1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the dataprocessing on this website is:

OxiFleet GmbH 
Theodorstrasse 105
40472 Dusseldorf
Deutschland 
TELEFON: +49 (0) 1517 43 64 492
E-Mail: team@oxifleet.com 

2. Data Protection Officer

Data Protection Officeris:

Lars Pennekamp
TIGGES DCO GmbH
Zollhof 8
40221 Düsseldorf
Germany
Email:  datenschutz@tigges-dco.de
‍Phone: +49 211 81 99 8216

3. General Information on Data Processing

We process personaldata only insofar as this is necessary to provide a functional website and ourcontent and services, or where you have consented to such processing or another legal basis applies.

Personal data means any information relating to an identified or identifiable natural person (such asname, email address, IP address).

4. Provision of the Website and Server Log Files

4.1 Description and Scopeof Data Processing

When you access ourwebsite www.oxifleet.com,information is automatically transmitted by the browser you use to our webserver and is temporarily stored in so‑called log files. Our website isprovided via the Webflow platform; a Content Delivery Network (CDN) operated byCloudflare (USA) is placed in front of it. The CDN server location is the USA.

In particular, the following data may be processed:

IP address of the requesting device
Date and time of access
URL and path of the requested page
Website from which access originated (referrer URL)
Browser type and version used
Operating system used
Name of your access provider, where applicable
Webflow and Cloudflare are used for the technical provision, security, and performance of our website (hosting and content delivery network).

4.2 Legal basis

The legal basis forthis data processing is Article 6(1)(f) GDPR. Our legitimate interest lies inthe secure and efficient provision of our website, ensuring IT security andoptimising our online offering.

4.3 Recipients / Third Countries

Recipients of this dataare the service providers Webflow, Inc. (hosting) and Cloudflare, Inc. (ContentDelivery Network).

Webflow and Cloudflareare based in the USA, meaning that data may be transferred to a third countryoutside the EU/EEA. In doing so, we ensure that appropriate safeguards withinthe meaning of Article 46 GDPR are in place (such as EU Standard ContractualClauses) or that an adequate level of data protection is otherwise guaranteed.

4.4 Storage period

Log files are generally deleted after no more than 30 days, unless a longer storage period is requiredin a specific case to defend against or clarify concrete attacks or to assert,exercise or defend legal claims.

4.5 Obligation to provide data

The provision of the above‑mentioned data is technically necessary to display our website. Without these data, the website cannot be delivered correctly.

5. Contact (Contact     Form / Email / Phone)

5.1 Description and scope of data processing
‍
Our website provides acontact form (“Get in Touch”, “Request a consultation”) which you can use toget in touch with us. The following data are processed at minimum:

Your name
Your email address
Your message or inquiry content
In addition, the dateand time of your inquiry and technical metadata (such as IP address) may beprocessed. Alternatively, you cancontact us by email (team@oxifleet.com) or by phone.
The information yousubmit is stored for the purpose of processing your inquiry and for handling any follow‑up questions.

5.2 Legal basis

The legal basis forprocessing data in the course of contact inquiries is Article 6(1)(f) GDPR(legitimate interest in responding to your inquiry). Insofar as the contactaims at the conclusion or performance of a contract with us, the legal basis isArticle 6(1)(b) GDPR.

5.3 Recipients

Recipients of the dataare internal departments of OxiFleet GmbH responsible for handling your inquiry(e.g. sales, support). Data are only passed on to third parties where this isnecessary for processing your inquiry or if you have consented to such transfer.

5.4 Storage period

We store the dataarising in connection with contact inquiries for as long as is necessary toprocess the inquiry. In addition, statutory retention obligations (e.g.commercial and tax law) may result in longer storage periods (typically up to 6or 10 years).

5.5 Obligation to Provide Data / Consequences of Non‑Provision

Providing your contact details is voluntary. However, without providing at least one contact method (e.g., an email address), we will be unable to respond to your request.

6. Use of Cookies and Similar Technologies

6.1 Description and scope of data processing
‍
Our website usescookies and similar technologies (such as web storage) to ensure the technical functioning of the site and, where applicable, for analytics, marketing and personalisation purposes.

