Legal · Privacy
Privacy Policy
Datenschutzerklärung · Aydınlatma Metni
Legal · Privacy
Notice
Translation of the binding German text. This policy informs you under Arts. 13 and 14 GDPR about the processing of personal data when you visit opsolid.de and use its forms and account areas. The OpSo app and card pages have their own policy at https://card.opsolid.de/privacy. The texts were prepared carefully but have not been reviewed by a lawyer.
1. Controller
OpSolid
Hasan Dönmez (owner, sole proprietorship)
Stolte Ley 12
59759 Arnsberg
Deutschland
Email: info@opsolid.de
We have not appointed a data protection officer.
2. Hosting and server log files
The website runs on a server (VPS) of Hostinger International Ltd. in Vilnius, Lithuania (EU). When a page is requested the server technically needs IP address, date and time, requested URL, status code, data volume, referrer and user agent. Purpose: delivery, security, error analysis. Legal basis: Art. 6(1)(f) GDPR. Retention: usually 14 days. A data processing agreement (Art. 28 GDPR) exists with Hostinger.
3. Contact forms, email and AI-check requests
When you contact us by form or email, we process your details (e.g. name, email, company, topics, message) to handle your request and ask follow-up questions. For an AI check you have ordered, we also process the answers in the questionnaire you send back to us by email, to write the report; please do not enter personal data about your customers or staff there. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps/contract), otherwise (f) (legitimate interest in answering) or (a) if you consented. Retention: until the request is closed and then until statutory retention periods end; requests without a contract are deleted after 24 months at the latest. Notifications and replies are sent through the email service Zoho Mail (Zoho Corporation B.V., Netherlands; EU data centre).
Trainer applications
If you apply as a trainer, we process your details (name, email address, topics, languages, country and time zone, link, fee expectation and short profile) to decide on a collaboration and to contact you when a client request fits. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps). We do not pass your application to clients; before a course is booked we give a client your name only with your consent. After you submit the form you receive one automatic confirmation of receipt by email; it repeats none of your details. We delete rejected applications six months after the decision; until then we keep them only to be able to defend against possible claims (Art. 6(1)(f) GDPR). We delete profiles in our trainer pool twelve months after the last contact, or immediately on request.
4. Customer account and signed-in areas
If you sign in we process contact data, credentials (passwords only as hashes) and session data (session cookie, hashed IP address for abuse prevention) to provide the account. Legal basis: Art. 6(1)(b) and (f) GDPR. Retention: until the account is deleted; invoice data 10 years under § 257 HGB, § 147 AO.
5. Cookies, local storage and device access (§ 25 TDDDG)
We use no analytics, advertising or tracking cookies. Only technically necessary settings or ones you choose yourself are stored: a language cookie (only if you change the language), the “Background video” setting and form drafts in your browser’s local storage, and after sign-in a session cookie. This is permitted without consent under § 25(2) TDDDG, so no cookie banner is needed. Fonts, videos and scripts are served by us; no Google Fonts are loaded.
6. AI services
If you use an AI-assisted function, the content you enter is sent to the respective API provider (OpenAI Ireland Ltd. or Anthropic Ireland, Limited). Under our API settings, user content is not used for training. Legal basis: Art. 6(1)(b) GDPR; third-country transfers rely on standard contractual clauses or the DPF.
7. Recipients and third countries
Hostinger (hosting), email delivery service and, as described above, AI providers, plus authorities where legally required. For transfers outside the EEA: adequacy decision (EU-US Data Privacy Framework), otherwise EU standard contractual clauses (Art. 46 GDPR).
8. Your rights
Access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection to processing based on legitimate interests (21), withdrawal of consent with effect for the future (7(3)) and complaint to a supervisory authority (77). Competent: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf (ldi.nrw.de). Requests to info@opsolid.de.
9. Obligation to provide data, automated decisions
Form details are voluntary, but without the necessary details we cannot handle your request. There is no automated decision-making within the meaning of Art. 22 GDPR.
10. Note for people in Türkiye (KVKK)
Law No. 6698 (KVKK) also applies to people in Türkiye; the Art. 10 KVKK notice is in the Turkish version of this policy.
11. Changes
We update this policy when the website, providers or the law change; the version published at the time applies.
Last updated: 4 November 2026