Data Privacy

Data protection notice

We handle personal data in compliance with the statutory provisions of the General Data Protection Regulation (GDPR), the German Data Protection Act (BDSG) and the German Telemedia Act (TMG).

This data protection note explains to the user the purpose, type and scope of the collection and use of personal data by the responsible provider.

Grimmaische-Str. 21
DE-04109 Leipzig

(further details in the imprint)

on this website and in the company.

Personal data includes any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4 (1) GDPR). This information includes name, contact information such as postal address, email address, telephone number, etc. as well as other information about natural persons.

Collection of general data by the webspace provider

The website of OnREX GmbH collects a range of general data and information every time the website is accessed. This general data and information is stored in the log files of the server. The browser types and versions used, the operating system used by the accessing system, the website used by the accessing system to access our website, the date and time of an access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system and other related data and information that can be used to prevent dangers in the event of attacks on our information technology systems may be collected.

OnREX GmbH does not draw any conclusions about the data subject when using this general data. This information is instead required to correctly deliver the content of our website, to optimize the content of our website as well as the advertising for it, to guarantee the permanent functionality of our information technology systems and the technology of our website and to provide law enforcement authorities with the information that may be required for criminal prosecution in the event of a cyber attack. This anonymously collected data is thus analyzed by OnREX GmbH both statistically and also with the aim of enhancing data protection and data security in our company with a view to ultimately ensuring an optimum level of protection for the personal data we process. The anonymous data of the server log files is stored separately from all personal data submitted by the data subject.


The web pages of OnREX GmbH use cookies. Cookies are text files that are deposited and stored on a computer system via an Internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID represents a unique identifier of the cookie. It consists of a character sequence through which web pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the visited web pages and servers to differentiate between the individual browser of the data subject and other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

OnREX GmbH is able to provide users of this website with more user-friendly services through the use of cookies, which would otherwise not be possible.

The information and offers on our website can be optimized in the interests of the user through the use of a cookie. As already mentioned, cookies allow us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. The user of a website that uses cookies, for example, does not have to re-enter their access data every time they visit the website as this is remembered by the website and the cookie stored on the user’s local computer system.

The data subject can prevent the placement of cookies by our website at any time by adjusting the appropriate setting in the Internet browser used and in doing so, permanently object to the placement of cookies. Cookies that have already been placed can also be deleted at any time via an Internet browser or other software programs. This is possible in all conventional Internet browsers. If the data subject deactivates the placement of cookies in the Internet browser used, not all functions of our website may be usable to the fullest extent under certain circumstances.

Here you will find an overview of all cookies used. You can give your consent to entire categories or (de)activate only certain cookies:
Cookie management

Google Analytics

The website uses Google Analytics, a web analysis service of GoogleInc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on the user’s computer and which enable the analysis of the website’s use by the user. The information generated by the cookie regarding the use of this website by users is usually transferred to a Google server in the USA and stored there.

Should IP anonymization be activated on this website, the IP address of Google users will, however, be truncated beforehand within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymization is active on this website. Google will use this information on behalf of the operator of this website to analyse the use of the website by users, to compile reports about website activities and to provide further services to the website operator associated with the use of the website and the Internet. The users can also prevent the collection of data generated by the cookie and related to their use of the website (incl. their IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link:

As an alternative to the browser add-on or within browsers on mobile devices, you may click this link to prevent Google Analytics from collecting data from this website in the future or to activate it again: [ga_optout].


Provided the user makes use of the included newsletter service and provides personal data, such as the name and email address for sending the newsletter when subscribing, entry and transmission is voluntary. We will only use this data for the stated purpose.

The OnREX GmbH newsletter contains so-called tracking pixels. A tracking pixel is a thumbnail image that is embedded into emails that are sent in HTML format to enable log file recording and analysis. This can be used to statistically evaluate the success or failure of newsletter campaigns. OnREX GmbH can identify whether and when the newsletter was opened and links contained were accessed by means of the embedded pixel-code.

Tracking pixels do not contain any personal data. They are stored and analyzed by the person responsible for processing them for the purpose of optimizing newsletter dispatch and better adapting the content of future newsletters to the interests of the data subject.

The user is entitled to revoke the separate declaration of consent submitted via the double opt-in process for the subscription of newsletters at any time. Once consent is revoked, the personal data collected during registration, such as name and email address, will be deleted by the person responsible for processing. Unsubscribing from the newsletter will automatically be interpreted by OnREX GmbH as a revocation.

We use the Google reCaptcha service to identify whether a person or computer makes a particular entry in our contact or newsletter form. Google uses the following data to identify you as a person or a computer: IP address of the end device used, the page that you visit on our website and on which the captcha is embedded, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks for which you have to identify images. The legal basis for the data processing described is Art. 6 para. 1 letter f of the General Data Protection Regulation. We have a legitimate interest in this data processing to ensure the security of our website and to protect us from automated intrusion (attacks).

Contact form

Provided that you use our contact form and provide personal data (such as name, address, email address, telephone number) for establishing contact or other purposes, entry and transmission is voluntary. We will only use this data for the stated purpose and will not pass it on to third parties without your explicit consent, unless required to do so by law.

Insofar as a contractual relationship is to be established between you and us, the content of which is to be developed or changed, or you send us an inquiry, we shall collect, store and use your personal data to the extent necessary for these purposes.

All personal data will only be stored for as long as is necessary for the stated purpose (processing your inquiry or fulfilling a contract) or to comply with statutory retention periods.

Our content contains links to external websites of third parties over whose content we have no influence. We cannot accept any liability for the content and compliance with the data protection regulations by the providers of the linked pages. The respective provider or operator of these pages is always responsible for the contents of the linked pages.

The provider explicitly points out that data transmission over the Internet (e.g. communication by e-mail) is prone to security gaps and cannot be completely protected against access by third parties. The provider can neither assume responsibility nor liability in the event of erroneous data transmission or unauthorized access by third parties.

Data is stored and processed on servers in Germany without exception.

Routine deletion and blocking of personal data

The person responsible for processing data shall only process and store the personal data of the data subject for the period of time necessary to fulfil the storage purpose or if provided for in the European directives and regulations or other legislative provisions in laws or regulations to which the person responsible for processing is subject.

If the storage purpose is no longer applicable or if a storage period prescribed by the European Directive and Regulation Body or another competent legislator expires, the personal data shall be routinely blocked or deleted in accordance with the statutory provisions.

We take the protection of your personal data very seriously. All employees involved in the processing of personal data commit to maintaining data secrecy. We strictly adhere to the requirements of the GDPR and other applicable data protection regulations when including cooperation partners.

Users have the right to request information regarding personal data stored about them free of charge pursuant to Art. 15 GDPR. Users also have the right to correct incorrect data as well as block and delete their personal data, provided there is no legal obligation to retain it. In this case, please contact the provider under the contact details given in the imprint.

Users also have the right to appeal to a supervisory authority pursuant to Art. 77 GDPR if they believe that the processing of their data violates data protection regulations. The right of appeal may be invoked before a supervisory authority in the member state in which you are present, at your place of work or at the place where the alleged infringement was committed.

Feel free to contact our data protection officer if you have any questions regarding the processing of personal data.

Contact details of the data protection officer

Philipp Jentsch
Altenburger Straße 13
DE-04275 Leipzig



Scroll page