Home

Privacy policy

1. General information
ONEDOT GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.


2. Responsible body
The responsible body for processing on its own behalf within the meaning of data protection law is:

ONEDOT GmbH
Reinstr. 8
64720 Michelstadt
Phone: 06061 630 980 0
E-mail: office@one-dot.de
Entry in the commercial register
Register number: HRB 98217
Register court: Amtsgericht Darmstadt


3. Data protection officer

Waldemar Boger
Reinstr. 8
64720 Michelstadt
Phone: 060616309800
E-mail: hello@one-dot.de


4. Hosting
We host the content of our website with the following provider:

ONEDOT GmbH
Reinstr. 8
64720 Michelstadt


5. Server log files
We automatically collect and store information in so-called server log files, which your browser automatically transmits to us.

This includes:

  • Browser type and browser version

  • IP address

  • Operating system used

  • Referrer URL

  • Host name of the accessing computer

  • Time of the server request


This data is not merged with other data sources. The basis for data processing is Art. 6 (1) lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Storage period: 6 days
Recipient of the data: ONEDOT GmbH

Right to object:
You have the right to object. You can send or communicate your objection to us at any time (e.g. by email to hello@one-dot.de).

6. Consent Management Tool
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents. Borlabs Cookie does not process any personal data.
The borlabs-cookie stores the consents you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.


7. Cookies
Our website uses cookies. For more information, please visit:
Cookie settings


8. Google Tag Manager
This website uses Google Tag Manager technology from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This tool allows website tags to be managed via an interface. Tags are individual code elements that are added to the source code of our website by Google Tag Manager and are used, among other things, to measure traffic and visitor behaviour or to extend the functions of our website. Google Tag Manager only implements tags and does not set any cookies itself and therefore does not collect any personal data. However, the tool triggers other tags that may collect data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. For more information about Google Tag Manager, please visit Google Tag Manager Terms of Service and Privacy Policy & Terms of Use.


9. Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and enable an analysis of your use of the website. On our website, the Google Analytics service is used exclusively in pseudonymised form. Your IP address is only recorded in truncated form and thus anonymised. The following data is collected and processed with the help of Google Analytics:

  • IP address (anonymised)

  • Usage data

  • Click path

  • App updates

  • Browser information

  • Device information

  • JavaScript support

  • Pages visited

  • Referrer URL

  • Downloads

  • Flash version

  • Location information

  • Purchase activity

  • Widget interactions

  • Date and time of visit


The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. If you do not want Google Analytics to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.
Personal data will be stored for as long as it is necessary to fulfil the purpose of processing. The data will be deleted as soon as it is no longer required to fulfil the purpose.
In addition to Google Ireland Limited, the data may be transferred to the following recipients as part of the processing:

  • Google LLC.

  • Alphabet Inc.


As part of the processing by Google Analytics, data may be transferred to the USA. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent will be obtained in advance in accordance with Art. 49 (1) (a) GDPR as part of the Borlabs consent management system.


10. Google Audiences / Remarketing
We use the ‘Google Audiences/Remarketing’ service on this website. This service is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The purpose of this service is to display interest-based advertisements to users. This requires an analysis of website usage, which is carried out using cookies. The cookies store anonymised or pseudonymised data relating to the use of the website. If you visit other websites that also use these services, you will be presented with advertisements that correspond to your previous interests. The following data is collected and processed:

  • Pages visited

  • IP address

  • Duration of visit

  • Other information about website usage

  • Content in which the user is interested


The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. If you do not want Google Audiences/Google Remarketing to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.
Personal data will be stored for as long as it is necessary to fulfil the purpose of processing. The data will be deleted as soon as it is no longer required to fulfil the purpose.
In addition to Google Ireland Limited, the data may be transferred to the following recipients as part of the processing:

  • Google LLC.

  • Alphabet Inc.


As part of the processing by Google Analytics, data may be transferred to the USA. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent will be obtained in advance in accordance with Art. 49 (1) (a) GDPR as part of the Borlabs consent management system.


11. Google Ads and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising programme from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’). We use conversion tracking as part of Google AdWords. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. The storage of ‘conversion cookies’ is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. For more information about Google AdWords and Google Conversion Tracking, please see Google's privacy policy: https://www.google.de/policies/privacy/. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be restricted.

As part of processing by Google Audiences/Remarketing, data may be transferred to the USA. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent will be obtained in advance in accordance with Art. 49 (1) (a) GDPR as part of the Borlabs consent management system.

12. Microsoft Ads
We use the Microsoft Advertising service from Microsoft Ireland Operations Limited (Ireland/EU) (formerly Bing Ads) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us deliver targeted advertisements via the Microsoft Bing search engine. Microsoft Advertising uses cookies for this purpose. Personal data is processed in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about device and browser settings.

