Privacy and data protection

Below we inform you, in accordance with our obligations under Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter referred to as “GDPR”), about the processing of your personal data and your related rights.

Personal data (hereinafter referred to simply as “data”) are processed by us only if you have given your consent, if this is required, or for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

Pursuant to Art. 4 No. 2 GDPR, “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction.

In the following, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of data, insofar as we either alone or jointly with others decide on the purposes and means of processing. In addition, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

The content of this notice is structured as follows:

A. Information about us
B. Information on data processing
C. Your rights

A. Information about us

For the purposes of data protection law, we are considered the controller within the meaning of Art. 4 No. 7 GDPR. You can contact us using the following details:

openthinclient GmbH
Represented by the Managing Director Alexander Stecher
Heilbronner Str. 150
70191 Stuttgart
E-mail: info@openthinclient.com

B. Information on data processing

In principle, the legal bases for the processing of your data carried out by us arise from:

Art. 6(1)(a) GDPR: If you have given your consent.
Art. 6(1)(b) GDPR: If the data are necessary for the initiation or performance of a contract.
Art. 6(1)(f) GDPR: If we have a legitimate interest in processing your data.

Details are provided below.

I. How do we collect your data?
Your data are collected, on the one hand, when you provide them to us. This may include, for example, data that you enter into a contact form.

Other data are collected automatically by our IT systems when you visit the website. These are primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

II. What do we use your data for?

1. When visiting the website

a) Cookies
We use so-called cookies for our website. Cookies are small files that are stored on your device via your web browser when you visit our website. Through this, we receive information about your location, which browser you use, and the IP address of your internet connection from which you access our website.

The use of cookies optimizes our website, as it can be designed more effectively and securely based on the information provided.

The legal basis for processing your data is Art. 6(1)(b) GDPR if these cookies process data for the initiation or performance of a contract.

If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6(1)(f) GDPR.

Cookies are deleted once you close your browser.

You can prevent or restrict the installation of cookies through your browser settings. Cookies that have already been stored can also be deleted at any time. How this is implemented depends on the browser you use. You can usually find information on this in your browser’s help function.

If non-essential cookies (e.g. for statistical, marketing, or analysis purposes) are used, they are used exclusively on the basis of your explicit consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. This consent is obtained via a corresponding consent management tool (cookie banner) and can be revoked or adjusted there at any time.

b) Server log files
When you visit our website, your web browser transmits the following information to us, which is stored in so-called server log files:

* Type and version of your internet browser
* Your operating system
* Our website(s) that you visit
* Date and time of each access to our website
* The IP address of your internet connection from which you access our website

The transmission and storage of this data are carried out for purely technical reasons, in particular to ensure and improve a stable and secure website. In this respect, we have a legitimate interest in collecting and storing this data. The legal basis is Art. 6(1)(f) GDPR.

The data are deleted no later than 14 days after collection. Further storage takes place only insofar as this is necessary to clarify security-relevant incidents and is deleted after their final clarification.

c) Third-party cookies
Where applicable, cookies from partner companies with whom we cooperate for advertising, analysis, or functionality purposes may also be used on our website.

Details, in particular regarding the purposes and legal bases of the processing of such third-party cookies, can be found in the information provided below.

d) SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the change in the browser address line from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

e) Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered into the contact form is therefore carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. An informal notification by e-mail to us is sufficient for this purpose. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

f) Google Analytics
We use Google Analytics for our website. This is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

Google is certified under the EU–US Data Privacy Framework. This ensures that an adequate level of data protection pursuant to Art. 45 GDPR is maintained.

Further information can be found at: https://www.dataprivacyframework.gov/

With Google Analytics, we analyze user behavior on our website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization, and operation of our website.

Your usage behavior and user-related information, such as IP address, location, time, or frequency of your visits to our website, are transmitted to a Google server in the USA and stored there. However, since we use Google Analytics with an anonymization function, your IP address is shortened by Google within the EU or EEA.

Google also uses the collected data itself. This is done to evaluate your visit to our website and your usage activities. Google then provides us with this evaluation. In addition, we use this data to possibly provide further services related to the use of our website and the internet.

Google assures that your IP address will not be merged with other Google data. Further data protection information can be found at https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245. In particular, you can find information there on whether and how data usage can be prevented.

In addition, a so-called deactivation add-on from Google can be found at https://tools.google.com/dlpage/gaoptout. You can install the add-on in all common browsers. The add-on provides additional control over the data collected by Google when accessing our website. The add-on informs Google Analytics JavaScript (ga.js) that no information about visits to our website should be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services.

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain information about the age, gender, and interests of website visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prevent the collection of your data by Google Analytics as described under “Objection to data collection”.

g) IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

2. Klick-Tipp
This website uses Klick-Tipp for sending newsletters. The provider is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom.

