Privacy Policy of optiMEAS GmbH
for this website · in accordance with Article 13 of the GDPR
Operated via WordPress and HubSpot CMS
We are delighted that you have visited our website. The protection of your personal data is important to us. Below, we explain what data we process when you visit this website and for what purposes. Processing outside the website – for example, in the context of our business relationship – is described in our general privacy policy.
1. Data controller and data protection officer
The data controller within the meaning of the GDPR is:
optiMEAS GmbH, Am Houiller Platz 4b, D-61381 Friedrichsdorf
Telephone: +49 (0) 6172-997712-0 · Email: info@optimeas.de · www.optimeas.de
Data Protection Officer: Dr Jens-Achim Kessel · Email: datenschutz@optimeas.de
Contact for data protection enquiries: Burkhard Schranz · Email: datenschutz@optimeas.de
2. Website hosting and server log files
This website is operated on the CMS platform provided by HubSpot, Inc. (USA) (HubSpot CMS). HubSpot processes the data collected via the website as a data processor on our behalf; we have entered into a data processing agreement with HubSpot in accordance with Article 28 of the GDPR. For information on data transfers to the USA, see Section 9.
When you visit the website, your browser automatically sends information to the server, which is temporarily stored in log files:
- IP address of the requesting device (truncated/anonymised where technically possible),
- Date and time of access, name and URL of the file accessed,
- Referrer URL, browser and operating system used, and the name of the internet service provider.
Purposes: To ensure a smooth connection and a user-friendly experience, to assess system security and stability, and for administrative purposes.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in the secure and stable operation of the website).
Retention period: Log data is stored only for the purposes stated and for a short, reasonable period, after which it is deleted.
3. Cookies and consent management
This website uses cookies and similar technologies. Cookies are small files that are stored on your device. We distinguish between technically necessary cookies and non-essential cookies.
Technically necessary cookies: These are necessary for the operation of the website (e.g. session management, security, storing your cookie preferences). Legal basis: Section 25(2) of the TDDDG and Article 6(1)(f) of the GDPR; consent is not required for this.
Non-essential cookies: Cookies used for analytics, audience measurement or marketing are only set with your consent. Legal basis: Section 25(1) of the TDDDG in conjunction with Article 6(1)(a) of the GDPR.
On your first visit, you can use our consent banner (consent tool) to select which categories you wish to allow. You can change or withdraw your selection at any time via the cookie settings, with effect for the future. Most browsers also allow you to manage or delete cookies in general.
4. Web analytics and tracking via HubSpot
Provided you have given your consent, we use the analytics and tracking functions integrated into HubSpot to analyse the use of our website and improve our services. Cookies may be used for this purpose (e.g. to recognise returning visitors and to track page views). In particular, we process usage, device and access data; when you use our forms, website activity may be linked to the contact details you have provided.
Legal basis: Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG (consent). You may withdraw your consent at any time with effect for the future.
Retention period: Until consent is withdrawn or until the respective cookie expires.
5. Contact and other forms
If you contact us via a form on this website (e.g. a contact, enquiry or demo form), we will process the data you provide in order to deal with your enquiry. The forms are hosted via HubSpot; the information you enter is stored in our HubSpot CRM.
Data categories: In particular, your name, work contact details, company and the content of your enquiry.
Legal basis: Article 6(1)(b) of the GDPR, provided that the enquiry serves to initiate or fulfil a contract, otherwise Article 6(1)(f) of the GDPR (legitimate interest in processing enquiries) or Article 6(1)(a) of the GDPR (consent).
Retention period: Until your enquiry has been fully dealt with; and, in addition, for as long as statutory retention periods apply.
6. Newsletter
If you subscribe to our newsletter, we will process the data you provide in order to send you information about our products and services. Registration is carried out using the double opt-in procedure; we use HubSpot to send out the newsletter.
Legal basis: Article 6(1)(a) of the GDPR (consent). You may unsubscribe from the newsletter at any time and withdraw your consent with effect for the future, for example via the unsubscribe link included in every email.
Retention period: Until consent is withdrawn; we log the registration process for record-keeping purposes.
