Privacy Policy

Privacy Policy


Introduction


The protection of your personal data is particularly important to us at Okitalki IT-Service und Softwarebetrieb. With the General Data Protection Regulation (GDPR) of the European Union, the regulations on handling personal data have been modernized and standardized. It replaces the previously valid Data Protection Directive (Directive 95/46/EC) and ensures that your data is uniformly protected throughout Europe.


In this privacy policy, we explain how we collect, store, and use your data. We also inform you about the measures we have taken to ensure the security of your data.


General Information


These notes are intended to give you a clear overview of what personal data we collect and how it is processed when you visit our website. Personal data is all information that personally identifies you, such as name, email address, or IP address. Detailed information can be found in the following sections of this statement.


Data Collection on Our Website


Data Controller


Responsibility for the collection and processing of your data lies with Okitalki IT-Service und Softwarebetrieb. The contact details of the responsible party can be found below under "Information about the Responsible Party."


Collection of Your Data


We collect data in two ways:


Provided directly by you: For example, when you fill out a contact form, we receive your information directly from you.


Automatically: When visiting our website, our systems automatically collect technical information such as browser type, operating system, IP address, date and time of access. This data helps us operate our website reliably and securely.


Purpose of Data Use


The collected data primarily serves to ensure the smooth operation of our website. In addition, we use certain data to analyze our offering and continuously optimize it so that we can better meet your needs.


Your Rights


You have the right at any time to obtain information about the personal data stored by us, their origin and purpose. In addition, you can request correction, deletion, or restriction of processing. If you have given us consent to data processing, you can revoke it at any time. You also have the right to file a complaint with the competent data protection supervisory authority.


External Hosting


Our website is operated by a professional external service provider (host). All personal data collected in this process, such as IP addresses, contact information, or contract data, are stored exclusively on the host's servers.


The host acts only within the scope of our instructions and processes data only to the extent necessary to provide its services.


GoDaddy

Corporate Headquarters

100 S. Mill Ave Suite 1600

Tempe, AZ 85281 USA


Phone number: 020 7084 1810


The EU representative according to Article 27 GDPR:

GoDaddy Deutschland GmbH

c/o WeWork

Friesenplatz 4

50672 Cologne, Germany


GoDaddy processes technically necessary data, including in particular:


IP addresses, browser and system information, access times, server and CDN log files, as well as data processed within the framework of server-side rendering (Next.js).

Additionally, GoDaddy may process data via globally distributed edge locations, including transmission to the USA. This includes in particular CDN requests, edge functions, and cache operations.

Data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR to ensure the security, stability, and technical provision of the website.

We have concluded a data processing agreement (Art. 28 GDPR) with GoDaddy.


Data Transfer to the USA

Data transfer is based on EU Standard Contractual Clauses (SCC) according to Art. 46 GDPR.

There is a risk that US authorities may access data without effective legal remedies being available to you.


Further information: https://www.godaddy.com/en-uk/legal/agreements/european-supplemental-privacy-notice


Information about the Responsible Party


The responsible party for processing your data is:


Okitalki IT-Service und Softwarebetrieb

Dipl. Kaufmann Thomas Fantes

Moselbahnstraße 23

54340 Köwerich

Germany


Email: okitalki@fantes.de


The responsible party decides on the purposes and means of data processing. A data protection officer has not been appointed as there is no legal obligation to do so.


Storage Duration


Unless otherwise stated, we store personal data only as long as necessary for the purpose. As soon as you request deletion of your data or revoke consent, we delete your data unless there are statutory retention obligations (e.g., tax or commercial law requirements).


Legal Bases for Data Processing


The processing of your data is based on different legal bases:


Consent: Art. 6 Para. 1 lit. a GDPR and Art. 9 Para. 2 lit. a GDPR for special data categories.


Contract fulfillment: Art. 6 Para. 1 lit. b GDPR if processing is necessary for the performance of a contract or pre-contractual measures.


Legal obligations: Art. 6 Para. 1 lit. c GDPR.


Legitimate interest: Art. 6 Para. 1 lit. f GDPR, e.g., to ensure the operation of our website.


Data transfer to third countries: Art. 49 Para. 1 lit. a GDPR if you have expressly consented.


Revocation of Your Consent


If you have given us your consent to processing, you can revoke it at any time. The processing that has already taken place remains unaffected.


Right to Object


If we process data on the basis of Art. 6 Para. 1 lit. e or f GDPR, you can object at any time for reasons arising from your particular situation.


For direct marketing, you can object to the processing of your personal data at any time. Your data will then no longer be used for advertising purposes.


Right to Complain


In the event of data protection violations, you can lodge a complaint with the competent supervisory authority, particularly in the EU member state where you have your habitual residence, workplace, or where the alleged violation occurred.


Right to Data Portability


You can receive the data that we process automatically based on your consent or a contract in a machine-readable format. Direct transfer to another controller will be carried out where technically feasible.


Information, Correction, and Deletion


You have the right at any time to receive free information about your personal data stored by us. In addition, you can request correction or deletion of your data to the extent permitted by law.


Right to Restriction of Processing


Under certain conditions, you can restrict the processing of your data, e.g.:


If the accuracy of the data is disputed


In case of unlawful processing


If the data is no longer needed but is still required for legal claims


In case of objection according to Art. 21 Para. 1 GDPR until a balancing of interests has been carried out


Restricted data may only be processed with your consent or to protect rights.


Cookies


Our website uses cookies, small text files that are stored on your device.


Technically Necessary Cookies

These cookies are required for the website to function (e.g., session management, routing, security).

Legal basis: § 25 Para. 2 TTDSG, Art. 6 Para. 1 lit. f GDPR.


Cookies Requiring Consent

Cookies used for analysis, authentication, or external services are only set if you have consented.

Legal basis: § 25 Para. 1 TTDSG, Art. 6 Para. 1 lit. a GDPR.


To the extent that cookies are not technically required, they are only set if you have expressly consented to this. Consent is granted and revoked via a consent management tool we use. Without consent, these cookies are not set.


Cookies are divided into the following subcategories:


Session cookies: are deleted after closing the browser.


Permanent cookies: remain stored until you delete them or they are automatically deleted.


Third-party cookies: may be set by third parties, e.g., for analysis or payment services.


Cookies serve either technical purposes, website optimization, or marketing analysis. Storage is based on your consent or our legitimate interest.


We only use essential cookies on this website.


Contact Form, Email, Telephone


If you contact us via form, email, or telephone, we store your information to process your request. Storage duration:

We store data from contact requests for 6 months after completion of communication, unless there are statutory retention obligations. Your data will not be shared without your consent. Processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR, Art. 6 Para. 1 lit. f GDPR, or Art. 6 Para. 1 lit. a GDPR if you have given us consent.


Our website uses TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by "https://" and the lock symbol in the browser bar.


Third Country Transfer


If data is transferred to third countries (e.g., USA, Singapore), there is a risk that a level of data protection corresponding to EU standards is not guaranteed there and authorities may gain access to the data without effective legal remedies being available to you.

The transfer is based on EU Standard Contractual Clauses (Art. 46 GDPR).


Changes to the Privacy Policy


We reserve the right to adapt this privacy policy in the event of changes in the law or our services. Please check regularly for the current status.


Made on
Tilda