
  • Email address;
  • Phone number;
  • Company name;
  • State or city;
  • Job title or professional background;
  • Message content;
  • uploaded files, resumes, transcripts, or documents;
  • Interest in courses or services;
  • Billing or business contact information, if applicable.

2.2) Automatically Collected Information

When you visit our website, certain technical data may be collected automatically, such as:

 

  • IP address;
  • Browser type and version;
  • Device type;
  • Operating system;
  • referring website;
  • pages visited;
  • Date and time of access;
  • approximate location, derived from the IP address;
  • Cookie IDs;
  • Data on website usage and interaction.

This data is used for security, website operations, analytics, troubleshooting, and improving our services.

2.3) Payment Information

If payments are offered through the website, payment processing may be handled by external payment service providers.
We do not store complete credit card or bank account information unless it is expressly required and permitted by law.
Payment service providers process payment data in accordance with their own data protection and security standards.

3) How We Use Personal Information

We use personal data for the following purposes:

 

  • to operate and maintain the website;
  • to respond to inquiries and contact requests;
  • to provide IT consulting, software development, training, courses, or support services;
  • to process course registrations, service requests, or business inquiries;
  • to communicate with customers, prospective customers, job applicants, and partners;
  • to send administrative notices, confirmations, or service-related information;
  • to improve the website's content, usability, and performance;
  • to detect, prevent, and respond to fraud, abuse, spam, cyberattacks, or security incidents;
  • to comply with legal, tax, accounting, regulatory, and contractual obligations;
  •  to manage job applications, freelancer inquiries, and partnership requests;
  • To send marketing communications, provided that this is permitted by law or based on your consent.

We do not sell personal data.

4) Legal basis for processing

Depending on applicable law and your location, we process personal data based on one or more of the
following legal grounds:

 

  • Your consent;
  • Performance of a contract or precontractual measures;
  • Compliance with legal obligations;
  • our legitimate business interests, such as operating our website, improving our services, and preventing misuse,
    and communicating with business contacts;
  • Protection of rights, property, safety, or legal claims.

To the extent that the EU General Data Protection Regulation applies, the relevant legal bases may include Article 6(1)(a),
Article 6(1)(b), Article 6(1)(c), and Article 6(1)(f) of the GDPR.

5) Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, or similar technologies.

 

These technologies can be used for the following purposes:

 

  • ensure that the website functions properly;
  • Save user settings;
  • Save user settings;
  • Analyze data traffic and usage;
  • Support security and fraud prevention;
  • measure the effectiveness of content or campaigns.

Some cookies are technically necessary. Others, such as analytics or marketing cookies, may require your
consent, depending on the applicable legal situation.

 

You can manage cookies through your browser settings. If we use optional analytics, advertising, or tracking tools
, we should provide a cookie banner or a consent mechanism, provided that this is required by law.

6) Third-party analytics and tools

We may use analytics tools to understand how visitors use our website and to improve our content and services.

 

Analytics tools may collect technical and usage data, such as pages visited, session duration, approximate
location, browser type, and device information. Whenever possible, we use aggregated or anonymized data.

 

If tools such as Google Analytics, Meta Pixel, LinkedIn Insight Tag, Microsoft Clarity, Hotjar, YouTube embeds,
Google Maps, WhatsApp widgets, newsletter systems, booking tools, CRM tools, payment service providers, or similar
services are used, these tools should be listed in this Privacy Policy or in a separate Cookie Policy prior to publication.

 

If additional tools for analytics, advertising, newsletters, payments, bookings, maps, videos, or chats are enabled on the
website, this Privacy Policy or a separate Cookie Policy should be updated accordingly.

7) Contact forms, email, WhatsApp, and communication

When you contact us via forms, email, phone, WhatsApp, LinkedIn, Facebook, or other channels, we process the information you provide to respond to your inquiry and manage our communication with you.

 

Please do not send any sensitive personal information unless it is necessary for your inquiry.

8) Newsletters and Marketing Communications

If you subscribe to a newsletter or request marketing communications, we may use your contact information to send you relevant information about our services, courses, events, or business activities.

 

You can unsubscribe from or opt out of marketing communications at any time by using the unsubscribe link, replying to the message, or contacting us at info@nasaff.com.

9) Job Applications and Hiring

If you apply for a job, an internship, a work-study position, a freelance position, or a collaboration opportunity, we may process personal data such as:

 

  • Name and contact information;
  • Resume and cover letter;
  • Education and work experience;
  • Testimonials and References
  • Interview notes;
  • Information regarding salary or availability;
  • Communication History.

We use this data exclusively for the purposes of recruitment, evaluation, communication, and legal documentation.

10) Disclosure of Personal Data

We may share personal information with trusted third parties as needed, including:

 

  • Web hosting providers;
  • IT service provider;
  • Email and communications providers;
  • Website maintenance providers;
  • Analytics providers;
  • Payment service provider;
  • CRM or support tools;
  • Tax advisors, bookkeepers, certified public accountants, attorneys, and consultants;
  • Government agencies, courts, or regulatory authorities, to the extent required by law;
  • affiliated companies, branches, or representatives involved in the provision of our services.

