Privacy Policy

Introduction and overview

We have written this privacy policy to explain, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we process as the controller, as well as what our engaged processors (e.g. providers) process, now and in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.

Scope

This privacy policy applies to all personal data processed within our company, and to all personal data processed by companies we commission (processors). Its scope covers this website, our company profiles on social networks, and communication with us by email and phone.

Legal basis

We process your data only if at least one of the following conditions applies:

• Consent (Art. 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose, where we explicitly ask you for it.
• Contract (Art. 6(1)(b) GDPR): To fulfil a contract or pre-contractual obligations with you.
• Legal obligation (Art. 6(1)(c) GDPR): Where we are subject to a legal obligation, e.g. retention of invoices.
• Legitimate interests (Art. 6(1)(f) GDPR): In the case of legitimate interests that do not restrict your fundamental rights, e.g. for a secure and economical operation of our website.

Additionally, the Federal Data Protection Act (BDSG) in Germany and, where applicable, further national laws apply.

Contact details of the controller

OPNATIX GmbH

Gerd Nothdurft (Managing director)

Fabrikstraße 10, 71570 Oppenweiler, Germany

Email: info@omegacap.de

Retention period

We store personal data only for as long as is strictly necessary to provide our services and products. In some cases we are legally required to retain certain data even after the original purpose no longer applies, for example for accounting purposes. If you wish to have your data deleted or withdraw a consent, the data will be deleted as quickly as possible, provided no retention obligation applies.

Your rights under the General Data Protection Regulation

In accordance with Art. 13, 14 GDPR, we inform you of the following rights to which you are entitled:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right not to be subject to a decision based solely on automated processing (Art. 22 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority: State Commissioner for Data Protection Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, poststelle@lfdi.bwl.de, baden-wuerttemberg.datenschutz.de.

Web hosting

This website is hosted by lima-city (lima-city.de). When you visit our website, the hosting provider automatically collects technical access data transmitted by your browser in what are known as server log files. This typically includes the IP address, date and time of the request, the page accessed, the amount of data transferred, browser type and version, and the operating system used. This data serves the technical provision and security of the website and is automatically deleted after a short period. The legal basis is our legitimate interest in the secure and functional operation of the website (Art. 6(1)(f) GDPR).

Contact and quote request form

When you use our contact or quote request form, we process the data you voluntarily provide (e.g. name, email address, company, phone number, message, and where applicable address and desired product variant) in order to process your inquiry and respond to you. The legal basis is Art. 6(1)(b) GDPR where your inquiry concerns a quote or a contract, and otherwise our legitimate interest in answering your inquiry (Art. 6(1)(f) GDPR).

The technical handling of the forms takes place exclusively on our own server (hosting: lima-city, Germany). The resulting emails are stored in our mailbox, which is also hosted by lima-city in Germany. The same applies if you email or call us directly: we then process your details solely to handle your request, on the same legal bases as above. No other external service providers or third countries (e.g. the USA) are involved.

After submitting, you receive an automatic confirmation of your details by email. To protect against spam and abuse, your browser solves a small computational task in the background when the form is loaded; no cookies are set and no data is transferred to third parties. To prevent the form from being abused in bulk or for sending mail to other people's addresses, we store on our server, until the end of the respective day, only pseudonymised check values (hashes) of your IP address and your email address. The original data cannot be recovered from these; the key used for this changes daily. The legal basis is our legitimate interest in operating the form securely and free of abuse (Art. 6(1)(f) GDPR).

Your form data is deleted once your inquiry has been fully processed, provided no statutory retention obligation (e.g. under commercial or tax law) applies.

Cookies and local storage

We ourselves do not set any cookies on our website. We only store something in your browser's local storage if you object to web analytics (see below): we then remember that decision there so it applies on every further visit. For purely technical reasons, our hosting provider lima-city automatically sets a technical cookie (named "_lcp", and if protection against automated access is active, possibly also "_lcp2"/"_lcp3" with a fixed, non-individual marker) when the website is accessed, which is required to operate the website (e.g. load balancing and protection against automated access), has no tracking function, and does not require consent (Art. 6(1)(f) GDPR). Should we use cookies or comparable technologies requiring consent in the future, we will update this privacy policy accordingly and ask for your consent.

Web analytics with Matomo

We use the open-source software Matomo on our website for web analytics. Matomo is installed on our own server at our hosting provider, so no data is transmitted to third parties or outside the EU. Matomo does not set cookies and does not read device characteristics such as screen resolution or installed browser plugins. Your IP address is only processed for the transmission and is truncated by the last two bytes before being stored, so no conclusions can be drawn about you as a person. So that several page views during one visit are counted as one visit, Matomo creates an encrypted identifier (hash) from information your browser sends with every page request anyway (browser and operating system type, language setting, truncated IP address). This identifier is not stored on your device, is generated anew every day and does not allow you to be recognised on other days or on other websites. Only statistical information is collected, such as pages visited, approximate origin (country/region), browser and device type, and time spent on the site. This data is used solely for statistical evaluation to make our website more user-friendly.

The legal basis for this processing is our legitimate interest (Art. 6 (1) lit. f GDPR) in designing and optimizing our website according to demand. The collected data is automatically deleted after 24 months. You can object to this at any time (Art. 21 GDPR) by unticking the box below.

Our social media presences

We run company profiles on Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland), TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). Our website only links to these profiles; no content from the networks is embedded and no data is transferred to them when you visit our website. You only leave our website when you follow such a link.

When you visit or interact with our profiles (e.g. comments, messages, likes), the operators process your data according to their own privacy policies, even if you are not logged in. For the page statistics the networks provide to us ("Insights", "Analytics"), we are joint controllers with the respective operator (Art. 26 GDPR). The operator provides the essence of the arrangement and assumes primary responsibility for the processing and for fulfilling your rights. We only receive aggregated, anonymous statistics and have no influence on the processing by the operators. The operators may also transfer data to countries outside the EU, such as the USA or, in the case of TikTok, China; according to their own statements, they rely on adequacy decisions or standard contractual clauses of the EU Commission.

We process data you send us via the networks (e.g. messages) only to communicate with you and to present our products. The legal basis is our legitimate interest in modern public relations and communication (Art. 6(1)(f) GDPR), and Art. 6(1)(b) GDPR for quote requests. You can exercise your rights against us as well as against the respective operator; most effectively directly with the operator, as only the operator has full access to the data. Operators' privacy policies: Instagram, TikTok, LinkedIn.

External links to Amazon

You can purchase our products via external Amazon stores. If you click a corresponding button and are taken to Amazon, you leave our website; the privacy policy of the respective Amazon country portal then applies. We have no influence over data processing there.