Privacy Policy

1. Data Controller

The data controller for the processing of your personal data is:

OnlineEngineering

Managing Director: Alexander Liandres

Richard-Strauss-Str. 28

81677 Munich

Germany

Email: info@onlineengineering.de

2. Collection and Storage of Personal Data

3. Purpose of Data Processing

I process your personal data for the following purposes:

• Providing and improving my website and services
• Processing inquiries and providing customer support
• Sending information about my services (with your consent)
• Complying with legal obligations
• Preventing fraud and ensuring security

The legal basis for processing depends on the specific purpose and is based on:

• Your consent (Art. 6 para. 1 lit. a GDPR)
• Performance of a contract (Art. 6 para. 1 lit. b GDPR)
• Legal obligation (Art. 6 para. 1 lit. c GDPR)
• Legitimate interests (Art. 6 para. 1 lit. f GDPR)

4. Disclosure of Data to Third Parties

I do not sell, trade, or otherwise transfer your personal data to third parties without your explicit consent, except in the following cases:

• Service providers: I may share data with trusted third parties who assist me in operating my website, conducting my business, or servicing you, as long as those parties agree to keep this information confidential.

• Legal requirements: I may disclose your data when required by law or to protect my rights, property, or safety.

• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new owner.

All third-party service providers are contractually bound to comply with GDPR requirements and are only permitted to process data on my behalf.

5. Data Retention Period

I store your personal data only as long as necessary for the purposes for which it was collected or as required by law.

• Contact form data: Deleted after completion of the inquiry and any necessary follow-up, unless you have consented to further use.
• Log files: Automatically deleted after 90 days.
• Cookies: Deleted according to their specific retention period (session cookies are deleted when you close your browser; persistent cookies are stored for a maximum of 12 months).

After the retention period expires, your data will be deleted or anonymized.

6. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to obtain information about your stored personal data.

• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data.

• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data under certain conditions.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing under certain conditions.

• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.

• Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data.

• Right to withdraw consent (Art. 7 para. 3 GDPR): If processing is based on your consent, you have the right to withdraw your consent at any time.

• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact me at: privacy@onlineengineering.de

7. Data Security

I implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

My security measures include:

• SSL/TLS encryption for data transmission
• Regular security audits and updates
• Access controls and authentication
• Data backup and recovery procedures
• Employee training on data protection

Despite these measures, please be aware that no method of transmission over the internet or electronic storage is 100% secure.

8. Third-Party Services

My website may use third-party services for various functionalities:

• Web hosting services
• Analytics services
• Content delivery networks (CDN)
• Payment processors (if applicable)

These services may process your data in accordance with their own privacy policies. I recommend reviewing their privacy policies for more information.

I ensure that all third-party services comply with GDPR requirements through data processing agreements.

• Email delivery (Brevo): if you submit your email address through the "AI or Automation?" form, it is passed to Brevo (Sendinblue S.A.) to deliver your automated assessment result, which Brevo sends on my behalf. Brevo acts as a data processor under a data processing agreement pursuant to Art. 28 GDPR. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), given by voluntarily submitting your email address through the form.

9. Children's Privacy

My services are not directed to individuals under the age of 16. I do not knowingly collect personal data from children under 16.

If you are a parent or guardian and believe that your child has provided me with personal data, please contact me so that I can delete such information.

10. Changes to This Privacy Policy

I reserve the right to update this privacy policy to reflect changes in my practices or applicable laws.

I will notify you of any material changes by posting the new privacy policy on this page and updating the 'Last Updated' date.

I encourage you to review this privacy policy periodically for any changes.

11. Contact Information

If you have any questions about this privacy policy or my data processing practices, please contact me:

Email: privacy@onlineengineering.de

Mail: OnlineEngineering, Alexander Liandres, Richard-Strauss-Str. 28, 81677 Munich, Germany