Privacy and data protection

In the following, we inform you about the processing of your personal data and your rights in this regard as part of our obligations under Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter only GDPR).

Personal data (hereinafter referred to as „data“) will only be processed by us if you have given us your consent, if this is necessary or for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4(2) of the GDPR, „processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

In the following, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of data, insofar as we decide on the purposes and means of processing either alone or together with others. In addition, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

The content of this declaration is structured as follows:

A. Information about us
B. Information on data processing
C. Your rights

A. Information about us

In terms of data protection law, we are the controller within the meaning of Art. 4 (7) GDPR. You can reach us using the following contact details

openthinclient GmbH
Represented by the managing directors Alexander Stecher
Heilbronner Str. 150
70191 Stuttgart
E-mail: info@openthinclient.com

B. Information on data processing

In principle, the legal basis for the processing of your data carried out by us results from

Art. 6 lit. a) GDPR: If you have given your consent to this.
Art. 6 lit. b) GDPR: If the data is required for contract initiation or contract processing.
Art. 6 lit. f) GDPR: If we have a legitimate interest in processing your data.

Details can be found below.

I. How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

II. What do we use your data for?
1. when visiting the website
a) Cookies
We use so-called cookies for our website. Cookies are small files that are stored on your device when you visit our website using your web browser. In addition to your location data, this tells us which browser you are using and the IP address of the Internet connection from which you are visiting our website.

The use of cookies optimizes our website, as it can be made more effective and secure through the information provided to us.

The legal basis for the processing of your data is Art. 6 para. 1 lit. b) GDPR, insofar as these cookies process data for contract initiation or contract processing.

If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) GDPR.

After you close your browser, the cookies are deleted again.

You can prevent or restrict the installation of cookies by changing your browser settings. Cookies already stored on your computer can also be deleted at any time. How this can be done depends on the browser you are using. You can usually find answers to this in the help function of your browser.

If cookies that are not absolutely necessary (e.g. for statistical, marketing or analysis purposes) are used, they are used exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG. This consent is obtained via a corresponding consent management tool (cookie banner) and can be revoked or adjusted there at any time.

b) Server files
When you visit our website, your web browser transmits the following information to us, which is stored in so-called server log files:

Type and version of your internet browser
Your operating system
Our website(s) that you visit
Date and time of the respective access to our website
The IP address of your internet connection from which you visit our website

This data is transmitted and stored for purely technical reasons, primarily to ensure and improve a stable and secure website. In this respect, we have a legitimate interest in the collection and storage of this data. The legal basis for this is Art. 6 para. 1 lit. f) GDPR.

The data will be deleted after 14 days at the latest. Any further storage will only take place if this is necessary to clarify security-relevant incidents and will be deleted after they have been finally clarified.

c) Third-party cookies
Our website may also use cookies from partner companies with whom we cooperate for the purposes of advertising, analysis or the functionalities of our website.

Please refer to the following information for details, in particular the purposes and legal basis for processing such third-party cookies.

d) SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

e) Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

f) Google Analytics
We use Google Analytics for our website. This is a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as Google).

Google is certified in accordance with the EU-US Data Privacy Framework. This ensures that there is an adequate level of data protection in accordance with Art. 45 GDPR.

Further information on this can be found at: https://www.dataprivacyframework.gov/.

We use Google Analytics to analyze user behavior on our website.

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and operation of our website.

Your usage behavior and your user-related information, such as IP address, location, time or frequency of your visit to our website, are transferred to a Google server in the USA and stored there. However, as we use Google Analytics with an anonymization function, your IP address is already shortened by Google within the EU or EEA.

Google in turn uses the collected data itself. This is done to evaluate your visit to our website and your usage activities. This analysis is then made available to us by Google. We also use this data to provide other services related to the use of our website and the use of the Internet.

Google ensures that your IP address will not be linked to other data. Further data protection information from Google can be found at https://policies.google.com/privacy?hl=de and https://support.google.com/analytics/answer/6004245?hl=de. Here you can find out in particular whether and how the use of data can be prevented.

You can also find a so-called deactivation add-on from Google at https://tools.google.com/dlpage/gaoptout?hl=de. You can install the add-on with all common browsers. The add-on also gives you additional control over the data that Google collects when you visit our website. The add-on tells JavaScript (ga.js) from Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent the transmission of information to us or to other web analysis services.

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

g) IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

2. click-tip
This website uses Klick-Tipp to send newsletters. The provider is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, United Kingdom.