Microsoft Advertising is used for the purpose of optimising the placement of advertisements. Further information on these processing activities, the technologies used, the data stored and the storage period can be found in the settings of our consent management tool. Processing only takes place with your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent via our consent management tool.

With Microsoft services, the transfer of data to Microsoft Corp. in the USA cannot be ruled out. Please note the information in the section ‘Data transfer to third countries’. Further information on data protection at Microsoft can be found in Microsoft's privacy policy at Microsoft Privacy Policy.


13. Hubspot
We use the HubSpot service for various purposes on this website. HubSpot is a software company based in the United States with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, telephone: +353 1 5187500.
Hubspot is an integrated software solution that we use to cover various aspects of our online marketing. These include:
Email marketing, social media publishing & reporting, reporting, contact management (e.g. user segmentation & CRM), landing pages and contact forms.
This information and the content of our website are stored on servers belonging to our software partner HubSpot. We may use this information to contact visitors to our website and to determine which of our company's services are of interest to them. All information collected by us is subject to this privacy policy. We use all information collected solely for the purpose of optimising our marketing activities.
More information about HubSpot's privacy policy
More information from HubSpot regarding EU data protection regulations
More information about the cookies used by HubSpot.
As part of the optimisation of our marketing measures, the following data may be collected and processed via Hubspot:

  • Geographical location

  • Browser type

  • Navigation information

  • Referrer URL

  • Performance data

  • Information about how often the application is used

  • Mobile app data

  • Login information for the HubSpot subscription service

  • Files viewed on site

  • Domain name

  • Pages viewed

  • Aggregate usage

  • Operating system version

  • Internet service provider

  • IP address

  • Device identifier

  • Duration of visit

  • Where the application was downloaded from

  • Operating system

  • Events that occur within the application

  • Access times

  • Clickstream data

  • Device model and version


In addition, we also use Hubspot to provide contact forms. Further information on this can be found in section 12 of this privacy policy.

The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.
Personal data will be stored for as long as it is necessary to fulfil the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose.
In the context of processing via HubSpot, data may be transferred to the United States. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent pursuant to Art. 49 (1) (a) GDPR may serve as the legal basis for the transfer to third countries. Please refer to sub-section ‘16. Forms’ for more information.


14. Pandadoc
If we send you an offer or contract in response to your enquiry, your data will be automatically forwarded from Hubspot to Pandadoc. We use Pandadoc for the electronic signature of these documents. This enables the creation of the offer itself. Pixel tags are used in the offers to store the date of dispatch and opening of the offer. By giving your consent, you also agree to the use of the aforementioned services. If you wish to object to the use of your data, simply send us a short message by email or post at any time.
The transfer of your data to Pandadoc is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). For this purpose, we have concluded a contract with Pandadoc containing standard contractual clauses, in which Pandadoc undertakes to process user data only in accordance with the EU level of data protection. You have the option of revoking your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
Further information on Pandadoc's privacy policy can be found here: Privacy Notice
Address: 153 Kearny St 94108, San Francisco, United States


15. Fastbill
We process data in the context of administrative tasks and the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The basis for processing is Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in processing lies in administration, financial accounting, office organisation and data archiving, i.e. tasks that serve to maintain our business activities, perform our duties and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information specified for these processing activities. In this context, we disclose or transfer data to the tax authorities, consultants, such as tax advisors or auditors, as well as other fee collection agencies and payment service providers. Furthermore, based on our business interests, we store information about suppliers, event organisers and other business partners, e.g. for the purpose of contacting them at a later date. We generally store this data, most of which is company-related, on a permanent basis. We use the ‘fastbill’ billing system provided by FastBill GmbH, Wildunger Str. 6, 60487 Frankfurt am Main. Its use is based on our legitimate interests within the meaning of Art. 6 (1) lit. f) GDPR and a data processing agreement in accordance with Art. 28 (3) sentence 1 GDPR. Further information on data protection.


