Privacy policy

1. Controller

The controller for data processing on this website is:

• oneeonee, owner Eren Ekmekcioglu
• Hauptstr. 45, 74385 Pleidelsheim, Germany
• Email: info@oneeonee.com

2. Legal bases

We only process personal data where there is a legal basis for it. Depending on the purpose we rely on your consent (Art. 6 (1) (a) GDPR), the initiation or performance of a contract (Art. 6 (1) (b) GDPR), a legal obligation (Art. 6 (1) (c) GDPR) or our legitimate interest in a secure and functioning service (Art. 6 (1) (f) GDPR).

Where we use cookies or comparable technologies that are not strictly necessary to operate the website, we do so solely on the basis of your consent under § 25 (1) TDDDG.

3. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the data arising when the site is accessed on our behalf and stores it on servers in Germany.

The basis is our legitimate interest in providing this website securely and reliably (Art. 6 (1) (f) GDPR). A data processing agreement under Art. 28 GDPR is in place with STRATO.

4. Server log files

When you access this website, information transmitted by your browser is recorded automatically. This is technically necessary to deliver the page:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Volume of data transferred and confirmation of successful retrieval
• Referrer URL, i.e. the previously visited page
• Browser type, browser version and operating system

5. Cookies and consent management

Cookies are small text files stored by your browser. We set necessary cookies without consent because the website does not work as expected without them. Every other service is loaded only after you have agreed in the cookie banner.

We use Google Consent Mode v2: as long as no consent exists, analytics and marketing storage are technically set to “denied” and no Google script is loaded. We store your decision in a cookie (oo-consent) with a lifetime of six months.

You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer. On withdrawal we delete the cookies set by Google as far as this is technically possible. You can also delete or block cookies in your browser.

We set the following necessary cookies and local storage values ourselves:

• oo-consent (cookie, 6 months) — stores your cookie decision
• oo-lang (cookie, 12 months) — stores your chosen language
• oo-theme (local storage, persistent) — stores the light/dark setting

6. Contact form and project inquiry

When you write to us via the contact form or the multi-step project inquiry, we process the data you provide — depending on the form: name, email address, company, website, and your answers about the project, process, systems, project status, investment range and timeline.

We use this data solely to handle and answer your request. The legal basis is Art. 6 (1) (b) GDPR where the request relates to a contract, and otherwise Art. 6 (1) (f) GDPR.

Submissions are transmitted encrypted to our mailbox. We delete the data as soon as it is no longer required and no commercial or tax retention periods apply.

To protect against automated submissions the contact form contains an invisible field (honeypot). It does not evaluate user behaviour and stores no additional data.

7. Google Analytics 4

With your consent we use Google Analytics 4, a web analytics service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to evaluate how the website is used — for example which pages are viewed, how long visitors stay and which source they came from.

Google truncates the IP address before processing it further. We use the data only in aggregated form; it is not combined with other data.

The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time via “Cookie settings”.

Typical cookies: _ga (2 years), _ga_<ID> (2 years). Further information: https://policies.google.com/privacy

8. Google Ads and conversion tracking

With your consent we use Google Ads, an advertising programme by Google Ireland Limited. It lets us measure whether a visit to our website originated from one of our ads and whether it resulted in an enquiry (conversion tracking). On this basis Google may also show you our ads again on other websites (remarketing).

A cookie is set as soon as you click on an ad. We do not receive any information from Google that would allow individual users to be identified — only aggregated statistics.

The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Typical cookies: _gcl_au (90 days). You can adjust your ad settings at https://adssettings.google.com

9. Google Search Console

We use Google Search Console to evaluate how visible our website is in Google Search. Google only provides us with aggregated reports — for example on search queries, clicks and positions. We do not receive personal data about individual visitors, and no cookies are set on your device for this purpose.

10. Transfers to third countries

When Google services are used, a transfer of data to Google LLC in the United States cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; for transfers to other third countries Google additionally relies on the European Commission's standard contractual clauses.

In the United States there is in principle a risk that authorities access data without data subjects being informed or able to take legal action. By consenting to statistics and marketing cookies you also consent to a possible transfer to the United States under Art. 49 (1) (a) GDPR.

11. Images, fonts and external content

Fonts are served from our own server. There is no connection to Google Fonts and no data is transferred to third parties.

Some images come from Unsplash. These images are fetched server-side and delivered optimised from our own server — your browser does not connect to Unsplash.

We do not embed social media plugins. The reference to LinkedIn is a plain link; personal data is only transmitted once you click it.

12. Retention

We store personal data only for as long as it is required for the respective purpose or as statutory retention periods demand. Afterwards the data is deleted or anonymised.

13. Your rights

You have the following rights in relation to us:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of a given consent with effect for the future (Art. 7 (3) GDPR)

14. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority at any time. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

15. Data security

This website is served exclusively over HTTPS, so transmissions between your browser and our server are encrypted. We also take technical and organisational measures to protect your data against loss and unauthorised access.

16. Changes to this policy

We update this privacy policy when the website or the services used change. The version published here always applies.