Klick-Tipp is a service with which, among other things, the sending of newsletters can be organized and analyzed. The data you enter for the purpose of subscribing to the newsletter is stored on Klick-Tipp's servers.
If we send newsletters with the help of Klick-Tipp, we can determine whether a newsletter message has been opened and which links, if any, have been clicked on.

Klick-Tipp also allows us to subdivide newsletter recipients into different categories (so-called tagging). Newsletter recipients can be categorized, for example, by gender, personal preferences (e.g. vegetarian or non-vegetarian) or customer relationship (e.g. customer or potential customer). In this way, the newsletters can be better adapted to the respective target groups. You can find more information at: and .

If you do not wish to be analyzed by Klick-Tipp, you must therefore unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the Klick-Tipp servers after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

For more information, please refer to Klick-Tipp's privacy policy at https://www.klick-tipp.com and https://www.klick-tipp.com/handbuch.

If you do not wish to be analyzed by Klick-Tipp, you must therefore unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

The EU Commission has issued an adequacy decision for the United Kingdom in accordance with Art. 45 GDPR. This ensures an adequate level of data protection.

3. request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and / or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the inquiries addressed to us.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

4. your data and our trading partners
In addition, we also sell the openthinclient solution via our trading partners, which is why your data may also be transmitted to these trading partners for the provision of our services and, if necessary, for contract processing. The legal basis for this results from Art. 6 para. 1, lit. a) GDPR, provided that you have given us your consent to do so. If the processing of your data is necessary for the performance of a contract, the legal basis is Art. 6 (1) (b) GDPR. If the processing of your data is necessary for the provision of our services without a contractual relationship, the legal basis for data processing is Art. 6 para. 1, lit. f) GDPR.

Our trading partners are generally independent controllers within the meaning of Art. 4 No. 7 GDPR. They process the transmitted data on their own responsibility and provide corresponding data protection information.

5. data protection officer
A data protection officer has not been appointed as the legal requirements according to Art. 37 GDPR are not met.

6. remote maintenance
To carry out support and maintenance services, we use the remote maintenance software RustDesk from RustDesk Technology Co.

It is used exclusively with your prior consent and serves to analyze technical problems and provide support in troubleshooting. During an active remote maintenance session, data such as your IP address, device information and any screen content are processed for technical reasons. The connection is encrypted.

The legal basis for data processing is Art. 6 para. 1 lit. b GDPR if the remote maintenance is necessary for the performance of a contract, and Art. 6 para. 1 lit. a GDPR if the remote maintenance is based on your consent.

The data will not be passed on to third parties. If a connection to servers outside the EU is established, this will only take place if an adequate level of data protection within the meaning of Art. 44 et seq. GDPR is guaranteed.

Further information on data protection at RustDesk can be found at https://rustdesk.com/de/.

7. server ID
If you provide us with your server ID at our request, we can assign it to you specifically. Our legitimate interest in the processing of this data also arises from the purpose of the processing: the continuous improvement and adaptation of our software to customer requirements.

The legal basis is therefore Art. 6, para. 1, lit. f) GDPR.

C) Your rights

You have the following rights with regard to the above-mentioned data processing:

If you have given us your consent to process your data, you can revoke this consent at any time with effect for the future, see Art. 7 para. 3 GDPR. The contact details for the revocation can be found in section A. above.

You have the right to object to the future processing of data concerning you, provided that the data is processed by us in accordance with Art. 6 para. 1 lit. f) GDPR. In particular, you have the right to object to data processing for the purpose of direct marketing. This right arises from Art. 21 GDPR.

You can request confirmation from us that we are processing data concerning you. In addition, you have the right to information about which data this is and the right to receive further information in accordance with Art. 15 para. 1 lit. a) to h) GDPR.

If the data processed by us concerning you is incorrect or incomplete, you have the right to have this data completed and/or corrected in accordance with Art. 16 GDPR.

Furthermore, you have the right to immediate erasure of the data concerning you in accordance with Art. 17 GDPR, unless processing is necessary in accordance with Art. 17 para. 3 GDPR. If this is the case, you have the right to restriction of processing in accordance with Art. 18 GDPR.

You have the right to receive from us the data concerning you and provided by you. You also have the right to have us transfer this data to other providers/controllers in accordance with Art. 20 GDPR.

You can also lodge a complaint with the supervisory authority if you believe that the data concerning you is being processed by us in breach of data protection regulations. This results from Art. 77 GDPR.

In addition, we are obliged to inform all recipients to whom data has been disclosed by us of any rectification or erasure of data or restriction of processing carried out on the basis of Articles 16, 17 (1), 18 GDPR. However, this obligation does not apply if this notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.