Privacy Policy
1. Controller
OPENCY GmbH & Co. KGAn der Maar 39
50259 Pulheim
Phone: +49 2234 2190520
Email: privacy [at] opency.org
2. General information on data processing
This website uses no cookies, no analytics or tracking services, and embeds no third-party content (fonts and all other resources are loaded locally from our server). Merely accessing the pages therefore triggers no requests to third-party servers and passes no personal data to third parties for advertising or analytics purposes.
Personal data is transmitted to our processors only when you actively submit the contact form (see section 5).
3. Server log files
When this website is accessed, the hosting provider commissioned to operate it automatically processes information transmitted by your browser in what are known as server log files. This includes, in particular:
- IP address of the requesting device
- date and time of access
- page or file accessed
- browser type and version, operating system
- referrer URL
The processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision, stability and security of the website. The log files are deleted automatically by the hosting provider in accordance with its deletion policy.
4. Contacting us
If you contact us by email or phone, we process the data you provide (e.g. name, email address, content of your inquiry) solely to handle your inquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted as soon as it is no longer required for handling the inquiry and no statutory retention obligations preclude its deletion.
5. Contact form
You can send us an inquiry via the contact form on the home page.
Data processed: salutation, first name, last name, company, email address and your message (required), as well as — if you choose to provide them — a phone and/or mobile number. For spam protection, the time the page was loaded is evaluated technically; this value is not stored. When you submit the form, your browser also transmits your IP address to our processor n8n for technical reasons.
Purpose and legal basis: We process this data solely to handle your inquiry and to get in touch with you. The legal basis is Art. 6(1)(b) GDPR (handling your inquiry / taking steps at your request prior to entering into a contract).
Recipients / processors: For the technical processing of the form and the storage of your inquiry we use the following service providers as processors (Art. 28 GDPR):
- n8n GmbH, Novalisstr. 10, 10115 Berlin (Germany) — receipt and forwarding of the form data. Processing takes place on servers within the EU (Microsoft Azure, Germany West Central region).
- salesforce.com Germany GmbH, Erika-Mann-Straße 31-37, 80636 Munich (Germany) — storage of your inquiry as a lead in our CRM system. Storage takes place on servers within the EU (EMEA region, Frankfurt am Main data center).
A data processing agreement (DPA) is in place with both providers. Where this involves a transfer to a third country (in particular the USA), it is safeguarded by the EU Standard Contractual Clauses (SCC).
Storage period: We store your data for as long as necessary to handle your inquiry and any subsequent business relationship. The data is then deleted unless statutory retention obligations (e.g. under commercial or tax law) preclude its deletion.
6. Links to LinkedIn
This website contains links to the operator’s LinkedIn profile. These are simple links — no LinkedIn plugins are embedded, and no data is transferred to LinkedIn when you visit this website. Only when you click the link do you reach LinkedIn’s pages; there, the privacy policy of LinkedIn Ireland Unlimited Company applies.
7. Your rights
You have the following rights vis-à-vis us regarding the personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
In addition, you have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).
8. Last updated
This privacy policy is current as of July 2026 and will be updated as necessary.