Privacy policy
Onsano is not yet registered as a company. Formation of a German limited liability company (GmbH) is in preparation.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
[Company name / first and last name], [address]
Email: info@onsano.com
2. Hosting and server log files
This website is hosted on Cloudflare Pages (Cloudflare, Inc., USA, or Cloudflare Germany GmbH as EU contact [add data processing agreement / details]). When the website is accessed, the hosting provider automatically collects technically necessary information in server log files transmitted by your browser: IP address, date and time of the request, page accessed, amount of data transferred, referrer URL, browser type and version, and operating system. This processing ensures the reliable and secure operation of the website and is based on our legitimate interest under Article 6(1)(f) GDPR. Consent is not required. Log files are automatically deleted after a limited period and are not combined with other data sources.
3. Cookies and local storage
The cookie banner itself does not set cookies. Your decision (accepted/declined) is stored as technically necessary information in your browser’s local storage. This is used only to avoid showing the banner again on your next visit and is permitted without separate consent under Section 25(2)(2) TTDSG and Article 6(1)(f) GDPR. Google Analytics cookies are set only after you expressly consent to the web analytics described in Section 4.
4. Web analytics (Google Analytics)
We use Google Analytics, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (or Google LLC, USA), only with your express consent under Article 6(1)(a) GDPR. Without consent, no analytics cookies are set and no data is transferred to Google. The script is loaded technically only after you click “Accept”. Google Analytics processes information including a shortened or anonymised IP address, device and browser information, pages visited, time spent and source of access to create pseudonymous usage statistics. Data may be transferred to the USA. Google participates in the EU-U.S. Data Privacy Framework or relies on standard contractual clauses [add details based on final configuration]. You may withdraw consent at any time for the future by selecting “Decline” in the banner or deleting this website’s local storage in your browser.
5. Appointment booking (Cal.com)
We integrate the Cal.com booking service to arrange calls (Cal.com, Inc., USA [add exact provider information and data processing agreement]). When you book through the “Schedule a call” button, Cal.com processes the information you enter, generally your name, email address and chosen appointment, to complete the booking. The legal basis is Article 6(1)(b) GDPR for steps taken at your request before entering into a contract. Data may be transferred to the USA. Further information is available in Cal.com’s privacy policy. The booking module loads only when you actively click the relevant button.
6. Contact by email
If you contact us by email, we process the data you provide, including your email address and the information in your message, solely to handle your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry relates to entering into a contract; otherwise it is Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries.
7. Fonts
Fonts used on this website are self-hosted and delivered only from our own server or hosting provider. No connection is made to Google Fonts or other external font services, so no data, particularly your IP address, is transferred to third parties for this purpose when you visit the website.
8. Recipients and transfers to third countries
Apart from the service providers named in Sections 2, 4 and 5, we do not disclose your data to third parties unless required by law. Where providers process data outside the EU/EEA, particularly in the USA, this is based on suitable safeguards such as the EU-U.S. Data Privacy Framework or standard contractual clauses under Article 46 GDPR.
9. Storage period
We store personal data only for as long as required for the relevant processing purpose or by statutory retention obligations. Server log files are automatically deleted after a limited period. Analytics data is subject to the retention periods configured in Google Analytics [add final configuration].
10. Your rights
Subject to the statutory requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and objection to processing based on legitimate interests (Article 21). You may withdraw consent at any time for the future (Article 7(3)). Contact info@onsano.com.
11. Right to complain to a supervisory authority
You also have the right to complain to a data protection supervisory authority about our processing of your personal data, for example the authority in the German federal state where the company’s future registered office will be located [add competent authority after formation].
12. Changes to this privacy policy
We will update this privacy policy when changes in the law, the services used or the company structure, particularly following formation, make this necessary. The version published on this page at the time of your visit applies.