Privacy Policy
How we process personal data – without tracking, without advertising services, without profiling.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Opervanta GmbH
Augsburger Straße 7, 87629 Füssen, Germany
Managing Director: Emine Mizharkova
Phone: +49 8153 2733980
Email: office@opervanta-gmbh.de
2. General principles
We only process personal data to the extent necessary to provide this website and our services, or where you have given your consent. This website does not use tracking cookies, analytics or advertising services, or social media plug-ins. No profiling and no automated decision-making take place.
3. Accessing the website and server log files
When you access this website, your browser automatically transmits information to the server, which is stored in what are known as log files. The following data is recorded:
- the IP address of the requesting device (shortened or deleted after a short period),
- the date and time of access,
- the page or file accessed and the transmission status,
- the amount of data transferred,
- browser type, browser version and operating system,
- the previously visited page (referrer), if transmitted.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically fault-free operation of our systems, their security, and the defence against attacks. Log files are generally deleted after seven days unless they are needed for longer to clarify a specific security incident.
4. Hosting
This website is operated on a server we lease in a data centre within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the data centre operator. No personal data is transferred to third countries in connection with hosting.
5. Contact via form, email or phone
If you contact us via the contact form, by email or by phone, we process the information you provide – in particular your name, company, email address, phone number, your enquiry and the content of your message – in order to process your enquiry.
The legal basis is Art. 6(1)(b) GDPR, insofar as the enquiry relates to the conclusion or performance of a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) or Art. 6(1)(a) GDPR, where you have given your consent. Any consent given may be withdrawn at any time with effect for the future, for example informally by email.
Your enquiry will be deleted once it has been fully processed and no statutory retention obligations apply. Commercial and tax-law retention periods (generally six or ten years) remain unaffected.
The contact form contains a field that is invisible to you and is used to prevent automated spam entries. No additional personal data is collected in the process.
6. Appointment booking
Where an online appointment booking tool is embedded on our contact page, the data you enter there (name, email address, chosen appointment and optional details) is processed to arrange and carry out the appointment. The legal basis is Art. 6(1)(b) or (f) GDPR. The provider used processes the data as a processor on the basis of a contract pursuant to Art. 28 GDPR.
7. Recipients of data
Your data is only passed on where this is necessary to perform a contract, where you have given your consent, or where there is a legal obligation to do so. Recipients may include: IT service providers and hosting providers within the scope of data processing agreements, tax advisors and auditors, banks, and – where corresponding services are commissioned – partner firms and notaries we work with. All recipients are bound by confidentiality.
8. Storage period
We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods. The data is then deleted or blocked.
9. Your rights
Under the GDPR you have the following rights:
- Access to the data stored about you (Art. 15 GDPR),
- Rectification of inaccurate data (Art. 16 GDPR),
- Erasure (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Data portability (Art. 20 GDPR),
- Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR).
To exercise these rights, an informal message to office@opervanta-gmbh.de is sufficient.
10. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). The competent authority for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach.
11. Data security
This website is delivered exclusively via a TLS-encrypted connection (HTTPS). In addition, we take technical and organisational measures to protect your data against loss, destruction and unauthorised access. Our measures are reviewed regularly and adapted to the state of the art.
12. Changes to this privacy policy
We will update this privacy policy as soon as changes to our services or to the legal situation make this necessary. The version published on this page shall apply in each case.