16. Forms
We use the HubSpot service to provide the following online forms. To do this, we forward your data to HubSpot, which processes the data exclusively on our behalf. See the privacy policy for ‘HubSpot’.
Please note: If you contact us via contact forms, personal data may be transferred to service providers in third countries. These third countries do not have an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes without you having any legal recourse. The security of the transfer is regularly ensured by means of standard contractual clauses and, in the case of Zendesk, binding corporate rules, which guarantee that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses or binding corporate rules are not sufficient to establish an adequate level of security, your acknowledgement of the privacy policy in the contact forms shall be deemed consent within the meaning of Art. 49 (1) (a) GDPR, which justifies data transfer to unsafe third countries.
We use Hubspot to sort and coordinate your enquiries originating from our website and partner sites. The following personal data is stored in Hubspot:

  • Your IP address

  • Surname

  • First name

  • Address

  • Email address

  • Telephone number

  • Website/webshop URL

  • Company name

  • Number of employees

  • Job title

  • Main purpose of the enquiry



17. Chat
We use chat forms on our website from the Hubspot service, which is operated by HubSpot Inc. (USA). If you send us enquiries via the chat form, your details from the form will be stored by Hubspot for the purpose of processing the enquiry and in case of follow-up questions. Hubspot processes the data exclusively on our behalf. We process your data on the basis of our legitimate interest in contacting enquirers and responding to your chat enquiry. The legal basis for data processing is Art. 6(1)(f) GDPR.

When using Hubspot services, personal data may be transferred to the United States. Please note the information in the section ‘Data transfer to third countries’. Further information on data protection at Hubspot can be found at: Guide to GDPR-compliant use of HubSpot


18. Contact by telephone
If you contact us by telephone and provide us with personal data such as your name and telephone number or further information about yourself or your request, we will process this data in order to respond to your enquiry within the framework of the pre-contractual or contractual relationship between us.

Data concerned:

  • Inventory data (e.g. names, addresses)

  • Contact details (e.g. email address, telephone number, postal address)

  • Contract data (e.g. subject matter of the contract, contract duration)

  • Persons concerned: Tenants, interested parties, customers, business and contractual partners


Purpose of processing: Communication and responding to contact enquiries, office and organisational procedures
Legal basis: Contract fulfilment and pre-contractual enquiries, Art. 6(1)(b) GDPR, legitimate interest, Art. 6(1)(f) GDPR

Information about the telephone provider we use:
sipgate GmbH
Service provider: sipgate GmbH, Gladbacher Straße 74, 40219 Düsseldorf
Website: https://www.sipgate.de
Privacy policy: Privacy policy


19. Newsletter
We offer the option of subscribing to our newsletter on our website. Once you have subscribed, you will receive regular updates on our latest offers. A valid email address is required to subscribe to the newsletter. To verify your email address, you will first receive a registration email which you must confirm via a link (double opt-in). When you subscribe to the newsletter on our website, we process personal data such as your email address and name on the basis of the consent you have given. The processing is based on the legal basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect, for example via the ‘unsubscribe’ link in the newsletter or by contacting us via the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation. When you register for the newsletter, we also store your IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis for this is our legal obligation to document your consent (Art. 6 para. 1 letter c in conjunction with Art. 7 para. 1 GDPR).

We also analyse the reading behaviour and opening rates of our newsletter. We evaluate the data generated when our emails are delivered and retrieved in aggregated and anonymised form (delivery rate, opening rate, click rates, unsubscribe rate, bounce rate, visits, completions) in order to measure the use and success of the emails. The legal basis for the analysis of our newsletter is Art. 6 para. 1 lit. f GDPR and the processing serves our legitimate interest in optimising our newsletter. You can object to this at any time by contacting one of the above-mentioned contact channels.

On the other hand, we also evaluate the data generated when you retrieve and use these emails (opening time, hyperlinks clicked, documents downloaded) as well as movement data on downstream websites in connection with your email address in order to send you individualised information in the future that best suits your interests and needs. We use the collected anonymous and personal data to provide you with personalised content and individualised information. The legal basis for this data processing is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect, for example via the ‘Unsubscribe’ link in the newsletter or by contacting us via the above-mentioned channels.

We use the Hubspot service from HubSpot Inc. (USA) to manage subscribers, send the newsletter and perform analyses. Your email address will therefore be transferred by us to HubSpot in the USA. Please note the information in the section ‘Data transfer to third countries’. Further information on data protection at Hubspot can be found at: Guide to GDPR-compliant use of HubSpot

20. Application
Our website also offers you the opportunity to apply for job vacancies and send us your application by email or post.

When you send us your application, we will process the information you provide us with as part of your application (e.g. your email address if you send us your application by email).

If you send us your application electronically, we will process your email address in order to process the application and to be able to contact the applicant to respond to their enquiry. If you send us your application by post, we will process the data you provide. The purpose of processing the personal data contained in the application documents you send us is to identify a suitable candidate.

The legal basis for processing your email address is Art. 6 (1) (f) GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to respond to your enquiries. The legal basis for processing the personal data resulting from the application is Art. 6 (1) lit. b), Art. 88 (1) GDPR, § 26 (1) BDSG-neu.

