Legal

Privacy Policy

Information pursuant to Articles 13 and 14 GDPR

1. Controller

The controller for data processing on this website is:

one ml Germany UG (haftungsbeschränkt) i.G.
Beethovenstraße 28
46145 Oberhausen, Germany
Represented by: Marcel Scherrinsky, Managing Director
E-mail: info@oneml.de

No data protection officer has been appointed, as the statutory requirements for this are not met.

2. General principles

We process personal data only to the extent necessary to provide a functioning website and to handle your enquiries. Processing is carried out on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This website uses SSL/TLS encryption. You can recognise an encrypted connection by https:// in your browser’s address bar.

3. Hosting and server log files

This website is hosted by an external service provider:

united-domains GmbH
Gautinger Straße 10
82319 Starnberg, Germany
www.united-domains.de

To provide the web space, united-domains in turn engages IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, as a sub-processor. The servers are located in Germany. Both companies process the data arising via the website on our behalf. A data processing agreement pursuant to Article 28 GDPR is in place.

When the website is accessed, the server automatically collects information transmitted by your browser and stores it in server log files:

• IP address of the requesting device, anonymised in the case of IONOS
• date and time of access
• domain accessed and the page or file requested
• access method used
• browser type and version, operating system and device type
• referrer URL, i.e. the page previously visited

Purpose: establishing the connection, ensuring trouble-free operation, system security and investigating misuse.
Legal basis: Article 6 (1) (f) GDPR. Our legitimate interest lies in the secure and stable operation of the website. In relation to our hosting provider, processing is carried out to perform the contract under Article 6 (1) (b) GDPR.
Retention: united-domains stores the data arising in Apache log format for 14 days for security reasons and then deletes it, including backups. The access data arising at IONOS is stored there for 8 weeks for the purpose of security and stability of the service.

The privacy information of our hosting provider is available at united-domains.de/unternehmen/datenschutz.

4. Contact form

If you send us an enquiry via the contact form, we process the data you enter: name, e-mail address, your message and, where provided, company and phone number. In addition we store the time of submission and the IP address in order to prevent misuse.

Purpose: handling and answering your enquiry.
Legal basis: Article 6 (1) (a) GDPR (your consent given by ticking the box) and Article 6 (1) (b) GDPR where your enquiry relates to the conclusion or performance of a contract. Additionally Article 6 (1) (f) GDPR for spam protection.
Recipients: the message is delivered as an e-mail to our mailbox and is processed in this context by our hosting provider and our e-mail provider. No transfer to other third parties takes place.
Retention: we store your enquiry until the purpose of storage ceases to apply, you ask us to delete it or you withdraw your consent. Mandatory statutory retention periods, in particular commercial and tax law periods of up to ten years, remain unaffected.
Provision of data: the fields marked as mandatory are required in order to handle your enquiry. Without them we cannot answer you. All other details are voluntary.

You may withdraw your consent at any time with effect for the future, for example informally by e-mail to info@oneml.de. The lawfulness of processing carried out up to the withdrawal remains unaffected.

5. Contact by e-mail

If you contact us by e-mail, your details including the content of the communication will be stored and processed by us. The legal basis is Article 6 (1) (b) GDPR for contract-related enquiries and otherwise Article 6 (1) (f) GDPR based on our legitimate interest in handling the enquiries addressed to us.

Please note that unencrypted e-mail is not a secure means of transmission and may be read by third parties.

6. Cookies

This website does not set any cookies for analytics, marketing or tracking purposes. When the contact form is submitted, a technically necessary session cookie may be set for spam protection. It contains no personal profile data and is deleted when the browser is closed. In addition, our hosting provider sets technically necessary cookies by default in order to operate the web space. The legal basis is section 25 (2) no. 2 TDDDG in conjunction with Article 6 (1) (f) GDPR. No consent is required for this.

7. Fonts and external content

Fonts are served exclusively from our own server. No connection is made to Google Fonts or comparable services. Maps, videos, social networks and analytics services are not embedded. Accessing this website therefore does not transfer data to third parties beyond the hosting relationship.

8. Transfers to third countries

No personal data is transferred to countries outside the European Union or the European Economic Area. Hosting and e-mail delivery take place on servers located in Germany.

9. Your rights as a data subject

You have the following rights vis-à-vis us:

• access to the data we process (Article 15 GDPR)
• rectification of inaccurate or incomplete data (Article 16 GDPR)
• erasure of the data we hold about you (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• withdrawal of consent with effect for the future (Article 7 (3) GDPR)

Right to object under Article 21 GDPR

Where your data is processed on the basis of legitimate interests under Article 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2 to 4, 40213 Düsseldorf, Germany
www.ldi.nrw.de

10. Automated decision-making

Automated decision-making, including profiling, within the meaning of Article 22 GDPR does not take place.

11. Changes to this privacy policy

We will adapt this privacy policy as soon as changes to this website or to the legal situation make this necessary. The version available on this page applies in each case.

Last updated: 4 August 2026