Privacy policy
How we process personal data under the GDPR and UK GDPR.
1. Controller
iTechLounge GmbH, Musterstraße 1, 10115 Berlin, Germany and iTechLounge Ltd (UK), hallo@omniqora.com. Data protection officer: dsb@omniqora.com.
2. Purposes and legal bases
Providing the platform, performing the contract and support: Art. 6(1)(b) GDPR. Operations, security, abuse detection and logging: Art. 6(1)(f) GDPR. Marketing messages only with explicit consent: Art. 6(1)(a) GDPR, revocable at any time.
3. Categories of data
Account data (name, email, role), communication data from customer conversations on the channels you use (identifier, content, timestamps, delivery status), case and workflow data, log and audit data, technical metadata.
4. Processing on behalf of customers
For business customers OmniQora acts as processor under Art. 28 GDPR; the customer remains controller for conversation content. A DPA including the sub-processor list is provided.
5. Recipients and international transfers
The operators of the channels you use are involved in delivering messages. Transfers to third countries rely on Standard Contractual Clauses and appropriate safeguards. Hosting and database run across multiple data centres.
6. Sensitive data
Health, financial and other special-category data is never collected through chat attachments. Secure portal links are used instead. Professionals bound by secrecy (§ 203 StGB) are onboarded with contractual and technical safeguards.
7. Retention
Conversation and case data is retained for the duration of the business relationship and afterwards per statutory retention periods (§ 147 AO, § 257 HGB). Per-tenant configurable deletion, default 24 months for chat content.
8. Cookies and local storage
Strictly necessary cookies and local storage entries (session, language choice) under § 25(2) TTDSG. Optional cookies only after your consent. No tracking without consent.
9. Your rights
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21) and the right to lodge a complaint with a supervisory authority (Art. 77). Requests to dsb@omniqora.com.
10. Security
Encryption in transit and at rest, strict tenant isolation, role-based permissions, tamper-evident audit logs and signature verification of inbound events.
Note: template — have counsel review before going live.