Some of thesetechnologies are essential for the operation of the website (e.g. to providesecurity functions or to store your cookie preferences), while others servestatistical analysis or marketing purposes.

Our website uses a consent management solution throughwhich you can grant or refuse your consent to the setting of cookies/trackersand the loading of external services. In the cookie banner, categories such as“Essential”, “Analytics”, “Marketing” and “Personalisation” are displayed, togetherwith the respective providers and trackers.

‍
6.2 Legal BASES

For essential cookiesthat are strictly necessary for the technical provision of our website,processing is based on Article 6(1)(f) GDPR (legitimate interest in a secureand functional online offering). For all non‑essentialcookies and comparable technologies (such as analytics, marketing andpersonalisation cookies), processing is based on your consent in accordancewith Article 6(1)(a) GDPR in conjunction with Section 25 of the GermanTelecommunications‑Telemedia Data Protection Act (TTDSG), where applicable. Youprovide this consent via our cookie banner and can change your settings at anytime.

6.3 Storage period

The storage period ofindividual cookies and other technologies depends on the respective purpose andprovider. Specific information (name, type, storage duration, provider,purpose) is available in the cookie banner and the detailed informationprovided there.

6.4 Obligation to Provide Data / Consequences of Non‑Provision

The use of essentialcookies is required for the proper functioning of the website. Non‑essentialcookies are only set with your consent; if you do not give your consent, somefunctionalities may be limited (for example, fewer personalised contents or nostatistical evaluation).

7. External Services and Third‑Party Content

Several externalservices are integrated into our website, primarily to provide fonts, librariesand performance optimisation. A privacy report has identified the followingservices: Amazon CloudFront, Google Fonts, Google Hosted Libraries(ajax.googleapis.com), jsDelivr, Webflow, consentpro.com.

7.1 Amazon CloudFront (Content Delivery Network)
‍
Our website uses AmazonCloudFront, a Content Delivery Network (CDN), to efficiently deliver static anddynamic content and reduce loading times.

Provider: Amazon(Amazon Web Services, Inc.) Purpose of processing: Web storage / fast delivery of content and performance optimisation of the website. Legal basis: Article6(1)(f) GDPR (legitimate interest in the secure and fast provision of ouronline offering). Recipients / Third Countries: Data may be transferred toservers operated by Amazon, including in the USA. We implement appropriatesafeguards in accordance with Article 46 GDPR. Storage period: Depends onconfiguration (e.g. caching times).

7.2 jsDelivr

We use the CDN jsDelivr to deliver certain scripts.

Provider: Volentio JSDLimited. Purpose of processing: Web storage / delivery of scripts and technicalfunctions. Legal basis: Article 6(1)(f) GDPR (legitimate interest in theefficient technical delivery of content). Recipients / Third Countries: Dependingon server locations, data may be transferred to third countries. Storageperiod: Depends on the provider’s caching settings.

7.3 Webflow (Hosting)

Our website is hosted via the Webflow platform.

Provider: Webflow, Inc.Purpose of processing: Hosting and technical provision of the website. Legalbasis: Article 6(1)(f) GDPR (legitimate interest in the secure and efficientprovision of our website). Recipients / Third Countries: Data may be transferredto Webflow servers in the USA. We use appropriate safeguards pursuant toArticle 46 GDPR.

7.4 Consent Management (consentpro.com)

it is a consent management tool used to manage your cookie preferences.

Provider: Consent Pro / operator of consentpro.com(please add precise provider details from your cookie banner and, whereavailable, from the detailed privacy information). Purpose of processing:Management of your consents and preferences for cookies and external services(“Manage consent settings”). Legal basis: Article 6(1)(c) GDPR (compliance withlegal obligations to document consents) and Article 6(1)(f) GDPR (legitimateinterest in legally compliant consent management). Storage period: The storageperiod of your consent data (e.g. consent ID, timestamp) must be added based onyour consent tool’s configuration.

8. Analysis, marketing, and personalization services

Our cookie banner showscategories “Analytics”, “Marketing” and “Personalisation”. Specific services(such as web analytics or marketing tools) are listed there with name, type,storage duration and purpose.

Where such services are used, personal data is processed only with your consent:

Legal basis: Article6(1)(a) GDPR in conjunction with Section 25 TTDSG (where applicable).

