Privacy Policy

At a glance

This website is a purely informational, statically generated site. It does not use cookies, does not include analytics or tracking of any kind, does not embed third-party content, and does not offer forms through which you could enter personal data. All fonts, scripts, and images are served from this website's own domain. The only personal data processed in connection with this website is the technical data your browser transmits automatically when you visit, which is recorded in server log files, and any data you send us yourself if you contact us by email or phone. Our presences on external platforms such as GitHub, LinkedIn, and Matrix are covered in a separate section below.

Controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

Phone: +49 5331 939 42690
Email: m.perez@ostfalia.de

Impressum: opener-initiative.org/impressum/

Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. All data is processed in Hetzner's data centers in the European Union. Further information on data protection at Hetzner is available in Hetzner's privacy policy.

When you access this website, the web server automatically records technical information that your browser transmits with every request. This includes:

• the IP address of the requesting device,
• date and time of the request,
• the requested URL and the amount of data transferred,
• the HTTP status code of the response,
• the referrer URL (the page from which you followed a link),
• browser type and version, and the operating system used.

This data is processed to deliver the website to your device, to ensure the stability and security of the service, and to detect and investigate misuse or attacks. It is not merged with other data sources and is not used to identify individual visitors. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in providing this website securely and reliably.

Server log files are deleted after 14 days at the latest, unless a specific incident (such as an attack on the website) requires longer retention as evidence.

Hetzner processes this data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Security and encryption

We take appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect the data processed when you visit this website. In particular, this website is delivered exclusively over an encrypted connection using TLS/SSL technology (recognizable by "https://" and the lock symbol in your browser's address bar), which protects the data transmitted between your browser and our server against unauthorized access by third parties.

No cookies, no tracking, no analytics

This website does not set cookies, does not store or read any information on your device (§ 25 TDDDG), and does not use analytics, advertising, or tracking services. Fonts and all other resources are hosted on our own server; no connections to third-party servers are established when you view this site. For this reason, no consent banner is required or shown.

Contact by email or phone

If you contact us by email or phone, the data you provide (such as your name, email address, and the content of your message) is processed solely to handle your inquiry. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries) or, where your inquiry relates to entering into or performing a contract, Art. 6(1)(b) GDPR. We delete this data once your inquiry has been dealt with, unless statutory retention obligations require us to keep it longer. Please note that emails are generally encrypted in transit but not end-to-end; complete confidentiality of a message on its way to our mailbox can therefore not be guaranteed.

RSS feed

This website offers an RSS feed. When your feed reader retrieves the feed, the same technical data described under "Hosting and server log files" above is processed; no further data is collected.

Presences on external platforms

We maintain presences on external platforms to provide information about the Opener Initiative and to communicate with the community: a GitHub organization, a LinkedIn company page, and a Matrix room. When you visit or interact with these presences, the respective platform operator processes your data under its own privacy policy; this may include processing outside the European Union and, on commercial platforms, processing of usage data for market research and advertising purposes. We only receive the information that the platform makes available to us (such as public profiles, contributions, and messages addressed to us) and process it to run these community channels. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in communicating with the community and the public.

For our LinkedIn company page, we are joint controllers with LinkedIn Ireland Unlimited Company (Wilton Plaza, Dublin 2, Ireland) for the collection of visitor data used to compile the "Page Insights" statistics, on the basis of the Page Insights Joint Controller Addendum. Any further processing is the sole responsibility of LinkedIn; transfers to the USA are based on the EU–US Data Privacy Framework and standard contractual clauses. Details can be found in LinkedIn's privacy policy; LinkedIn also provides an opt-out from its advertising tracking.

Since only the platform operators have full access to the data processed on their platforms, data-subject requests are most effectively addressed directly to them; you can, however, always contact us as well.

Links to external websites

This website contains links to external websites operated by third parties, such as GitHub, LinkedIn, Matrix, ETSI, and the Federal Ministry of Research, Technology and Space (BMFTR). Apart from our own platform presences described above, this privacy policy applies only to this website. When you follow such a link, the privacy policy of the respective operator applies; we have no influence on their data processing. No data is transmitted to these third parties merely by visiting our website; a connection is only established when you actively click a link.

Your rights

Under the GDPR, you have the following rights with respect to personal data concerning you:

• the right of access (Art. 15 GDPR),
• the right to rectification (Art. 16 GDPR),
• the right to erasure (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to data portability (Art. 20 GDPR).

Under Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR. This applies in particular to the processing based on our legitimate interests described in this privacy policy.

To exercise these rights, please contact the controller using the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany

Website: www.lfd.niedersachsen.de

No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes to this policy

We will update this privacy policy whenever the way this website processes data changes, e.g., if forms, embedded content, or analytics are added in the future.

Last updated: September 28, 2026