Information under Art. 13 GDPR

Privacy policy.

This policy explains which personal data is processed when you visit this website, for which purposes and on which legal basis. It applies to easylocal.de and its subpages.

Last updated: June 2026

This English version is provided for convenience. In the event of any discrepancy, the German version prevails.

Note: the third-party services described below (in particular Google, Microsoft and analytics tools) are only activated on this website after your explicit consent via our consent management. Before consent is given, no data is transmitted to these providers. You can withdraw your consent at any time via the footer link "Cookie settings" .

1. Controller & data protection officer

Controller within the meaning of the GDPR

OMlocal! GmbH
Falkstraße 73–77
47058 Duisburg
Germany
Phone: +49 203 6001610
Email: info@omlocal.de

Authorised managing directors: Thorsten Loth, Christoph Ehrke.

External data protection officer

DataCo GmbH
Nymphenburger Str. 86
80636 München
Germany
Phone: +49 89 7400 45840
Web: www.dataguard.de

Please send data protection enquiries to the OMlocal! GmbH email address above or directly to the data protection officer.

2. Legal bases for processing

Where we obtain consent from the data subject for processing personal data, Art. 6 Abs. 1 lit. a DSGVO serves as the legal basis.

Where processing personal data is necessary to perform a contract to which the data subject is a party, Art. 6 Abs. 1 lit. b DSGVO serves as the legal basis. This also applies to pre-contractual measures.

Where processing is necessary to comply with a legal obligation to which our company is subject, Art. 6 Abs. 1 lit. c DSGVO serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6 Abs. 1 lit. f DSGVO serves as the legal basis.

For storing or reading information on the user's device (e.g. cookies), § 25 TDDDG additionally applies.

3. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

Access (Art. 15 GDPR) — to the data processed about you.
Rectification (Art. 16 GDPR) — of inaccurate or incomplete data.
Erasure (Art. 17 GDPR) — unless a statutory retention obligation applies.
Restriction of processing (Art. 18 GDPR).
Data portability (Art. 20 GDPR) — in a structured, commonly used, machine-readable format.
Objection (Art. 21 GDPR) — to processing based on a legitimate interest.
Withdrawal of consent (Art. 7 (3) GDPR) — with effect for the future.

To exercise your rights, an informal message to info@omlocal.de.

4. Withdrawal of consent & objection

You can withdraw consent you have given (e.g. for cookies or tracking) at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected. The easiest way to withdraw is the footer link "Cookie settings", where you can change your choice at any time.

You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR (legitimate interests).

5. Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority at any time (Art. 77 GDPR). The authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Web: www.ldi.nrw.de

An overview of all German supervisory authorities is available at bfdi.bund.de.

6. Retention & erasure

Personal data is stored only as long as necessary to achieve the respective processing purpose or as required by statutory retention obligations (in particular commercial and tax law obligations under §§ 147 AO, 257 HGB — generally 6 or 10 years). Once the purpose ceases to apply or the period expires, the data is erased routinely and in accordance with statutory provisions.

7. Hosting

This website is provided via the infrastructure of Vercel Inc. . Vercel acts for us as a processor within the meaning of Art. 28 GDPR; a corresponding data processing agreement has been concluded.

Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Privacy: vercel.com/legal/privacy-policy
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing this website stably, quickly and securely)

In providing the service, Vercel processes technically necessary connection data (see server log files). Transfer to the USA is based on the European Commission adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) and, additionally, on standard contractual clauses under Art. 46 (2) (c) GDPR. Content and customer data of the easylocal application itself is held separately on servers in Germany.

8. Server log files

When you access this website, the hosting provider automatically records information and stores it in what are known as server log files. These are:

IP address of the requesting device
Date and time of the request
URL accessed and HTTP status code
Referrer URL (previously visited page)
Browser and operating system used (user agent)
Volume of data transferred

Purpose: Ensuring a smooth connection, convenient use, evaluating system security and stability, defending against attacks
Legal basis: Art. 6 Abs. 1 lit. f DSGVO
Retention period: 7 days; no merging with other personal data takes place

9. Cookies & local storage

We use cookies and similar technologies (e.g. local storage) on our website. Cookies are small text files stored in your browser. We distinguish between:

Technically necessary cookies / storage entries

These are essential for operating the website — for example storing your cookie choice in local storage under the key easylocal.cookieConsent. Without this you would have to decide again on every page view.

Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary) in conjunction with Art. 6 (1) (f) GDPR
Retention period: Persistent until manually deleted by the user

Non-essential cookies (analytics, marketing, convenience)

These are only set if you have expressly consented beforehand via our consent management. Among other things they enable reach measurement, campaign performance tracking and interest-based advertising.

Legal basis: § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR (consent)
Retention period: Depends on the service — the specific retention period is listed with each service below

You can restrict or prevent cookies from being set in your browser. Instructions are available in your browser help.

11. Contacting us by email, phone or form

When you contact us through the channels provided, your personal data (typically: name, company, email address, possibly phone number and the content of your enquiry) is stored to handle the enquiry and in case of follow-up questions.