Purpose: Measurement ofreach, usage analysis, optimisation of our offering, personalised content andadvertising.

Withdrawal: You canwithdraw your consent at any time with effect for the future via the cookiebanner (“Settings”, “Manage consent settings”).

9. Security of Data Processing (transport encryption, security headers)

Our website uses transport encryption (TLS/SSL). A security scan has shown that the TLScertificate is valid and correctly configured, that current protocols (TLS1.2/1.3) are supported and that redirects from HTTP to HTTPS are correctly setup.

No outdated or insecureTLS/SSL protocols were accepted. We are continuously working to improve theseconfigurations.

10. Overview of legal BASES

We rely on thefollowing legal bases under the GDPR for processing personal data:

Article 6(1)(a) GDPR –Consent (e.g. for non‑essential cookies, analytics and marketing services).

Article 6(1)(b) GDPR –Performance of a contract or pre‑contractual measures (e.g. handling inquiriesaimed at concluding a contract).  

Article 6(1)(c) GDPR –Compliance with a legal obligation (e.g. commercial and tax retentionobligations).

Article 6(1)(f) GDPR –Legitimate interests (e.g. secure, efficient provision of the website, ITsecurity, economic operation).

11. Storage period

Unless a specific storage period is stated in this privacy policy, the following applies:

We process and storepersonal data only for as long as necessary for the purposes for which theywere collected, or for as long as statutory retention obligations require.After the purpose ceases to apply or the legal retention periods expire, thedata are deleted or anonymised in accordance with GDPR requirements.

12. Rights of data subjects

As a data subject, you have the following rights in relation to us:

Right of accesS (Article 15 GDPR): You can request information about the personal data weprocess about you and further details about such processing.

Right to rectification (Article 16 GDPR): You can request the correction of inaccurate or completionof incomplete personal data.

Right to erasure (Article 17 GDPR): You can request the deletion of your personal data, providedthat no statutory retention obligations or other legal bases justify furtherprocessing.

Right to restriction ofprocessing (Article 18 GDPR): You can request restriction of processing of yourdata where the conditions of Article 18 GDPR are met.

Right to data portability (Article 20 GDPR): You have the right to receive the personal dataconcerning you in a structured, commonly used and machine‑readable format or tohave it transmitted to another controller, where the conditions of Article 20GDPR are met.

Right to object (Article 21 GDPR): You may object at any time, on grounds relating to yourparticular situation, to the processing of personal data concerning you basedon Article 6(1)(f) GDPR. We will then no longer process your personal dataunless we can demonstrate compelling legitimate grounds for the processing orthe processing serves the establishment, exercise or defence of legal claims.

Right to withdrawconsent (Article 7(3) GDPR): You may withdraw any consent you have given at anytime with effect for the future, e.g. via our cookie banner.

To exercise yourrights, you can contact us at any time using the contact details provided in section 1.

13. Right to lodge a complaint with a supervisory authority

Ifyou believe that the processing of your personal data violates data protectionlaw, you have the right to lodge a complaint with a supervisory authority(Article 77 GDPR). You may contact, in particular, theauthority competent for your place of residence or the authority competent for us:

Landesbeauftragte für Datenschutz undInformationsfreiheit Nordrhein‑Westfalen, Kavalleriestr.2-4
40213 Düsseldorf
Telefon: +49 211/38424-0
E-Mail: poststelle@ldi.nrw.de

14. Obligation to provide personal data

In the context of usingour website, certain personal data are required to provide the contents andfunctions (e.g. IP address, essential cookies, contact details when using thecontact form). Without these data, the website may not be available or may beavailable only with restrictions, and we may not be able to process your inquiries. Otherwise, providingpersonal data is voluntary; however, non‑provision may mean that certainservices (such as making contact, scheduling demos, personalised content)cannot be used.

15.  Automated Decision‑Making / Profiling

No automated decision‑making,including profiling within the meaning of Article 22 GDPR, takes place inconnection with the use of our website at present. Should this change (forexample, through the use of profiling tools), we will inform you separately.

16. Changes to this Privacy Policy

We reserve the right toamend this privacy policy if the legal situation, our data processing or theservices we use change. The current version can be accessed at any time on ourwebsite under the “Privacy Policy” or equivalent menu item