Privacy Policy

The controller responsible for data processing on this website is:

Ovarna Owner: Mustafa Resitoglu Lübecker Str. 22 39124 Magdeburg Germany

For privacy enquiries you can reach us at: Email: info@ovarna.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

*This is an English translation for your convenience. In case of any discrepancy, the German version of this privacy policy prevails.*

This privacy policy applies to visits to our website, contacting us, the preparation of quotes, invoicing and all related data processing operations.

It constitutes a contractual commitment guaranteeing our customers a secure and responsible handling of their data.

Unless agreed otherwise (for example in an individual contract), these statements apply literally and exclusively to the use of this website.

3.1 Automatic data collection when visiting the website

When you access our website, the following data is collected automatically by the hosting provider and through the use of Google Analytics:

• IP address (anonymised)
• Browser type and version
• Operating system
• Date and time of access
• Referrer URLs and click behaviour

Purpose: Analysis of user behaviour and performance measurement in order to continuously improve our services.

3.2 Data processed for quotes and invoices

To prepare a quote or an invoice we collect and process the following personal data:

• First and last name (company if applicable)
• Postal address
• Email address

This data is used exclusively for the performance of the contract and for customer support.

3.3 Contact and appointment form

Our website offers a form for booking appointments and contacting us. The following personal data is collected:

• First and last name
• Postal address (street, house number, postal code, city)
• Email address
• Request / description of the problem
• Preferred date (time optional)

Purpose of processing: Handling your enquiry, arranging an on-site appointment and communication in the context of the technical service.

Legal basis: - Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) - Art. 6(1)(a) GDPR (consent given by submitting the form)

Retention period: The transmitted data is deleted as soon as the purpose of storage no longer applies or statutory retention periods have expired. As a rule, deletion takes place no later than 6 months after the enquiry has been completed, provided no contract is concluded.

Obligation to provide data: Without the mandatory fields we cannot process your enquiry.

To securely process and forward form enquiries we use the service FormSubmit (https://formsubmit.co).

Provider: FormSubmit LLC, 5042 Wilshire Blvd #36851, Los Angeles, CA 90036, USA. Privacy policy: https://formsubmit.co/privacy-policy

When you submit the form, the data you entered is transmitted to FormSubmit via an encrypted connection (SSL/TLS). FormSubmit forwards this information directly to our email address (info@ovarna.de). FormSubmit does not store the data permanently but acts exclusively as a secure transmission service.

Legal basis: - Art. 6(1)(b) GDPR (performance of a contract / appointment scheduling) - Art. 6(1)(f) GDPR (legitimate interest in secure and fast form transmission)

Third country transfer: As FormSubmit is based in the USA, personal data may be transferred to a third country. FormSubmit states that transfers are safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR). Alternatively, you can contact us directly by email at any time without using the form.

Consent: By submitting the form you expressly consent to the described data transfer (Art. 49(1)(a) GDPR).

We use the live chat service Tidio on our website so that you can contact us quickly.

Provider: Tidio LLC, 149 New Montgomery Street, San Francisco, CA 94105, USA. Privacy policy: https://www.tidio.com/privacy-policy/

If you use the live chat, the following data is processed: - Chat messages and their content - IP address - Browser and device information - Time of use

Tidio uses cookies to provide the chat functionality and to maintain the conversation.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) and Art. 6(1)(f) GDPR (legitimate interest in efficient customer communication).

Third country transfer: As Tidio is based in the USA, personal data may be transferred to a third country. Tidio safeguards the transfer by means of the EU Standard Contractual Clauses (Art. 46 GDPR).

Using the live chat is voluntary. Alternatively, you can contact us by email.

We use the service TidyCal for online appointment scheduling.

Provider: AppSumo / SureSwift Capital, Austin, TX, USA. Privacy policy: https://tidycal.com/privacy-policy

When booking an appointment the following data is collected: - First and last name - Email address - Preferred date and time - Message or request, if provided

Purpose: Arranging and managing consultation appointments.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / appointment scheduling).

Third country transfer: As TidyCal is based in the USA, personal data may be transferred to a third country. The transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR).

Using TidyCal is voluntary. Alternatively, you can contact us directly by email to arrange an appointment.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Analytics 4 with IP anonymisation enabled. This means that your IP address is truncated by Google within member states of the European Union before being transferred to the USA.

Anonymised basic mode (without consent): Without your consent we only record anonymised basic statistics without cookies or personal data. As no personal data is processed, the GDPR does not apply to this data.

Data collected after consent: - Page views and navigation - Time spent on pages - Scroll depth - Button clicks and interactions - Conversion events (contact form, consultation booking) - Device information (browser, operating system) - Approximate location (city level)

Legal basis: Art. 6(1)(a) GDPR (consent)

Withdrawal: You can withdraw your consent at any time via our cookie banner.

Microsoft Clarity

We use Microsoft Clarity, a web analytics service provided by Microsoft Corporation.

Clarity records: - Click, scroll and mouse movement patterns - Session recordings (anonymised) - Heatmaps for usability optimisation

Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA Privacy policy: https://privacy.microsoft.com/privacystatement Project ID: vbauwl4p21

Legal basis: Art. 6(1)(a) GDPR (consent)

Opt-out: Via our cookie banner or https://privacy.microsoft.com/

Our website uses cookies to improve the user experience and for analytics purposes.

