Privacy Policy
This policy explains what personal data we process when you visit this website or contact us, why we process it, on what legal basis, and what rights you have. It covers this website. Data we process on behalf of business customers is covered separately in section 10.
1. Controller
The controller responsible for data processing on this website is:
Omega Space Technology GmbH
Georg-Pickl-Weg 3
80995 München, Germany
Email: admin@omega-space.eu
Represented by the managing directors Sherif Elsayed and Marcel Winzen. Registered at Amtsgericht München under HRB 311642.
2. Data protection officer
We have not appointed a data protection officer. The conditions for a mandatory appointment under Art. 37 GDPR and § 38 BDSG are not met: fewer than twenty people in our company are permanently engaged in the automated processing of personal data, our core activity does not consist of regular and systematic monitoring of individuals on a large scale, and we do not process special categories of data on a large scale. We review this assessment as the company grows.
For any question about your personal data, please write to admin@omega-space.eu. Data protection enquiries are handled by the management.
3. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Access (Art. 15) — to be told whether and how we process data about you, and to receive a copy.
- Rectification (Art. 16) — to have inaccurate data corrected.
- Erasure (Art. 17) — to have your data deleted, where no retention obligation applies.
- Restriction (Art. 18) — to have processing limited in certain circumstances.
- Data portability (Art. 20) — to receive data you provided in a machine-readable format.
- Objection (Art. 21) — to object to processing based on our legitimate interests, on grounds relating to your particular situation.
- Withdrawal of consent (Art. 7(3)) — where processing rests on consent, you may withdraw it at any time with effect for the future.
To exercise any of these rights, write to admin@omega-space.eu. We respond within one month; where a request is complex we may extend that period and will tell you if we do.
Right to lodge a complaint
You may lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work, or of the alleged infringement. The authority competent for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany.
4. Visiting this website
When you access this website, your browser automatically transmits information that is recorded in server log files:
- the page requested, and the date and time of the request
- the amount of data transferred and the HTTP status returned
- the referring URL
- browser type and version, and operating system
- the IP address of the requesting device
Purpose: delivering the website, keeping it stable and secure, and
defending against attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the
secure and reliable operation of the site.
Retention: log data is deleted after no more than 30 days, unless
a specific security incident requires it to be kept longer for investigation.
Hosting
This website is hosted by GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, a subsidiary of Microsoft Corporation. The provider processes the log data described above on our behalf, as our processor under an agreement pursuant to Art. 28 GDPR.
Hosting takes place on servers that may be located in the United States, so your data may be transferred to a third country. That transfer is safeguarded by the EU Standard Contractual Clauses adopted by the European Commission, supplemented by the provider's technical and organisational measures; the provider's parent company is additionally certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection. Despite these safeguards we cannot rule out that United States authorities may access data under national law, and you may not have the same enforceable rights against such access as you would within the European Union.
5. Contact form
The contact form asks for your name, email address, subject and message. Phone number and company name are optional. We use this data solely to handle your enquiry and any follow-up arising from it. We do not use it for marketing unless you separately ask to hear from us.
Submissions are delivered to our own email address by Web3Forms (api.web3forms.com), a form-delivery service acting as our processor under Art. 28 GDPR, over an encrypted connection. The data you enter is transmitted to that service only at the moment you submit the form; simply opening the page sends it nothing.
Legal basis: where your enquiry concerns entering into or
performing a contract, Art. 6(1)(b) GDPR; otherwise Art. 6(1)(f) GDPR, our
legitimate interest in responding to enquiries addressed to us.
Retention: we delete enquiry data once the matter is resolved and
no statutory retention obligation applies — as a rule no later than six months
after the last exchange. Where an enquiry leads to a contract, the commercial and
tax retention periods under German law apply instead.
Providing the data is voluntary. Without the required fields we cannot process your enquiry.
6. Contacting us by email
If you write to us directly, we process the data in your message in order to respond, on the same legal bases and for the same retention periods as in section 5. Unencrypted email is not a secure transmission channel; if you need to send us something confidential, ask us for a secure alternative first.
7. Cookies and tracking
This website sets no cookies beyond those technically necessary to deliver the pages you request. We use no analytics, no tracking pixels, no profiling and no advertising technology, and we do not build visitor profiles.
Because no non-essential technologies are used, no consent banner is required and none is shown. Technically necessary storage rests on § 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR.
8. Fonts, icons and external content
All fonts, icons and images on this website are delivered from our own hosting. No connection to third-party servers is established when a page loads, and your IP address is not transmitted to any font, map or media provider. This website embeds no videos, maps or social media widgets.
9. Links to our social media profiles
Links to our profiles on external platforms are plain hyperlinks. No data reaches those platforms unless you actively click a link and leave this website. What happens after that is governed by the respective platform's own privacy policy, over which we have no influence.
10. Data processed for our business customers
Our service is used by businesses, not by visitors to this website. Where we process personal data on behalf of a business customer, that customer is the controller and we act as their processor under Art. 28 GDPR, on the basis of a written data processing agreement setting out the purposes, the categories of data, the sub-processors and the security measures agreed.
If you are a data subject in a customer's dataset — for example a farm whose fields are analysed by a company using our service — please direct requests for access, correction or erasure to that company. They hold the relationship and decide on the processing. We support them in answering, but we are not permitted to act on their data without their instruction.
Business customers can request our data protection documentation, including the technical and organisational measures under Art. 32 GDPR and our sub-processor list, at admin@omega-space.eu.
11. Data security
This website is delivered over TLS encryption, recognisable by the
https:// prefix in the address bar. We apply technical and
organisational measures pursuant to Art. 32 GDPR to protect personal data against
accidental or unlawful destruction, loss, alteration, and unauthorised disclosure or
access, and we review those measures as our systems change.
12. Changes to this policy
We update this policy when our processing changes or when the law requires it. The version number and date at the top of this page always indicate the current state.