7. Embedded third-party content and services
We incorporate third-party content and services into this website – for example, in articles and for the display of maps and fonts. In doing so, your IP address may be transmitted to the relevant provider; in some cases, cookies are set. Where these services are not technically necessary, we will only integrate them once we have obtained your consent (Section 25(1) of the German Telemedia Act (TDDDG) in conjunction with Article 6(1)(a) of the General Data Protection Regulation (GDPR)), which you may withdraw at any time via the consent tool with future effect. In addition, the privacy policies of the respective providers apply.
7.1 Google Fonts
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA).
Function/Purpose: Consistent display of fonts; the font files are loaded from a Google server when the page is accessed.
Data: In particular, IP addresses and technical browser and device information.
Legal basis: Consent (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG).
Third country / Data protection: USA (see section 9). Privacy policy: https://policies.google.com/privacy.
7.2 Google Maps
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA).
Function/Purpose: Display of interactive maps, e.g. for directions.
Data: In particular, IP addresses, as well as usage and location data relating to the use of the map.
Legal basis: Consent (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG).
Third country / Data protection: USA (see section 9). Privacy policy: https://policies.google.com/privacy.
7.3 LinkedIn
Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (Group: Microsoft).
Function/Purpose: Integration of LinkedIn content, posts and features.
Data: In particular, IP addresses and usage data; for members who are logged in, the visit can be linked to their LinkedIn account.
Legal basis: Consent (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG).
Third country / Data protection: USA (see section 9). Privacy policy: https://www.linkedin.com/legal/privacy-policy.
7.4 Facebook
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA).
Function/Purpose: Integration of Facebook content, posts and features.
Data: In particular, IP addresses and usage data; for users who are logged in, the visit can be linked to their Facebook account.
Legal basis: Consent (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG).
Third country / Data protection: USA (see section 9). Privacy policy: https://www.facebook.com/privacy/policy.
7.5 Instagram
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA).
Function/Purpose: Integration of Instagram content, posts and features.
Data: In particular, IP addresses and usage data; for users who are logged in, the visit can be linked to their Instagram account.
Legal basis: Consent (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG).
Third country / Data protection: USA (see section 9). Privacy policy: https://privacycenter.instagram.com/policy.
Any other services integrated on a case-by-case basis – for example, in individual posts – are listed in our consent tool, along with the provider and purpose, and are only loaded once consent has been given.
8. Links and external content
This website contains hyperlinks to external websites, such as our social media profiles and the websites of customers and resellers. Simply visiting our website does not result in any personal data being transferred to the linked providers via such hyperlinks; only when you actively click on a link will you be redirected to the relevant provider, whose privacy policy will then apply. The respective operators are responsible for the content of linked external sites.
9. Transfer to third countries
In connection with the operation of this website via HubSpot and the services referred to in Section 7 (in particular Google, LinkedIn and Meta), personal data may be transferred to the USA. Where the relevant provider is certified under the EU-US Data Privacy Framework, the transfer takes place on that basis; or, in addition or otherwise, on the basis of the EU Standard Contractual Clauses together with appropriate supplementary measures. In the case of transfers requiring consent, we also rely on your consent (Article 49(1)(a) of the GDPR).
10. Retention period and deletion
We process personal data only for as long as is necessary for the respective purposes or for as long as consent has been given. The data is then deleted, provided that there are no statutory retention obligations to the contrary or the data is required to establish, exercise or defend legal claims.
11. Your rights as a data subject
Subject to the statutory requirements, you have the right to access (Art. 15), rectification (Art. 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to withdraw any consent given with effect for the future (Article 7(3) of the GDPR).
Right to object (Article 21 of the GDPR): Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. You may object at any time to processing for the purposes of direct marketing without having to state your reasons.
Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with a supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), PO Box 3163, 65021 Wiesbaden (street address: Wilhelmstraße 7, 65185 Wiesbaden), telephone +49 611 1408-0, poststelle@datenschutz.hessen.de, www.datenschutz.hessen.de. You may also contact the supervisory authority in your place of residence.
To exercise your rights, simply contact us using the contact details set out in Section 1.
12. Data security
When you visit our website, we use TLS (SSL) encryption in conjunction with the highest level of encryption supported by your browser. In addition, we implement appropriate technical and organisational measures to protect your data against loss, destruction, manipulation and unauthorised access; these are continuously updated to reflect the latest state of the art.
13. Validity and amendments to this statement
This privacy policy is current as of the date stated below. We will update it if there are any changes to the way data is processed on this website or to the legal framework.
As at: June 2026 · Version 2026.2