Privacy Policy

This policy explains what personal data Omnidox processes when you visit this website, why, on what legal basis, and what rights you have under the EU General Data Protection Regulation (GDPR) and German data protection law.

Controller

The controller responsible for this website is the operator named in our Impressum. You can reach us at nolan.planz@omnidox.org.

What we process, and why

• Server log data. When you visit, our hosting provider processes your IP address, the time of the request, the page requested and your browser type. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR, legitimate interest).
• Audit request form. If you request an audit, we process the details you enter: name, email, business name, website, business type, service area and, optionally, phone number. We use them to prepare your audit and follow up (Art. 6(1)(b) GDPR, steps prior to a contract at your request).
• Contact form and email. We process your name, email address and message to answer you (Art. 6(1)(b) or (f) GDPR).
• Analytics (only with your consent). If you accept analytics in the cookie banner, we use Google Analytics and/or Google Tag Manager to measure how the site is used. This sets cookies and sends data such as your IP address (shortened where supported), device and pages visited to Google, which may transfer it to the United States. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Nothing from Google is loaded before you agree.

We don't sell your personal data and we don't use it for advertising profiles.

Withdrawing or changing your cookie choice

You can withdraw consent at any time with effect for the future using the cookie settings link in the footer when analytics is enabled. Withdrawing doesn't affect the lawfulness of processing before withdrawal. Strictly necessary storage (remembering your cookie choice in your browser) doesn't require consent.

Recipients

We use service providers who process data on our behalf under data processing agreements, such as hosting, email delivery of form submissions and, if you consent, analytics. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Server logs are kept for a short period. Form submissions are kept as long as needed to respond to you and manage any resulting business relationship, then deleted, subject to statutory retention duties. Analytics data is kept according to the retention setting in our Google account.

Your rights

You have the right to access, rectify, erase or restrict processing of your data, to data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). You can withdraw consent at any time. To exercise these rights, email nolan.planz@omnidox.org. You also have the right to lodge a complaint with a data protection supervisory authority, for example the one in your federal state.

Changes

We may update this policy. The date at the top shows when it was last changed.