Privacy Policy (EU & Switzerland)

The controller responsible for data processing on this website is:

OPED AG
Hinterbergstrasse 26
6312 Steinhausen
Switzerland
E-mail: group@oped.de

This Privacy Policy applies to the website www.oped-group.com.
It explains how personal data is collected, processed and used when you visit and interact with our website.

Purpose of processing:
We use Google Cloud Platform (GCP), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for hosting and infrastructure.

This enables the secure provision, operation and delivery of our website.

Categories of data processed:

  • IP address
  • technical connection data
  • usage and access data (log files)
  • content transmitted via the website (e.g. contact form entries)
  • system and security metadata

Legal basis:

  • EU/EEA: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website operation)
  • Switzerland: Art. 31 revDSG

Data processing agreement:
We have concluded a data processing agreement with Google.

Data transfers to third countries:
As Google is headquartered in the USA, data transfers cannot be excluded.
Standard Contractual Clauses (SCCs) are used as appropriate safeguards.

Further information:
https://cloud.google.com/terms/cloud-privacy-notice

When accessing our website, general information is automatically collected.

Data categories:

  • IP address
  • browser type and version
  • operating system
  • referrer URL
  • hostname of accessing device
  • date and time of request

Purpose:

  • ensuring a stable connection
  • ensuring system security and stability
  • preventing misuse and attacks

Legal basis:

  • EU/EEA: Art. 6(1)(f) GDPR
  • Switzerland: Art. 31 revDSG

Storage period:
Log files are stored for a maximum of 14 days unless a security-related incident requires longer storage.

If you contact us via the contact form, we process the data you provide.

Data processed:

  • name
  • email address
  • message content

Purpose:

  • processing your inquiry
  • communication with you

Legal basis:

  • EU/EEA: Art. 6(1)(b) GDPR (pre-contractual communication)
  • Switzerland: Art. 31 revDSG

Storage period:
Your data will be stored as long as necessary to process your request and for follow-up communication, and deleted afterwards unless legal retention obligations apply.

We use cookies and similar technologies on our website.

We use Cookiebot as a consent management platform to collect and manage your consent.

Purpose:

  • ensuring technical functionality of the website
  • managing user consent
  • enabling analytics (with consent)

Legal basis:

  • EU/EEA:
    • §25 TDDDG (storage/access to device information)
    • Art. 6(1)(a) GDPR (consent)
    • Art. 6(1)(f) GDPR (technically necessary cookies)
  • Switzerland: Art. 31 revDSG

You can manage or withdraw your consent at any time via the privacy trigger in the bottom left corner.

Google Analytics 4:

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Purpose:

  • analyzing website usage
  • improving user experience

Data processed:

  • IP address (shortened/anonymized)
  • usage data (page views, interactions, session duration)
  • device and browser information
  • approximate location (region)

Legal basis:

  • EU/EEA: Art. 6(1)(a) GDPR (consent)
  • Switzerland: Art. 31 revDSG

IP anonymization:
IP anonymization is enabled by default.

Storage period:
Data is stored for up to 14 months.

Data transfer:
Data may be transferred to the USA.
Standard Contractual Clauses (SCCs) are in place.

Opt-out:
You can withdraw your consent at any time via the cookie settings in the bottom left corner.

Further information:
https://policies.google.com/privacy

Google Tag Manager:

We use Google Tag Manager, a service provided by Google Ireland Limited.

Google Tag Manager is a tag management system that allows us to integrate and manage tracking tools and other services on our website.

Purpose:

  • efficient management of website tags
  • integration of analytics and tracking services

Data processing:
Google Tag Manager itself does not store personal data and does not set cookies.
However, it may trigger other tags that process personal data (e.g. Google Analytics).

Legal basis:

  • EU/EEA: Art. 6(1)(a) GDPR (consent), insofar as tags requiring consent are activated
  • EU/EEA: Art. 6(1)(f) GDPR (legitimate interest in efficient tag management)
  • Switzerland: Art. 31 revDSG

Data transfer:
Processing by Google cannot exclude data transfers to third countries (e.g. USA).
Appropriate safeguards (SCCs) are in place.

Further information:
https://policies.google.com/privacy

Personal data may be transferred to countries outside the EU/EEA or Switzerland (e.g. USA).

Where such transfers occur, appropriate safeguards are implemented, including:

  • Standard Contractual Clauses (SCCs)

Despite these safeguards, there may be risks (e.g. access by authorities).

We store personal data only as long as necessary for the respective purposes.

Retention periods include:

  • Server log files: max. 14 days
  • Contact requests: until completion of processing and follow-up, unless legal obligations apply
  • Analytics data: up to 14 months

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7 GDPR)

You also have the right to lodge a complaint with a supervisory authority.

For users in Switzerland (revDSG)

You have the following rights:

  • Right of access (Art. 25 revDSG)
  • Right to rectification (Art. 32 revDSG)
  • Right to erasure (Art. 32 revDSG)
  • Right to data portability (Art. 28 revDSG)

You may contact the Federal Data Protection and Information Commissioner (FDPIC).

You are not legally required to provide personal data.

However, without certain data (e.g. technical data, contact information), the functionality of the website or communication may be limited.

Our website may contain links to external websites.
We have no influence on their content or data protection practices.

We reserve the right to update this Privacy Policy at any time.

Status: April 2026