Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation for this website is:

Represented by the managing directors David Wright and David Nacke.

Phone: +49 531 1805200
Email: support@orbitone.io

2. Scope

This privacy policy applies to the public product website at orbitone.io. Additional privacy information may apply to OrbitOne Web, OrbitOne Drive, the OrbitOne Vault browser extension, the VS Code extension and customer-operated instances.

The separate policy for OrbitOne Vault is available at Browser extension privacy.

3. Website access and server logs

When this website is accessed, the browser transmits connection data that is technically required by the web server. This may include:

• the IP address of the requesting device,
• date and time of access,
• the requested page or file and amount of data transferred,
• HTTP status code,
• referrer URL, where transmitted,
• browser type, browser version and operating system.

The processing is required to deliver the website, maintain its stability and security, identify attacks and investigate technical errors. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website.

4. Cookies, analytics and tracking

The public OrbitOne product website does not use analytics, marketing or tracking cookies. No web analytics, advertising or profiling services are embedded.

The styles, fonts, icons and scripts required to display and operate the website are served locally. A normal visit does not cause this website to store information in the browser's Local Storage or Session Storage.

5. Contact requests

If you contact us by email or phone, we process the contact details and the content you provide in order to respond to and, where necessary, follow up on your request.

The legal basis is Art. 6(1)(b) GDPR where the request concerns a contract or pre-contractual measures. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the proper handling of enquiries. Statutory retention obligations may additionally establish Art. 6(1)(c) GDPR as a legal basis.

6. Downloads

The website provides installers and extension packages for OrbitOne tools. When a file is downloaded, the same technically required connection data is processed as when a page is accessed. The file name and amount of data transferred may also be logged.

This processing serves to deliver the requested download and maintain the stability and security of the service. The legal basis is Art. 6(1)(b) GDPR where the download forms part of a user or contractual relationship, and otherwise Art. 6(1)(f) GDPR.

7. External links and services

The website contains links to external services, in particular OrbitOne Web, registration and sign-in pages, and the Visual Studio Marketplace. Only when you follow such a link does your browser connect to the respective provider. The provider may receive data including your IP address, browser information and the referring page.

The operator of the destination is generally responsible for processing on that website. Please refer to the privacy information provided there. External content is not automatically embedded in this product website.

8. Recipients and processors

Within AdventureKingz GmbH, personal data is made available only to those functions that require it for the stated purposes.

Where technical service providers are used for hosting, operation, maintenance or communication, they may receive data as processors. Service providers are selected and contractually bound in accordance with the applicable legal requirements. Data is disclosed to other recipients only where legally permitted or required.

9. Transfers to third countries

The product website does not embed external analytics, advertising or social media content that would trigger a transfer to a third country merely by visiting the page.

If a service provider outside the European Union or European Economic Area is used in an individual case, a transfer takes place only in accordance with Art. 44 et seq. GDPR, for example on the basis of an adequacy decision or appropriate safeguards. When you voluntarily follow an external link, the terms of the respective provider apply.

10. Retention

Server log data is retained only for as long as required for operation, security, abuse prevention and troubleshooting. It is retained for longer only where a specific security incident must be investigated or legal obligations require this.

Data from contact requests is deleted once the request has been fully resolved and no contractual or statutory retention obligation applies. Records subject to statutory retention requirements are stored for the required period.

11. Data security

We take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. The website is transmitted over encrypted HTTPS connections. Complete protection during transmission over the internet cannot, however, be guaranteed.

12. Data subject rights

Subject to the applicable legal requirements, you have the following rights in particular:

• access to personal data under Art. 15 GDPR,
• rectification of inaccurate data under Art. 16 GDPR,
• erasure under Art. 17 GDPR,
• restriction of processing under Art. 18 GDPR,
• data portability under Art. 20 GDPR,
• objection to processing based on legitimate interests under Art. 21 GDPR,
• withdrawal of consent with effect for the future where processing is based on consent.

To exercise these rights, contact support@orbitone.io.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority generally responsible for companies based in Lower Saxony is:

Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de
Website: lfd.niedersachsen.de

You may also contact another competent data protection supervisory authority.

14. Requirement to provide data

The transmission of technical connection data is required to access the website. Without this data, the website cannot be delivered. Contacting us and following external links are voluntary.

15. Automated decision-making

No solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with visits to this product website.