We disclose personal data only when necessary and—where required—based on appropriate contractual,
technical, and organizational safeguards.

 

Wir gestatten es Dienstleistern nicht, Ihre personenbezogenen Daten für eigene, nicht damit in Zusammenhang stehende Marketingzwecke zu verwenden.

11) International Data Transfers

Because we operate internationally, personal data may be processed in Pakistan, Germany, the European Union, the United Arab Emirates, or other countries where our service providers or business units are located.

 

If applicable law requires safeguards for international transfers, we take appropriate measures, such as
contractual safeguards, access controls, data minimization, and security measures.

12) Data Storage

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Retention periods may depend on the following:

 

  • the type of data;
  • the purpose of the processing;
  • contractual requirements;
  • contractual requirements;
  • Dispute resolution or legal claims;
  • Requests from users to delete or object to their data.

Typical examples of customer loyalty:

 

  • Contact requests: generally up to 3 years after the last communication;
  • Customer and contract documents: in accordance with the applicable retention periods under tax and commercial law;
  • Application documents: generally retained for up to 6 months after the selection process is completed, unless a longer retention period
    is required or has been approved;
  • Technical records: generally kept for a short period, unless required for safety investigations;
  • Newsletter data: until you unsubscribe or revoke your consent.

13) Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized
access, loss, misuse, alteration, or disclosure.

 

These measures may include:

 

  • Access restrictions;
  • secure hosting environments;
  • Password protection;
  • Encryption, where appropriate;
  • Backups;
  • Protection against malware and spam;
  • Monitoring of suspicious activities;
  • Internal confidentiality obligations.

No website, email system, or Internet transmission is completely secure. Therefore, we cannot
guarantee absolute security.

14) Your Rights

Depending on applicable law and your location, you may have the right to:

 

  • Request access to your personal data;
  • request the correction of inaccurate data;
  • request the deletion of your data;
  • revoke consent;
  • object to the processing of certain data;
  • request the restriction of processing;
  • request the restriction of processing;
  • opt out of direct marketing;
  • if necessary, file a complaint with the appropriate authority.

To exercise your rights, please contact us at info@nasaff.com.

We may need to verify your identity before we can respond to your request.

15) Privacy for Children

Our website and services are not intended for children under the age of 18.

 

Our website and services are not intended for children under the age of 18.

16) Links to External Websites

Our website may contain links to external websites, platforms, or social media pages.

 

Our website may contain links to external websites, platforms, or social media pages.

17) Social Media

We may maintain profiles on platforms such as LinkedIn, Facebook, Instagram, YouTube, or other social media sites.
services.

 

We may maintain profiles on platforms such as LinkedIn, Facebook, Instagram, YouTube, or other social media sites.

18) Data Breaches

If we become aware of a data breach affecting personal data, we will take reasonable steps to investigate, limit harm, secure our systems, and notify affected individuals or authorities where legally required.
If we become aware of a data breach affecting personal data, we will take reasonable steps to investigate, limit harm, secure our systems, and notify affected individuals or authorities where legally required.

19) Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

 

The updated version will be published on this website with a new last-updated date.
Continued use of the website following these changes constitutes acceptance of the updated privacy policy.

20) Contact Us

If you have any questions, concerns, complaints, or issues regarding this Privacy Policy or our handling of personal data, please contact us:

 

Email: info@nasaff.com
Phone number in Pakistan: +92 334 7518021
Phone number in Germany: +49 160 1269368

21) Embedding YouTube Videos and Data Transfers to Third Countries

Our website may include videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube is a service of the Google Group.

When you visit a page with an embedded YouTube video or actively play a YouTube video, personal data may be transmitted to Google. This may include, in particular, your IP address, technical device and browser information, the page you visited, the date and time of access, and information about your interaction with the embedded video. If you are logged into your Google or YouTube account at the same time, Google may associate this information with your account.

Whenever possible, we embed YouTube videos in enhanced privacy mode. This mode may limit the use of YouTube content embedded on our website for the purpose of personalizing the YouTube user experience. According to YouTube, enhanced privacy mode prevents the playback of embedded YouTube content from affecting the YouTube browsing experience. However, data transmission to Google—particularly when loading or playing the video—cannot be completely ruled out.

YouTube is embedded only with your consent, provided that no cookies, similar technologies, or external content required for this purpose are loaded. The legal basis is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect via the cookie settings.

It cannot be ruled out that personal data may also be transferred to servers of the Google Group outside the European Union or the European Economic Area—in particular to the United States—and processed there. Google itself notes that information may be processed on servers worldwide. With regard to international data transfers, Google refers, among other things, to recognized data protection frameworks and appropriate safeguards.

For more information about how Google and YouTube process personal data, please see Google's Privacy Policy.