Privacy policy

Last updated: 9 November 2026

This privacy policy explains which personal data we process when you visit ontechgroup.com, contact us or use the AI assistant, why we do so, how long we keep the data and which rights you have. It applies to this website only.

1. Controller

The controller responsible for data processing on this website is:

Visitors in the European Union can also write to our office in Spain:

2. Summary

• We do not use cookies, analytics, tracking pixels, advertising networks or social media plugins.
• Fonts, images and videos are served from our own server. No content is loaded from Google or other third parties when you simply browse the site.
• Personal data is only processed when your browser loads the website (technical data), when you send us a message, or when you use the AI assistant or the use-case finder.
• We never sell personal data.

3. Visiting the website (hosting and server logs)

The website is hosted by Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany, which processes data on our behalf. When you open a page, the server automatically records technical data: IP address, date and time, requested page, referring page, browser and operating system, and the amount of data transferred.

Purpose and legal basis: Delivering the website, ensuring its stability and security, and detecting misuse. Our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Storage: Log data is kept only as long as needed for these purposes and is then deleted or anonymised, unless an incident requires us to keep it for longer.

In addition, once per visit your browser asks our server application (Cloudflare, see section 7) whether the contact form and the AI assistant are available. This technically transmits your IP address and browser information to Cloudflare. No content is sent and we do not store this request.

4. Contact form and email

When you use the contact form we process the topic you choose, your name, your work email address, optionally your company, your message and the language of the page. When you write to us by email we process your email address and the content of your message.

Purpose and legal basis: Answering your request and, where your request concerns a potential collaboration, taking steps before entering into a contract (Art. 6(1)(b) GDPR). Otherwise our legitimate interest in replying to messages addressed to us (Art. 6(1)(f) GDPR).

Processing: Form submissions are received and stored by our server application, which runs on Cloudflare (see section 7).

Storage: We delete your request once it has been fully dealt with and is no longer needed, unless statutory retention obligations apply (for example when the request leads to a contract).

Providing your data is voluntary, but we cannot answer without a contact address.

5. Bot protection (Cloudflare Turnstile)

To protect the contact form and the AI assistant against spam and automated abuse we use Cloudflare Turnstile, a service of Cloudflare, Inc. Turnstile is only loaded when you start using one of these functions, not when you merely browse the website. It checks technical characteristics of your request and browser (such as IP address, browser and device information) to tell people and bots apart. Turnstile does not use this information for advertising.

Legal basis: Our legitimate interest in protecting our services against misuse (Art. 6(1)(f) GDPR). Reading information from your device for this check is strictly necessary for the security of the service you are requesting.

6. AI assistant ("Ask Ontech") and use-case finder

The AI assistant answers questions about Ontech, and the use-case finder gives a first assessment of a product idea. What you type is sent to our server application and processed by an AI language model to generate the answer. The model runs on Cloudflare Workers AI (see section 7).

• We do not store your questions, the conversation or your product description. They are processed only to create the answer.
• Please do not enter personal data or confidential information.
• Answers are generated automatically and can be wrong. They are not binding offers or statements by Ontech.
• If you choose to send the result to us through the contact form, section 4 applies.

Legal basis: Providing the function you have actively requested (Art. 6(1)(b) GDPR) and our legitimate interest in offering an interactive information service (Art. 6(1)(f) GDPR). To prevent abuse, requests are rate-limited based on the IP address, which is processed only briefly for this purpose.

7. Service providers

We work with the following providers, which process personal data only on our instructions:

• Host Europe GmbH, Cologne, Germany: website hosting and server logs.
• Cloudflare, Inc., San Francisco, USA: server application for the contact form and the AI assistant, storage of form submissions, the AI model (Workers AI), rate limiting and bot protection (Turnstile). Cloudflare processes data in its worldwide network.

Other recipients receive personal data only where the law requires it or where you have consented.

8. Transfers outside the European Economic Area

Ontech Group is based in Singapore and Cloudflare is based in the USA, so personal data may be processed outside the European Economic Area. For transfers to the USA we rely on the EU-US Data Privacy Framework, under which Cloudflare, Inc. is certified, and on the European Commission's Standard Contractual Clauses. For other countries without an adequacy decision we use Standard Contractual Clauses or another safeguard recognised by law. You can request a copy of these safeguards using the contact details above.

9. Your rights

Under the GDPR you have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). Where we rely on consent, you can withdraw it at any time with effect for the future.

Right to object (Art. 21 GDPR): Where we process your data on the basis of our legitimate interests, you can object at any time on grounds relating to your particular situation. We will then stop processing unless there are compelling legitimate grounds or the processing serves legal claims.

To exercise your rights, write to info@ontechgroup.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work. In Spain this is the Agencia Española de Protección de Datos (www.aepd.es). Visitors outside the EU may have comparable rights under local law, for example under the Singapore Personal Data Protection Act.

10. Security

The website and all connections to our server application are encrypted (HTTPS/TLS). We use technical and organisational measures appropriate to the risk to protect personal data against loss, misuse and unauthorised access.

11. Automated decisions

We do not make decisions based solely on automated processing that produce legal effects for you or similarly significantly affect you (Art. 22 GDPR). The answers of the AI assistant are information only.

12. Links to other websites

Our website links to other websites, for example our LinkedIn page. These are plain links: no data is transferred until you click them. Once you leave our website, the privacy policy of the other provider applies.

13. Children

This website is aimed at businesses. We do not knowingly collect personal data from children.

14. Changes

We update this privacy policy when the website or the law changes. The current version is always available on this page.