The application email and the documents sent will be kept until a decision for or against the applicant has been made and will then be deleted. If you have sent us your application documents by post, we will return your submitted application documents to you after completion of the application process.

If we base the processing of your data on our legitimate interest, you have the right to object:

Right to object

You have the right to object. You can send or communicate your objection to us at any time (e.g. by email to hello@one-dot.de).

The provision of personal data is necessary for the submission of an application. Failure to provide this data will result in us being unable to process and consider your application.


21. Facebook Custom Audiences and Facebook Pixel
This website uses the ‘Facebook Custom Audiences’ service. Facebook Pixel is used for this service. These services are operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland. Facebook Custom Audiences enables us to target users with interest-based advertising on the social network Facebook. To make this possible, we have implemented the Facebook remarketing tag on our website. This tag establishes a direct connection to the Facebook servers when you visit the website. Facebook thus receives information about the pages you have visited on our site. Facebook then compares this information with your Facebook user account. The next time you visit Facebook, you will be shown personalised, interest-based advertisements (Facebook ads). Custom Audiences is also used to personalise and optimise the website.
The following data is collected and processed with the help of Facebook Custom Audiences:

  • Facebook user ID

  • IP address

  • Browser information

  • Non-sensitive user-defined data

  • Facebook cookie information

  • Referrer URL

  • Pixel-specific data

  • Pixel ID

  • Social media friend network

  • Usage data/user behaviour

  • Views and interactions with content, ads and services

  • Viewed content

  • Device information

  • Success of marketing campaigns

  • Transaction information

  • Hardware/software type

  • Browser type

  • Device operating system

  • Geographical location

  • Cookie ID

  • Information from third-party sources

  • User agent

  • Conversions


The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. If you do not want Facebook Custom Audiences to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with future effect.

Personal data will be stored for as long as it is necessary to fulfil the purpose of processing. The data will be deleted as soon as it is no longer necessary for the purpose.

In addition to Facebook Ireland Limited, the data may be transferred to the following recipients in the course of processing:
Facebook Inc.

In the course of processing via YouTube, data may be transferred to the USA. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent will be obtained in advance in accordance with Art. 49 (1) (a) GDPR as part of the Borlabs consent management system.


22. LinkedIn
We use the retargeting tool and conversion tracking provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (‘LinkedIn’). For this purpose, the LinkedIn Insight Tag is integrated into our website, which enables LinkedIn to collect statistical data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. The service also serves to show you interest-specific and relevant offers and recommendations after you have informed yourself about certain services, information and offers on the website. The relevant information is stored in a cookie. Further information on data processing can be found in LinkedIn's privacy policy.

The following data is generally collected and processed:

  • IP address

  • Device information

  • Browser information

  • Referrer URL

  • Timestamp



23. Social networks & external links
In addition to this website, we also maintain a presence on various social media platforms, which you can access via the corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network.

We would like to point out that user data may also be transferred to a server in a third country and thus processed outside the European Union.

In addition to storing the data you specifically enter in this social media, it is possible that further information may also be processed by the social network provider.

In addition, the social network provider may process the most important data from the computer system from which you are visiting – for example, your IP address, the type of processor used and browser version, including plug-ins.

If you are logged in with your personal user account for the respective network while visiting such a website, this network can assign the visit to this account.

For the purpose and scope of data collection by the respective medium, as well as the further processing of your data there and your rights in this regard, please refer to the respective provisions of the respective controller, e.g. at:



We would also like to point out that our website contains further links to external third-party websites, over which we have no influence with regard to the processing of data.


24. Rights of data subjects
If ONEDOT GmbH, as the responsible body, processes personal data, you as the data subject have certain rights under Chapter III of the GDPR, depending on the legal basis and purpose of the processing, including, in particular, the right to information (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to withdraw your consent under Art. 7 III GDPR.

To assert your rights as a data subject in relation to the data processed for the operation of this website, please contact us using the contact details provided in section 2. Please note that to assert your rights as a data subject arising from the processing of data by us as a processor for our customers, you must contact the responsible body directly. We reserve the right not to respond to such requests or to forward them to the relevant company.


25. Data security
We use technical and organisational measures to secure our website and other systems against loss, destruction, access, modification or distribution of your data by unauthorised persons. Despite regular checks, however, complete protection against all risks is not possible.


26. Right to object
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. To do so, simply send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.


27. Final provisions
ONEDOT GmbH reserves the right to amend this privacy policy at any time to ensure that it always complies with current legal requirements or to implement changes to the services in the privacy policy, e.g. when introducing new services or making changes to the website. The new privacy policy will then apply when you visit this website again.