Purpose: Answering the enquiry, initiating or performing a contract
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures / contract) or Art. 6 (1) (f) GDPR (handling other enquiries)
Retention period: Until your enquiry has been fully dealt with; statutory retention periods (in particular § 147 AO, § 257 HGB) remain unaffected

If you use a contact or demo request form, the mandatory fields required for processing (e.g. email) are also recorded. No disclosure to third parties takes place.

13. Google Fonts

For consistent and fast display of typefaces we embed the fonts Manrope, Lora and JetBrains Mono via the service Google Fonts . When the website is loaded, the required font files are retrieved from a Google server; your IP address is transmitted to Google in the process.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (Mutterkonzern: Google LLC, USA)
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in consistent and fast font rendering)
Privacy: policies.google.com/privacy

Transfer to the USA cannot be ruled out; it is based on the EU-US Data Privacy Framework (adequacy decision) and supplementary standard contractual clauses.

14. Font Awesome

To display individual icons we use the icon library Font Awesome . When the page is loaded, icon and font files are retrieved from the provider; your IP address is transmitted in the process.

Provider: Fonticons, Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in consistent presentation)
Privacy: fontawesome.com/privacy

15. Google Analytics 4

With your consent, this website uses the web analytics service Google Analytics 4 (GA4). GA4 uses event-based measurement and cookies that allow analysis of your use of the website (e.g. page views, scroll depth, clicks, time on page). By default, IP addresses are truncated within the EU before being transferred to Google servers ("IP anonymisation").

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Purpose: Reach analysis, optimising our offering and user journeys
Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG
Retention period: Maximum 2 months, then automatic erasure
Privacy / opt-out: policies.google.com/privacy · Browser add-on to opt out

16. Google Ads / conversion tracking

We use Google Ads to draw attention to our offering. The conversion tracking cookie lets us see whether users perform certain actions on our website after clicking a Google ad (e.g. submitting a demo request).

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG
Cookie retention: Up to 90 days
Privacy: policies.google.com/privacy

17. Google Ads remarketing

Within Google Ads we use the "remarketing" function to reach users who have already visited our website again on other websites in the Google advertising network. A cookie is set for this, enabling pseudonymous recognition.

Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG
Retention period: Maximum 18 months
Opt-out: adssettings.google.de

18. Google Marketing Platform

We use the Google Marketing Platform (formerly DoubleClick) to serve relevant ads, optimise campaigns and obtain reports on advertising effectiveness. Pseudonymous cookies or advertising IDs are set in the process.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG
Retention period: Maximum 18 months

19. Google Maps

To display geographic content (e.g. addresses or directions) we may embed maps from Google Maps . When you open a page with Google Maps embedded, data is transmitted to Google — including your IP address and possibly location data from your device.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG
Privacy: policies.google.com/privacy

20. Google reCAPTCHA

To protect forms against bots and spam we may use the service reCAPTCHA from Google. reCAPTCHA analyses various information (IP address, mouse movements, time on page and more) to distinguish real users from automated requests.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in preventing misuse) or (a) where consent is given
Privacy: policies.google.com/privacy · google.com/recaptcha

21. Google Tag Manager

We use Google Tag Managerto manage scripts (tags) centrally on our website. The Tag Manager itself is a cookie-free domain, but it triggers other tags which may collect data. If you have opted out at domain or cookie level, that opt-out remains effective for all tracking tags implemented via Google Tag Manager.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG

22. Microsoft Advertising (Bing Ads)

With your consent, this website uses conversion tracking from Microsoft Advertising (Bing Ads). Microsoft Advertising sets a cookie on your device when you reach our website via a Microsoft ad.

Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
represented by: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG
Cookie retention: Up to 180 days
Opt-out: account.microsoft.com/privacy/ad-settings

23. Microsoft Bookings

For appointment booking (e.g. demo slots) the service Microsoft Bookings may be used. When booking you transmit your name, email address, preferred date and time and any other details you provide to Microsoft.

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Legal basis: Art. 6 (1) (b) GDPR (initiating a contract) or Art. 6 (1) (f) GDPR (efficient appointment management)
Retention period: Until the appointment is completed plus a reasonable grace period; statutory retention periods remain unaffected
Privacy: privacy.microsoft.com

24. Transfers to third countries

Some of the services named above (in particular Google and Microsoft products as well as Vercel) are operated by companies based, or with a parent company, in the USA. A transfer of your data to the USA or other third countries can therefore not be ruled out.

Where a transfer to third countries takes place, we base it — in the absence of an adequacy decision — on the following safeguards:

EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) for certified US companies.
Standard contractual clauses under Art. 46 (2) (c) GDPR as a supplementary safeguard.
Where necessary: additional technical and organisational measures (encryption, pseudonymisation).

We will provide a copy of the standard contractual clauses on request by email to info@omlocal.de .

25. Data security

We use technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. These include in particular encrypted transmission (TLS/SSL) between your browser and our server, access restrictions at employee level and regular review of our security measures.

26. Validity and changes to this privacy policy

This privacy policy is currently valid and dated as shown above. As our website and offering develop, as legal or regulatory requirements change or as new technical requirements arise, it may become necessary to amend this privacy policy. You can access and print the current version on this page at any time.