Privacy at a Glance
Protecting your data is not a box-ticking exercise for us – it's part of how we work. This website has been built with data minimisation in mind: it runs on a server in Germany, does not integrate any external services such as US-based cloud providers, tracking pixels, or fonts from third-party servers, and only sets cookies that are technically necessary. Below we explain what data we process, when, and why.
Controller
The party responsible for data processing on this website is:
OpitzWorks
Owner: Tobias Opitz
Stockhauser Str. 17
42929 Wermelskirchen
Hosting and Server Log Files
This website is hosted by a provider with server infrastructure located in Germany: netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe. A data processing agreement in accordance with Art. 28 GDPR is in place with the hosting provider.
When you access this website, the server automatically collects information transmitted by your browser and stores it in so-called server log files: browser type and version, operating system used, the previously visited page (referrer URL), date and time of access, and the IP address in truncated form. This data cannot be attributed to any specific individual and is used exclusively for technical operations, security, and error analysis. The legal basis is our legitimate interest in stable and secure operations (Art. 6(1)(f) GDPR).
No External Services, No Data Sharing
We do not embed any third-party content via external servers. Fonts, icons, and software libraries are stored locally on our own server and are not loaded from external content delivery networks. We do not use Google Analytics, the Facebook Pixel, or any comparable tracking services. When you simply visit the website, your data is therefore not passed on to third parties.
Cookies
This website only uses technically necessary cookies – for example, to maintain a session or to protect forms against misuse. Such cookies are required for the operation of the site and are permitted without consent under Section 25(2) TDDDG. The legal basis for the associated processing is Art. 6(1)(f) GDPR. We do not set any marketing or tracking cookies.
Contact Form and Enquiries
If you contact us via the contact form or by email, we process the data you provide – your name, email address, phone number if applicable, and the content of your message – solely for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR). We do not share this data and delete it as soon as the enquiry has been fully processed, provided no statutory retention obligations apply.
Analytics
To help us improve our offering, we analyse page visits in anonymised form. The analysis is carried out on our own server, without transmitting data to third parties, and in a manner that does not allow any reference to a specific individual to be established. The legal basis is Art. 6(1)(f) GDPR.
Newsletter
If you subscribe to our newsletter, we use your email address for sending it. Registration is carried out using a double opt-in process: after signing up, you will receive a confirmation email containing a link that you must click. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time using the unsubscribe link included in every email.
SSL/TLS Encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in the address bar of your browser. This ensures that data you transmit to us cannot be read by third parties.
Retention Period
Unless a more specific retention period is stated in this policy, your personal data will remain with us until the purpose for processing no longer applies. Where statutory retention obligations exist, the data will be deleted once those periods have expired.
Your Rights
Under the GDPR, you have the following rights at any time: the right to access your stored data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing (Art. 21). Any consent you have given may be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. An informal message to the address stated above is sufficient for any enquiry.
Changes to This Privacy Policy
We update this privacy policy whenever changes to the website or the applicable legal framework make this necessary. The version currently published on this page shall apply at all times.