Klick-Tipp is a service that can be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are stored on Klick-Tipp’s servers.

If we send newsletters using Klick-Tipp, we can determine whether a newsletter message has been opened and which links may have been clicked.

Klick-Tipp also enables us to categorize newsletter recipients according to various categories (so-called tagging). For example, newsletter recipients can be categorized by gender, personal preferences (e.g. vegetarian or non-vegetarian), or customer relationship (e.g. customer or prospective customer). In this way, newsletters can be better adapted to the respective target groups. Further information can be found at: and .

If you do not want analysis by Klick-Tipp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe directly on the website.

Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and Klick-Tipp’s servers after unsubscribing. Data stored by us for other purposes remain unaffected.

Further details can be found in Klick-Tipp’s privacy policy at https://www.klick-tipp.com and https://www.klick-tipp.com/handbuch.

For the United Kingdom, an adequacy decision of the EU Commission pursuant to Art. 45 GDPR exists. This ensures an adequate level of data protection.

3. Inquiries by e-mail, telephone, or fax
If you contact us by e-mail, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective processing of inquiries addressed to us.

The data you send to us via contact inquiries remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

4. Your data and our sales partners
In addition, we distribute the openthinclient solution via our sales partners, which is why your data may also be transmitted to these sales partners for the provision of our services and, if applicable, for contract processing. The legal basis arises from Art. 6(1)(a) GDPR if you have given us your consent. If the processing of your data is necessary for contract processing, the legal basis is Art. 6(1)(b) GDPR. If the processing of your data is necessary for the provision of our services without a contractual relationship, the legal basis is Art. 6(1)(f) GDPR.

Our sales partners are generally independent controllers within the meaning of Art. 4 No. 7 GDPR. They process the transmitted data on their own responsibility and provide their own data protection information.

5. Data Protection Officer
A data protection officer has not been appointed, as the legal requirements pursuant to Art. 37 GDPR are not met.

6. Remote maintenance
For the provision of support and maintenance services, we use the remote maintenance software RustDesk provided by RustDesk Technology Co., Ltd.

Use takes place exclusively with your prior consent and serves the analysis of technical problems as well as support in troubleshooting. During an active remote maintenance session, data such as your IP address, device information, and possibly screen content are processed for technical reasons. The connection is encrypted.

The legal basis for data processing is Art. 6(1)(b) GDPR insofar as remote maintenance is necessary for the performance of a contract, and Art. 6(1)(a) GDPR if remote maintenance is based on your consent.

Data is not passed on to third parties. If a connection to servers outside the EU is established, this is done only if an adequate level of data protection within the meaning of Art. 44 et seq. GDPR is ensured.

Further information on data protection at RustDesk can be found at https://rustdesk.com/de/.

7. Server ID
If you provide us with your server ID upon our request, we can assign it to you specifically. Our legitimate interest in processing this data also arises from the purpose of processing: the continuous improvement and adaptation of our software to customer needs.

The legal basis is therefore Art. 6(1)(f) GDPR.

C) Your rights

With regard to the data processing described above, you have the following rights:

If you have given us your consent to process your data, you may revoke this consent at any time with effect for the future, pursuant to Art. 7(3) GDPR. Please refer to the contact details listed above in Section A for revocation.

You have the right to object to the future processing of data concerning you if the data are processed by us in accordance with Art. 6(1)(f) GDPR. In particular, you may object to data processing for the purposes of direct advertising. This right arises from Art. 21 GDPR.

You may request confirmation from us as to whether data concerning you are being processed. In addition, you have the right to obtain information about what data these are and to receive further information pursuant to Art. 15(1)(a) to (h) GDPR.

If the data concerning you processed by us are incorrect or incomplete, you have the right to rectification and/or completion of these data pursuant to Art. 16 GDPR.

Furthermore, you have the right to the immediate erasure of data concerning you pursuant to Art. 17 GDPR, provided that processing is not required pursuant to Art. 17(3) GDPR. If this is the case, you have the right to restriction of processing pursuant to Art. 18 GDPR.

You have the right to receive from us the data concerning you that you have provided. You also have the right to have these data transmitted by us to other providers/controllers pursuant to Art. 20 GDPR.

You may also lodge a complaint with the supervisory authority if you believe that the data concerning you are being processed by us in violation of data protection regulations. This arises from Art. 77 GDPR.

In addition, we are obliged to inform all recipients to whom data have been disclosed by us of any rectification or erasure of data or restriction of processing carried out pursuant to Art. 16, Art. 17(1), and Art. 18 GDPR. This obligation does not apply insofar as such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has the right to obtain information about these recipients.