Privacy notice.

1. Who is responsible

Onega is a working name; the company is not yet registered. Until incorporation, the controller for this website and for correspondence with Onega is:

Onega
Heinrich-Brauns-Straße
Essen
Germany
Email: contact@onega.dev

No data protection officer has been appointed. Write to the address above about any privacy matter.

2. Visiting this website

This is a static website. It sets no cookies, runs no analytics or tracking, embeds no third-party content, and loads no third-party fonts or scripts. It has no forms.

If you choose a language in the header, the site remembers that choice in your browser’s local storage (the entry onega-lang), so pages open in your language until you choose another. The entry never leaves your device and is not a cookie. Storing it is strictly necessary for the function you asked for (§ 25(2) no. 2 TDDDG); you can delete it at any time by clearing this site’s data in your browser.

To deliver any web page, your browser sends technical data to the server: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. Our hosting provider, Cloudflare, processes these data to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in a secure, working website. We do not use these data to identify you and do not combine them with other data. We keep no access logs of our own; Cloudflare keeps security logs for a limited period under its own policies.

Recipient: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, acting as our processor under Cloudflare’s data processing addendum. Data may be processed in the United States. Cloudflare, Inc. is certified under the EU–U.S. Data Privacy Framework, so transfers rely on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR), with standard contractual clauses in the addendum as a further safeguard.

3. Emailing us

The email links on this site open your own email client. When you write to us we process your email address, your name, the content of your message and any attachments, in order to answer you and, where relevant, to prepare or perform a contract. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or steps before one, and otherwise Art. 6(1)(f) GDPR: our legitimate interest in answering enquiries.

Recipient: our mailboxes are hosted in Microsoft 365 (Exchange Online) by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, acting as our processor. Microsoft may process data in the United States; Microsoft Corporation is certified under the EU–U.S. Data Privacy Framework, so transfers rely on the same adequacy decision, with standard contractual clauses in Microsoft’s data protection addendum.

We delete correspondence once it is no longer needed for its purpose, unless German commercial or tax law requires us to keep it longer (up to ten years).

4. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we rely on Art. 6(1)(f), you may object to the processing on grounds relating to your particular situation (Art. 21). Write to contact@onega.dev.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state where you live or work. The authority competent for Onega is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Düsseldorf: www.ldi.nrw.de.

5. Other information

You are not obliged to give us personal data; without an email address we cannot reply. We do not use automated decision-making or profiling. OneVeer, OneDesk and OneMail run in the customer’s own environment; data processed in a customer engagement is governed by the data-processing agreement for that engagement, not by this notice.

Last updated 28 September 2026.