Cookie settings
Please choose your cookie settings.
Privacy
Privacy Policy
1. Data Controller
The controller responsible for processing personal data on this website is OE Agentur, Ludwig-Erhard-Str. 10, 34131 Kassel, Germany.
2. Contact for Privacy Inquiries
If you have questions regarding data protection or want to exercise your rights, you can contact us at the following email address:
3. Data Processed When Visiting This Website
When you access this website, we process technically required connection data. This may include in particular IP address, date and time, pages accessed, referrer, browser type, operating system, and access status. Processing is necessary to ensure secure provision, stability, and integrity of the website.
4. Legal Bases for Processing
Unless stated otherwise, personal data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). Consent-based processing is carried out on the basis of Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG. Pre-contractual and contractual communication is processed on the basis of Art. 6(1)(b) GDPR.
5. Hosting via Cloudflare / Data Processing Agreement
This website is hosted and delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes the connection data listed in section 3 in order to deliver the website and protect it against attacks and automated abuse. Your IP address is also used briefly as a counter key to limit how often the contact form and the chat assistant can be used from a single connection; no profile is created. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). Processing is carried out under a data processing agreement pursuant to Art. 28 GDPR. For the transfer to the USA, see section 12.
6. Cookies and Consent Management
We use a consent management solution to document and manage your cookie preferences. Necessary cookies are required for technical operation. Optional cookies are only set or activated after your consent. You can change or withdraw your consent at any time with future effect in the cookie settings.
7. Tracking and Marketing Tools
Based on the current implementation status, no active analytics, marketing, or tracking scripts are integrated on this website. If such services are introduced in the future, we will provide transparent prior information and obtain consent where required.
8. External Links
Our website contains external links, especially to Instagram. By clicking these links, you leave our website. The operators of linked pages are solely responsible for data processing on those websites.
9. Contact by Contact Form, Email, or Phone
If you contact us, we process the data you provide (e.g., name, contact details, and content of your request) to handle and respond to your inquiry. Technical metadata may also be processed where required for secure communication handling. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual requests and otherwise Art. 6(1)(f) GDPR. Contact form submissions are transmitted via our website to servers operated by Hetzner Online GmbH in Helsinki, Finland, prepared there for delivery together with the page URL and browser identifier, and delivered to our mailbox by the email service provider Brevo. Your IP address is not passed on to these systems.
10. Chat Assistant
This website offers an optional AI-supported chat assistant. When a page is opened, the chat program and the chat assistant's logo are loaded from chat.nickle.ai, the chat service of our processor Nickle AI. For technical reasons, your IP address, the time of the request and browser and device details are transmitted; no cookies are set. Further data is processed only once you send a message. We process the content of your messages and of the replies, a randomly generated conversation ID, the time of the message and the URL and language of the page you are on; the history of the current conversation is also stored locally in your browser and deleted at the end of the browser session at the latest. Your messages are transmitted via chat.nickle.ai to servers operated by Hetzner Online GmbH in Helsinki, Finland, and passed to the Azure OpenAI Service of Microsoft Ireland Operations Ltd. to generate a reply. Processing at Microsoft takes place within the European Union; your entries are not used to train the models. Your IP address is used only briefly to limit the number of messages and is not passed on to the AI service. The conversation history and technical processing data are deleted automatically after 14 days. The legal basis is Art. 6(1)(b) GDPR where the conversation concerns the initiation of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries promptly). Please do not enter any special categories of personal data within the meaning of Art. 9 GDPR in the chat. Replies are generated automatically and may be incomplete or incorrect; they do not constitute a binding statement on our part.
11. Recipients of Data
Recipients of personal data are technical service providers that we engage as processors under agreements pursuant to Art. 28 GDPR: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (hosting, delivery and abuse protection of the website); Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server infrastructure in Helsinki, Finland, for processing contact requests and chat messages); Sendinblue SAS (Brevo), 7 rue de Madrid, 75008 Paris, France (delivery of contact requests by email); Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Azure OpenAI Service for generating the chat assistant's replies); and Nickle AI – Oreshin, Platon und Scheffler, Daniel GbR, Ludwig-Erhard-Str. 10, 34131 Kassel, Germany (development, provision and technical operation of this website and the chat assistant). Data is disclosed to other third parties only where necessary for service provision or where there is a legal obligation.
12. Third-Country Transfers
As part of hosting by Cloudflare, Inc., personal data may be transferred to the USA. The transfer is based on EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR as part of the data processing agreement; Cloudflare is additionally certified under the EU-U.S. Data Privacy Framework. Hetzner, Brevo, Microsoft and Nickle AI process the data within the European Union; no third-country transfer takes place in that respect.
13. Storage Period
We store personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations. Data is then deleted or its processing is restricted in accordance with applicable data protection law.
14. Your Rights
Under GDPR, you have in particular rights of access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future.
15. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent supervisory authority (Art. 77 GDPR) if you believe that the processing of your personal data is unlawful.
16. No Obligation to Provide Data / No Automated Decision-Making
There is generally no legal obligation to provide personal data unless it is required for handling a request or performing a contract. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
17. Version and Changes
We reserve the right to update this privacy policy in case of legal, technical, or organizational changes.