Privacy

Controller

The controller for the processing of personal data on this website is:
Oronts GmbH, Leopoldstr. 31, 80802 München, Germany.
Contact: office@oronts.com, phone +49 157 5879 3525. Full provider details are in our imprint.

Scope

This notice covers the website at this domain and the documentation it hosts. The OGuardAI software is deployed and operated by its users. Self-hosted deployments process data inside the customer's own boundary, under the customer's own configuration and policies, and this notice does not govern that processing.

Hosting

This website and its documentation are hosted for us by Render (Render Services, Inc.). When your browser loads a page, Render processes the technical connection data your browser sends: your IP address, the page requested, the referring page, your browser and device identification (user agent), and the time of the request. Render acts as our processor and keeps these server logs only as long as needed for operation and security. The legal basis is our legitimate interest in providing and securing the site, Article 6 (1) (f) GDPR.Provisional: hosting region and data processing agreement to be confirmed

If a separate content delivery network is placed in front of this site, it will be named here together with its processing role and safeguards before it is used.Provisional: no separate CDN confirmed

Cookies and analytics

Analytics is not enabled on this deployment: no analytics script loads and no analytics cookie is set. When it is enabled, it works exactly as described below and runs only after your consent. The description stays here so this notice matches every deployment.

This website uses one strictly necessary cookie, and Google Analytics only with your consent. We set no advertising cookies, and we embed no third-party content beyond what is described here.

The strictly necessary cookie is named oguardai_consent. It records your cookie choice so we do not ask again. It holds a version number, your analytics choice, and a timestamp, it keeps for 180 days, and it needs no consent because it is necessary to honour your request to remember that choice (Section 25 (2) no. 2 TDDDG).

Analytics uses Google Analytics 4, provided by Google Ireland Limited acting as our processor. Before you accept, no Google Analytics script loads and no request is sent to Google. The legal basis is your consent, Article 6 (1) (a) GDPR together with Section 25 (1) TDDDG. You can withdraw your consent at any time under Cookie settings in the footer. Withdrawal stops analytics immediately and removes its cookies; processing that took place before you withdrew stays lawful.

With your consent, Google Analytics sets two cookies: _ga (about two years) and _ga_<stream id> (about two years).

Google Analytics 4 measures the pages you view, the time and duration of your visit, the page that referred you, your browser, device, and operating system, your screen size, a coarse region derived from your IP address, and the interactions we choose to measure: clicks on the main calls to action, that a request form was submitted and its type (never its content), and the number of documentation search results (never the search text). We send no names, emails, or form content to Google. Google Signals, advertising features, ads personalization, and User-ID are turned off in our configuration.

We send Google only a shortened web address: the site name and the page name for our own pages, and just the site name for anything else, with any query string, link fragment, and referrer path removed. This keeps values such as an email address out of the address we record, because we build the reply address ourselves rather than passing on your full one.

Google Analytics also offers Enhanced Measurement, which can read your full unshortened web address to record page changes and on-site search terms and would bypass the shortening above. We keep Enhanced Measurement (its history-based page views and its search-term collection) turned off in the Google Analytics property so only the shortened address described here is recorded. This is a setting in the Google account, not something our code alone can enforce.Provisional: Enhanced Measurement (history page views and query-based search) to be turned off in the Google Analytics property

Google states that Google Analytics 4 does not log or store IP addresses: it uses the IP address to derive a coarse location and then discards it, and traffic from the EU is handled on servers in the EU.Provisional: Google's IP statement, pending counsel

Some processing may involve a transfer to Google LLC in the United States. Google LLC relies on its certification under the EU-US Data Privacy Framework, with the standard contractual clauses in Google's data processing terms as a fallback.Provisional: Data Privacy Framework certification and terms verified at publication

We have accepted Google's data processing terms for this property.Provisional: to be accepted in the Google Analytics account

Event data is retained for two months and then deleted or aggregated.Provisional: retention setting to be confirmed in the account

Your cookie choice does not affect contact by email, our hosting, or the request form, which are described elsewhere in this notice.

Contact and request form

When you send a request through our form, we process the details you enter: your name and work email, and, if you provide them, your company, the edition you are interested in, and what you describe about your use case and preferred time. We use these details only to answer your request and to discuss a possible engagement. The legal bases are Article 6 (1) (b) GDPR (steps taken at your request before a contract) and Article 6 (1) (f) GDPR (our legitimate interest in handling business enquiries).

The form is processed on our own server and then forwarded to Google Workspace (Google Ireland Limited), which records the enquiry and delivers it to office@oronts.com. Google acts as our processor. We do not store the content of your message in our own server logs. Your IP address is held briefly in server memory, for no more than about one minute, only to limit automated abuse of the form, and it is never written to persistent storage.

We keep an enquiry for as long as we are in contact about it, and we delete it no later than 12 months after the enquiry is closed, unless a longer statutory retention period (for example under commercial or tax law) applies.Provisional: processor and retention period to be confirmed

Documentation search

The search on our documentation runs against an index built at publish time and answers inside your browser session. We do not store your search queries.

Email

When you email office@oronts.com, we process your message and contact details to handle your enquiry. We have not appointed a data protection officer. Under Section 38 of the German Federal Data Protection Act (BDSG) we are not required to, because we do not reach the threshold of people constantly engaged in the automated processing of personal data that would trigger the obligation, and we do not carry out processing that would require one on other grounds.Provisional: mail provider and data protection officer status to be confirmed

Your rights

Under the GDPR you have the right to:

• access to your personal data (Article 15);
• rectification of inaccurate data (Article 16);
• erasure (Article 17);
• restriction of processing (Article 18);
• data portability (Article 20);
• object to processing based on our legitimate interest (Article 21).

To exercise any of these rights, contact us at office@oronts.com. You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR on this website.

Changes

We may update this notice as the site changes or as legal review completes. The date at the top of this page reflects the current version.