Privacy policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data Collection on This Website

Who is responsible for data collection?
Data processing on this website is carried out by the website operator. You can find the contact details in the section “Controller”.

How do we collect your data?
Some data is collected when you provide it to us (e.g. via a contact form or email).

Other data is collected automatically by our IT systems when you visit the website. This mainly includes technical data (e.g. browser type, operating system, time of access, IP address).

What do we use your data for?
Part of the data is collected to ensure the proper and secure functioning of the website.
Other data is used solely to process your inquiries.

What rights do you have regarding your data?
You have the right at any time to:

obtain information about your stored data
request correction or deletion
request restriction of processing
object to processing
request data portability

You also have the right to lodge a complaint with a supervisory authority.

2. Hosting

Hosting via own vServer (STRATO)

We host our website on a virtual server (vServer) provided by:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

As part of hosting, STRATO processes personal data required for the technical operation of the website. This may include:

IP address
time of access
browser and system information

The processing is based on Art. 6(1)(f) GDPR (legitimate interest) for the secure and stable provision of our website.

We have concluded a Data Processing Agreement (DPA) with STRATO in accordance with Art. 28 GDPR.

3. Controller

OPST GmbH
Wettersteinstr. 1
82024 Taufkirchen
Germany

Phone: +49 (0)1514 491 77 30
Email: info@opst.solutions

The controller is the natural or legal person who determines the purposes and means of processing personal data.

4. General Information on Data Processing

Legal Bases

We process your data based on:

Art. 6(1)(b) GDPR (contract / pre-contractual measures)
Art. 6(1)(f) GDPR (legitimate interest)
Art. 6(1)(a) GDPR (consent, where applicable)

Data Retention

Your personal data will only be stored as long as necessary for the respective purpose or as required by legal retention obligations.

Recipients of Data

We only share personal data:

if required for contract fulfillment
if legally obligated
or if we have a legitimate interest

5. Data Collection on This Website

Contact Form

If you contact us via the contact form, your details including the contact data you provide will be stored to process your request and for follow-up questions.

Processing is based on:

Art. 6(1)(b) GDPR (contract-related inquiries)
or Art. 6(1)(f) GDPR (legitimate interest)

Your data will remain with us until the purpose for storage no longer applies or you request deletion. Legal retention periods remain unaffected.

Contact by Email or Phone

If you contact us by email or phone, your data will be processed for the purpose of handling your request.

Processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

6. IT Security

Ninja Firewall

We use Ninja Firewall to protect our website against unauthorized access and cyber attacks.

The following technical data may be processed:

IP address (shortened/anonymized)
request data
time of access

Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring the security of our website.

The firewall is hosted on our own servers. No personal data is transmitted to third parties.

7. Newsletter

We use Brevo to send our newsletter (“Fresh on the Shelf”).

Data Processing

We process:

email address
optional: name / company
usage data (opens, clicks)

Purpose

sending the newsletter
improving content relevance
managing subscriptions (including double opt-in)

Legal Basis

Processing is based on your consent (Art. 6(1)(a) GDPR).

Withdrawal

You can withdraw your consent at any time via the unsubscribe link.

Hosting

According to Brevo, data processing and storage take place on servers within the European Union.

8. Audio and Video Conferencing

We use online conferencing tools to communicate with customers.

Microsoft Teams

Provider:
Microsoft Ireland Operations Limited, Dublin, Ireland

The following data may be processed:

email address
connection data
technical metadata