Privacy Policy

Last updated: 18.05.2025

This Privacy Policy applies to the processing of your personal data on the website https://onetech.group, including all secondary and sub-sites, as well as by the One Tech Platform operated by One Tech Group GmbH (“we”, “us”, or “our”, “the operator”). The platform is used to support various technical and organizational processes in the context of digital advertising. It is also used by customers of the operator. In such cases, we process data on behalf of those customers, who are the responsible data controllers. For more details on such processing, please refer to the respective customer’s data protection policy.

1. Data Controller

The entity responsible for data processing is:
One Tech Group GmbH
Friedensallee 38
22765 Hamburg, Germany
Email: info@onetech.group

2. Preliminary Remarks

We take the protection of your personal data seriously and comply with applicable data protection laws. These laws are intended to protect natural persons during the processing of their personal data. Personal data is any information relating to an identified or identifiable natural person. Such data is only processed to the extent necessary to perform a contract or to provide and improve our platform.

Processing for contract performance is carried out only if you initiate or conclude a contract with us. Data processing to maintain and improve the functionality of the platform is carried out only as described below, based on your consent, by legal obligation, or upon instruction by authorities or courts.

We process your data exclusively within the member states of the European Union (EU). In particular, the internet servers used by us for data processing are located in Germany. No data is transferred to third countries or international organizations unless explicitly stated otherwise.

3. Data Processing for Website Visitors

We distinguish between two types of data processing on our website: form-independent and form-dependent data processing.

Form-independent data processing refers to the automatic collection of data when you access our website, without you actively submitting information. When you access the platform, certain data is collected automatically. This includes, for example, your IP address, the date and time of access, browser type and version, the operating system you are using, the previously visited website (referrer URL), and other technical data that may be stored in cookies or log files. This data is collected to ensure the technical functionality, IT security, and optimization of the platform as well as for statistical evaluations. We use cookies and technologies such as Google Analytics for this purpose. Google Analytics helps us analyze website usage. IP addresses are anonymized before storage. You can object to this processing via the browser add-on (https://tools.google.com/dlpage/gaoptout) or by adjusting your cookie settings.

Form-dependent data processing occurs when you actively provide information, for example by submitting a contact form or job application. In such cases, we process the data you provide (such as name, email address, phone number, and the content of your message) solely for the purpose of responding to your inquiry or processing your application. We also use Google reCAPTCHA exclusively on form pages of our website to protect submissions from abuse. The service checks whether the data entered originates from a human or an automated program. This involves analyzing various technical indicators such as IP address and user behavior. The use of reCAPTCHA is based on Article 6(1)(f) GDPR, representing our legitimate interest in protecting our digital services from misuse and ensuring system integrity. The legal basis for processing form data depends on the context: Article 6(1)(b) GDPR applies when processing is necessary for contract initiation or execution; Article 6(1)(a) GDPR applies where you have given consent; and Article 6(1)(f) GDPR applies where we have a legitimate interest in communication and service improvement.

We store your personal data only as long as necessary to achieve the stated purposes or to fulfill applicable legal retention requirements.

If links to social networks such as LinkedIn or similar services are embedded in the platform, these will only be activated and your data transmitted to the respective service provider if you actively click on the corresponding button (e.g., “Share” or “Like”). If you do so, information such as your IP address and other usage data may be transferred to the respective provider. The provider’s privacy policy applies to such data processing.

The platform may also include integrated services such as Google Maps. When these are used, the operator of the service – e.g., Google Ireland Limited – will process your IP address to enable the display of content. Please refer to the privacy notices of the respective providers for details on how they handle your data.

4. Data Processing for Platform Users

Registered users of our One Tech Platform are subject to additional data processing. We collect and process business email addresses, login credentials (stored as hashed passwords), IP addresses, login timestamps, and activity logs within the platform (e.g., changes made, assigned roles, usage behavior).

The purposes of this processing include access authentication, system functionality and support, auditing user activity for compliance and security, and the performance of contractual obligations. Legal bases include Article 6(1)(b) GDPR for contract-related processing and Article 6(1)(f) GDPR for our legitimate interest in ensuring a secure and reliable platform.

Personal data is retained for the duration of the account’s existence and deleted upon termination of the user relationship, unless legal retention obligations require a longer storage period. Access logs and security data may be stored separately and encrypted, and are only reviewed in case of concrete suspicion of misuse.

Personal data is only shared with third-party service providers (e.g., hosting or maintenance providers) under appropriate data processing agreements in accordance with Article 28 GDPR. Data is not transferred to countries outside the European Economic Area.

5. Technical Data Processing

Across both user categories, we process technical data such as cookies, device identifiers, and server log files that include access time, IP address, URL accessed, and browser information. This data supports system security, performance monitoring, error analysis, and protection against abuse. All transmissions are encrypted and stored securely.

6. Data Subject Rights

In accordance with Articles 15 to 21 GDPR, you have the following rights:

Access to your personal data
Rectification of inaccurate or incomplete data
Erasure of personal data where permitted by law
Restriction of processing under certain conditions
Objection to processing based on legitimate interests
Data portability, where applicable

To exercise these rights, or if you have questions about your data, please contact us at info@onetech.group.

You also have the right to lodge a complaint with the responsible data protection authority.

Updates to This Policy

We reserve the right to amend this Privacy Policy to reflect changes in legislation or internal processes. The most current version is available at https://onetech.group/privacy-policy. We recommend reviewing this policy periodically.

If you have any questions, please contact us at info@onetech.group.