We distinguish between: - Necessary cookies: Required for the basic functions of the website; these cannot be disabled. - Analytics cookies: These help us understand how visitors use our website.

You can adjust your cookie settings at any time via our cookie banner.

Cookie retention periods:

We use Microsoft 365 for business email communication.

Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Privacy policy: https://privacy.microsoft.com/privacystatement

When communicating by email the following data is processed: - Sender and recipient email addresses - Subject and content of the message - Date and time - Attachments, if any

Purpose: Business communication, handling customer enquiries, preparing quotes.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

Data processing agreement: A data processing agreement is in place with Microsoft, ensuring the protection of your data in accordance with the GDPR.

We use the service lexoffice for accounting, quotes and invoicing.

Provider: Haufe-Lexware GmbH & Co. KG, Munzinger Str. 9, 79111 Freiburg, Germany. Privacy policy: https://datenschutz.lexware.de/lexware-office

The following personal data is processed for invoicing and accounting: - First and last name (company if applicable) - Postal address - Email address - Invoice amounts and payment information - Tax numbers / VAT ID

Purpose: Preparation of quotes and invoices, accounting and compliance with tax obligations.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation to retain business records).

Retention period: Invoice data is retained for 10 years in accordance with statutory retention periods (§ 147 AO, § 257 HGB).

Data processing agreement: A data processing agreement pursuant to Art. 28 GDPR is in place with Haufe-Lexware. lexoffice hosts the data in Germany.

We use the cloud services Microsoft OneDrive and Apple iCloud to store and manage business documents.

Microsoft OneDrive Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Privacy policy: https://privacy.microsoft.com/privacystatement

Apple iCloud Provider: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA. Privacy policy: https://www.apple.com/legal/privacy/

The following data may be stored in these cloud services: - Customer-related documents (quotes, contracts, correspondence) - Project documentation - Business files and notes

Purpose: Secure storage and organised management of business documents, protection through backups.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient data management).

Third country transfer: Both providers are based in the USA. The transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR) and the EU-US Data Privacy Framework.

Data processing agreements: Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.

Personal data is processed for the following purposes:

• Performance measurement and analysis (optimising our online presence)
• Customer support (handling enquiries, preparing quotes, scheduling appointments)
• Contractual processing (in the event of an order)
• Accounting and invoicing

Legal bases pursuant to Art. 6 GDPR: - Consent (Art. 6(1)(a)) - Performance of a contract (Art. 6(1)(b)) - Legal obligation (Art. 6(1)(c)) - Legitimate interest (Art. 6(1)(f))

Personal data is only disclosed where this is necessary for the performance of a contract or where a legal basis exists. This includes in particular:

• FormSubmit LLC (USA) as transmission service for form enquiries
• Tidio LLC (USA) for the live chat function
• TidyCal / AppSumo (USA) for online appointment booking
• Haufe-Lexware GmbH & Co. KG (Germany) for accounting and invoicing
• Microsoft Corporation (USA) for email hosting and cloud storage (OneDrive)
• Apple Inc. (USA) for cloud storage (iCloud)
• Google Ireland Limited (Ireland) for web analytics (Google Analytics)

No further transfer to third countries takes place unless there is a legal obligation to do so.

Likewise, personal data is not passed on to other third parties without the express consent of the data subject.

Within the scope of the applicable statutory provisions you have the right at any time to:

Access (Art. 15 GDPR) Free information about your stored personal data, its origin and recipients, and the purpose of the data processing.

Rectification (Art. 16 GDPR) Correction of inaccurate data or completion of the personal data we hold about you.

Erasure (Art. 17 GDPR) Deletion of the personal data we hold about you.

Restriction of processing (Art. 18 GDPR) Restriction of data processing.

Data portability (Art. 20 GDPR) Data portability pursuant to Art. 20 GDPR.

Objection (Art. 21 GDPR) Objection to the processing of your personal data.

Withdrawal Withdrawal of consent you have given. You can adjust your cookie settings at any time via the cookie banner.

Complaint Complaint to a supervisory authority, for example the State Commissioner for Data Protection of Saxony-Anhalt.

Contact: info@ovarna.de

Retention: Data is stored in accordance with statutory retention periods and deleted afterwards.

Overview of retention periods:

Technical and organisational measures: - SSL/TLS encryption - Secured systems and infrastructure - Access protection according to the current state of the art

If you assert a justified request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it.

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL / TLS encryption.

You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

When SSL / TLS encryption is activated, the data you transmit to us cannot be read by third parties.

We use the following external services:

Hosting (AWS Amplify) Our website is hosted via Amazon Web Services (AWS) Amplify. The host collects the following data transmitted by your browser in so-called log files: IP address (anonymised), the address of the previously visited website, date and time of the request, content of the request, HTTP status code and information about the browser and operating system.

Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Privacy policy: https://aws.amazon.com/privacy/

Content delivery networks We use a content delivery network (CDN) to deliver our website faster and more securely.

Fonts For the consistent display of fonts this website uses locally hosted web fonts. No data is transferred to external providers.

Overview of third-party providers:

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to reflect changes to our services in the privacy policy.

The new privacy policy will then apply to your next visit.

Unless otherwise agreed, this policy applies to all visitors of the website.

Individual contractual agreements take precedence.

Last updated: February 2026