Privacy

Last updated: April 29, 2026

Thanks for visiting OMG KI. Protecting your personal data matters to us. This policy describes which data we collect when you visit this website, how we process it, who we share it with, and what your rights are — under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller pursuant to Art. 4 (7) GDPR is:
OIT GmbH
Am Huxmühlenbach 7
49084 Osnabrück
Germany

Phone: +49 541 931 334 30
Email: support@olbricht.it
Authorised representative: Andreas Olbricht (Managing Partner)

2. Privacy contact

For privacy-related questions or to exercise your rights (access, rectification, erasure etc.):
support@olbricht.it

We are not currently required to designate a Data Protection Officer pursuant to § 38 BDSG. We will update this policy if that changes.

3. Server log files

When you visit this site, our web server automatically records technical information in server log files:

• IP address of the requesting device
• Date and time of the request
• Resource requested (filename / URL)
• HTTP status code and bytes transferred
• Browser type, version and operating system
• Referring URL

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable site delivery and protection against abusive access). Logs are stored for at most 7 days and then automatically deleted. They are not combined with other data sources.

4. Hosting

This website is hosted on infrastructure operated by OIT GmbH using the self-hosted platform Coolify. Servers are located in Germany. No external cloud provider is involved in the hosting itself. The server log file rules in section 3 apply.

5. Cookies and consent management

We use cookies on this site. Cookies are small text files stored in your browser. We distinguish:

• Strictly necessary cookies — e.g. a cookie that stores your consent choice (the `klaro` cookie, lifetime up to 365 days). Legal basis: Art. 6 (1) (f) GDPR / § 25 (2) No. 2 TTDSG (strictly necessary storage).
• Optional analytics cookies — only set after explicit consent in our cookie banner. See section 6.

Consent is managed via Klaro!, an open-source library that runs entirely client-side in your browser. No data is transmitted to external Klaro servers.

You can change or withdraw your cookie preferences any time by re-opening the banner via the link in the footer.

6. Web analytics with Google Analytics 4 (consent only)

With your explicit consent we use Google Analytics 4, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA). Google Analytics sets cookies (e.g. `_ga`, `_gid`) that allow analysis of your site usage.

Data processed (selection):

• Anonymised IP address (`anonymize_ip` enabled)
• Device and browser data
• Pages visited, time on page, click paths
• Approximate geographic location (city / region)

Legal basis: Art. 6 (1) (a) GDPR (consent) and § 25 (1) TTDSG. You may withdraw consent any time via the cookie banner; the lawfulness of processing prior to withdrawal is unaffected.

Transfer to the US: Google is certified under the EU-US Data Privacy Framework, an adequacy decision pursuant to Art. 45 GDPR. In addition, Standard Contractual Clauses (Art. 46 (2) (c) GDPR) are in place between Google and our company.

Retention: Data collected in Google Analytics is automatically deleted after 14 months.

Opt-out: Beyond the banner withdrawal, you can install Google's browser opt-out add-on: tools.google.com/dlpage/gaoptout

Further info on Google's data processing: policies.google.com/privacy

7. Self-hosted fonts

The fonts Archivo Black and Manrope are served from our own servers. No connection to Google Fonts or any other external font service is made — your IP address is not sent to a third party when fonts load.

8. External links

This site links to external websites (notably oit.digital, stephankindler.de, ki.oit.digital, and certificate URLs at third-party providers such as the TÜV Rheinland personal certification platform). Once you click such a link you leave this site. We have no influence on those providers' processing — please consult their privacy policies.

9. Content management system (Decap CMS)

The area at /admin/ serves authorised editors for content maintenance only. Authentication uses GitHub OAuth. If you do not have a GitHub account or do not log in, no personal data is processed there. When logging in, data is exchanged between GitHub Inc. (US) and our OAuth proxy. That processing only concerns our staff and relies on Art. 6 (1) (b) GDPR (performance of an employment agreement).

10. Data security

This site uses SSL/TLS encryption for security and protection of personal and confidential data in transit. You can recognise the encrypted connection by the https:// prefix and the lock icon in your browser.

11. Your rights

Under GDPR you have:

• Right of access to your data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal email to support@olbricht.it is sufficient.

12. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Phone: +49 511 120 4500
lfd.niedersachsen.de

13. Updates to this policy

We update this policy whenever the site's functionality or legal frameworks change. The current version is always available at omg-ki.de/en/privacy; the date of the last update appears at the top.

This privacy policy was carefully drafted based on the actual data processing on this website. It does not, however, replace individual legal advice. Before a legally binding publication we recommend a review by your data protection officer or a lawyer.