Privacy Policy
Draft — please have a qualified German/EU data-protection professional review before publication
1. Controller
Oliver Markus Müller, trading as “Canada EU Entry” / “OneTitel”, Am Bruchborn 6, 54570 Kirchweiler, Germany. Contact for data-protection matters: euentry@onetitel.de.
2. What data we process
- Contact-form submissions (name, company, email, message content)
- Basic website analytics, where and if enabled with appropriate consent
- Technical log data generated by normal website operation
3. Purpose and legal basis
We process contact-form data to respond to your inquiry and, where relevant, to take steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR), or based on our legitimate interest in handling business inquiries efficiently (Art. 6(1)(f) GDPR). Technical log data generated by normal website operation (e.g., for security and stability) is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR). [Placeholder: confirm final legal-basis wording with a qualified professional once the hosting/analytics setup is finalized.]
4. Cookies, tag management and consent
This website uses Google Tag Manager (GTM), a tag-management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GTM itself is a container technology that loads other tags/scripts (such as analytics or marketing pixels) and does not, by itself, set cookies or process personal data beyond technical information required to load those tags.
[Placeholder: this site does not yet activate any analytics, advertising or marketing tags inside GTM. Before any such tag is enabled, a consent-management platform (cookie banner) must be implemented so that non-essential tags only fire after explicit, informed consent (Art. 6(1)(a) GDPR / Section 25 TTDSG), and this policy must be updated to name every specific tag added, its provider, purpose, data processed, retention period and opt-out mechanism.]
5. Data sharing
Personal data submitted via the contact form is only shared with service providers necessary to operate this website and respond to inquiries, such as our hosting provider (Vercel Inc.) and email service. [Placeholder: confirm and name the final hosting and email providers, and put data-processing agreements in place where required, before launch.]
6. International transfers
The controller is based in Germany and primarily serves Canadian companies. Where an inquiry or engagement involves transferring personal data to Canada or another country outside the EU/EEA, this is done based on the European Commission’s adequacy decision for Canada (where applicable to the recipient) or, where no adequacy decision applies, on appropriate safeguards such as the EU Standard Contractual Clauses. Some service providers (e.g., hosting infrastructure) may process data on servers located outside the EU/EEA; in such cases, appropriate safeguards under Art. 44 et seq. GDPR are used. [Placeholder: confirm final provider list and applicable safeguards with a qualified professional.]
7. Retention
Contact-form and inquiry data is retained only for as long as necessary to process the inquiry and any resulting business relationship, and is deleted or anonymized once it is no longer needed, subject to any statutory retention obligations (e.g., German commercial and tax law retention periods for business correspondence). [Placeholder: confirm exact retention periods with a qualified professional.]
8. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability and to lodge a complaint with a supervisory authority. Based in Kirchweiler, Rhineland-Palatinate, the competent supervisory authority is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP).