Privacy Policy
Privacy Policy of OKM GmbH
As of: July 2026
1. Data Protection at a Glance
The protection of your personal data is of great importance to OKM GmbH. We process your personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection provisions.
With this privacy policy, we inform you about which personal data we collect, for what purposes we process it, on what legal basis the processing takes place, to whom data may be disclosed, how long data is stored, and what rights you have as a data subject.
Our website can generally be used without providing personal data. However, if you make use of certain services (e.g. contact forms, newsletters, product inquiries, orders, or service requests), the processing of personal data may become necessary.
We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, alteration, or disclosure. Nevertheless, data transmission over the internet can never be completely protected against access by third parties, despite all security measures.
2. Controller
The controller within the meaning of the GDPR is:
OKM GmbH Julius-Zinkeisen-Straße 7 04600 Altenburg, Germany Phone: +49 (0)3447 49930-0 Email: info@okmdetectors.com Website: https://www.okmdetectors.com
3. Data Protection Officer
OKM GmbH is not legally obliged to appoint a data protection officer and has not appointed one. For all questions relating to data protection and the exercise of your rights, you may contact the controller directly:
OKM GmbH Julius-Zinkeisen-Straße 7, 04600 Altenburg, Germany Email: info@okmdetectors.com
4. Definitions
The terms used in this privacy policy, in particular "personal data," "processing," "controller," "processor," or "consent," correspond to the definitions set out in the GDPR, in particular Art. 4 GDPR. For the sake of readability, we refrain from reproducing all statutory definitions in full.
5. General Principles of Data Processing
We process personal data only to the extent necessary for the provision of our website, to handle inquiries, to carry out pre-contractual measures, to fulfill contractual obligations, due to legal obligations, on the basis of your consent, or on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR.
We process personal data only to the extent required for the respective purpose. Automated decision-making within the meaning of Art. 22 GDPR generally does not take place, unless otherwise stated in this privacy policy.
6. Data Security
OKM GmbH employs appropriate technical and organizational security measures to protect personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties. Our security measures are regularly reviewed and adapted in line with technological developments. Communication between your browser and our website is encrypted using current SSL/TLS technology.
7. Cookies and Consent Management
Our website uses cookies and similar technologies (e.g. pixels, tags, or local storage) to ensure the functionality of the website, to provide content in a user-friendly manner, to carry out statistical analyses, and — provided you have consented — to carry out marketing measures. Cookies are small text files stored on your device. We distinguish in particular between the following categories:
Technically necessary cookies. These cookies are required for the operation of the website and basic functions (e.g. shopping cart, login, security-related settings). Processing is based on Art. 6(1)(f) GDPR or, where applicable, Section 25(2) TDDDG.
Statistics and analytics cookies. These cookies help us understand how visitors use our website. They are only set with your prior consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Marketing and advertising cookies. These cookies enable interest-based content and advertising as well as the measurement of the effectiveness of advertising measures. They are only used following your express consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Managing your consent. On your first visit, you can select which categories you consent to via our cookie banner. You may withdraw or change your consent at any time with effect for the future via the cookie settings, and you may delete cookies or prevent their storage via your browser settings; this may limit certain functions.
8. Server Log Files
When you visit our website, our hosting provider automatically collects and stores information in server log files, in particular: IP address (shortened/anonymized where applicable), date and time of access, pages accessed, referrer URL, browser type and version, operating system, hostname of the accessing computer, amount of data transferred, HTTP status code.
Processing takes place exclusively to ensure secure and trouble-free operation, for error analysis, to defend against cyberattacks, and to improve the stability and security of our systems. As a rule, this data is not combined with other personal data. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, stable, and functional provision of our online offering.
9. Hosting
Our website and online shop are operated via the Shopify platform. The provider is Shopify International Limited (Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland); the technical service provider within the group is Shopify Inc. (Canada). As part of hosting, all data required for operation is processed, in particular server log files, order and communication data, and usage data. Shopify processes personal data exclusively on our instructions on the basis of a data processing agreement pursuant to Art. 28 GDPR. An adequacy decision by the EU Commission exists for Canada (for organizations subject to PIPEDA); insofar as processing by sub-processors takes place in the USA, Shopify bases this on the EU-US Data Privacy Framework or on standard contractual clauses pursuant to Art. 46 GDPR. The legal basis is our legitimate interest in the secure and efficient provision of our online offering (Art. 6(1)(f) GDPR) as well as — for orders — Art. 6(1)(b) GDPR.
10. Contact (Email, Phone, WhatsApp, Contact Form)
If you contact us (e.g. by email, phone, WhatsApp, contact form, or other means of communication), we process the personal data you provide in order to handle your inquiry. This may include, in particular: name, company, address, email address, phone number, country, content of the inquiry, desired product/service, communication history.
Depending on the content, processing is based on Art. 6(1)(b) GDPR (pre-contractual measures/contract performance) or on our legitimate interest in the proper handling of inquiries pursuant to Art. 6(1)(f) GDPR.
For business communication via WhatsApp, we use the WhatsApp Business Platform (Cloud API). The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta group). If you contact us via WhatsApp, we process in particular your phone number, your name (if provided), the content of the message, and related metadata (time, status information). As part of the Cloud API, message content is processed on Meta's servers; this may result in a transfer to the USA, which is based on the EU-US Data Privacy Framework or on standard contractual clauses pursuant to Art. 46 GDPR. The legal basis is your consent through actively initiating contact as well as our legitimate interest in easy accessibility (Art. 6(1)(a) and (f) GDPR), and, where an existing business relationship applies, also Art. 6(1)(b) GDPR. Use of WhatsApp is voluntary; alternatively, you may contact us at any time by email or phone. We do not import our contacts' address books into WhatsApp.
We store personal data from contact inquiries only for as long as necessary for processing or as required by statutory retention obligations.
11. Product Inquiries, Quote Requests, and Consultation
If you request information about our products, services, training courses, software solutions, or repair services, we process the data provided in order to handle your inquiry, prepare a quote, and provide consultation. This may include: name and contact details, company, billing/delivery address, country, desired product, intended use, desired detection depth/application, information on soil conditions/project requirements, communication history.
Processing takes place in order to carry out pre-contractual measures pursuant to Art. 6(1)(b) GDPR as well as — for internal sales organization, documentation, and follow-up — on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. Disclosure only takes place to the extent necessary to process the inquiry (e.g. to responsible employees, affiliated sales units, authorized dealers, or technical contacts).
12. Customer Account and User Area
If you create a customer account or log in to a user area, we process the data required for this purpose, in particular: name, email address, password/login data, billing/delivery address, order history, communication data, technical usage data. The legal basis is Art. 6(1)(b) GDPR. You may generally have your customer account deleted at any time, provided that no statutory retention obligations or legitimate interests (in particular for contract processing or legal defense) preclude this.
13. CRM and ERP System (Odoo)
To manage customer inquiries, quotes, orders, invoices, repair orders, service cases, and general customer communication, OKM GmbH uses the ERP and CRM system Odoo. This may involve processing, in particular: name, company, address, email address, phone number, customer history, quote/order data, invoice data, service/repair information, communication history.
We use Odoo as a cloud service (Odoo Online). The provider is Odoo S.A. (Chaussée de Namur 40, 1367 Ramillies, Belgium), which acts as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR; data processing takes place in data centers within the EU. Processing takes place pursuant to Art. 6(1)(b) GDPR as well as to safeguard our legitimate interests in the efficient organization of our business processes pursuant to Art. 6(1)(f) GDPR.
14. Newsletter and Marketing Information
If you subscribe to our newsletter or expressly consent to receiving information, we process your data exclusively to send such information, in particular: name, email address, language, time of consent, subscription/unsubscription data. Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every newsletter email; the lawfulness of processing carried out until the withdrawal remains unaffected.
Distribution takes place via our CRM/ERP system Odoo (Odoo S.A., Belgium; see Section 13). Registration takes place using the double opt-in procedure: after registering, you will receive an email asking you to confirm your registration by clicking a confirmation link. Only after this confirmation will you be added to the distribution list. To document your consent, we store the time of registration and confirmation as well as the IP address used.
15. Downloads, White Papers, and Informational Materials
On our website, we provide informational materials for download (e.g. white papers, product brochures, user manuals, data sheets). Where the download requires prior provision of personal data, we process this data exclusively to provide the requested information, to handle your inquiry, and — with corresponding consent — for further contact. The legal basis is Art. 6(1)(b) GDPR or your consent pursuant to Art. 6(1)(a) GDPR.
16. Job Applications
If you apply for a position at OKM GmbH, we process the data submitted exclusively to carry out the application process, in particular: personal details, contact information, application documents, qualifications, references, resume, cover letter, and any other information you provide. Processing is based on Section 26 BDSG in conjunction with Art. 88 GDPR as well as Art. 6(1)(b) GDPR. Provided there is no statutory retention obligation and no consent for longer storage, application documents will be deleted after completion of the process in accordance with statutory requirements.
17. Product Reviews and Customer Feedback
If you voluntarily submit product reviews, testimonials, or other feedback, we process the data provided to handle, publish, or evaluate your review (in particular name, company, country, product name, content of the review). Processing is based on your consent pursuant to Art. 6(1)(a) GDPR or our legitimate interest in improving our products and services pursuant to Art. 6(1)(f) GDPR. Publication only takes place in accordance with your consent or the applicable participation terms.
18. Communication with Sales Partners and International Dealers
OKM GmbH works with authorized sales partners and dealers worldwide. Where necessary to handle your inquiry, fulfill a contract, or provide services, personal data may be disclosed to the sales partner responsible for your country/region. Processing takes place pursuant to Art. 6(1)(b) GDPR as well as our legitimate interest in efficient international customer support pursuant to Art. 6(1)(f) GDPR. Personal data is not disclosed to subsidiaries within the OKM GmbH group.
19. Google Analytics 4
Provided you have given your consent, this website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 uses cookies and similar technologies to analyze the use of our website (including pages visited, events/interactions, approximate location data, time spent, device and browser information, and a shortened IP address). GA4 already shortens IP addresses within the EU/EEA before they are transmitted to Google for further processing.
Google LLC (USA) is also a recipient. For transfers to the USA, Google relies on the EU-US Data Privacy Framework, under which Google is certified, supplemented by standard contractual clauses pursuant to Art. 46 GDPR. Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via the cookie settings. Further information: https://policies.google.com/privacy
20. Google Tag Manager
Our website uses Google Tag Manager provided by Google Ireland Limited to manage and integrate website tags. The service itself generally does not process any personal data; however, it can be used to integrate other services which themselves process personal data. Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Further information: https://policies.google.com/privacy
21. Google Ads and Conversion Tracking
Provided you have given your consent, our website uses Google Ads, including conversion tracking. This allows us to track whether visitors reached our website via a Google ad and carried out certain actions; cookies may be set for this purpose. Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Further information: https://policies.google.com/privacy
22. Google reCAPTCHA
To protect our contact and input forms from automated input and misuse, we use Google reCAPTCHA (Google Ireland Limited). This may involve processing personal data such as IP address, browser information, operating system, mouse movements, keystrokes, referrer URL, and other technical information, which may be transmitted to Google (including Google LLC, USA); the transfer to the USA is based on the EU-US Data Privacy Framework or standard contractual clauses pursuant to Art. 46 GDPR. Since reCAPTCHA reads or stores information on your device, it is only integrated on the basis of your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Further information: https://policies.google.com/privacy
23. YouTube
Our website embeds videos from the YouTube platform (Google Ireland Limited). Wherever possible, we use the enhanced privacy mode for embedding; nevertheless, when a video is played, a connection to YouTube's servers may be established, whereby in particular your IP address and information about your usage behavior may be processed. Embedding only takes place with your consent, where legally required. Further information: https://policies.google.com/privacy
24. Google Maps
To display interactive maps and locations, we use Google Maps (Google Ireland Limited). This may involve processing personal data such as your IP address or location information. Embedding takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Further information: https://policies.google.com/privacy
25. Social Media Presence
OKM GmbH maintains company profiles on various social networks, in particular Facebook, Instagram, LinkedIn, and YouTube. When visiting our social media presence, personal data is processed by the respective platform operator; we have only limited influence over this. Further information can be found in the privacy policies of the respective providers. Where we communicate with you via our social media channels, processing to handle your inquiry takes place pursuant to Art. 6(1)(b) or (f) GDPR.
26. Embedded Content
Our website may embed content from third-party providers (e.g. videos, maps, presentations). When such content is accessed, a connection to the respective provider's servers may be established, whereby in particular your IP address, browser information, and other technical data may be processed. Where legally required, embedding only takes place with your consent.
27. International Data Transfers
Where personal data is transferred to recipients outside the EU/EEA, this takes place exclusively in compliance with Art. 44 et seq. GDPR. If no adequacy decision by the European Commission exists for the respective recipient country, the transfer only takes place on the basis of appropriate safeguards, in particular the standard contractual clauses approved by the European Commission, or other legally recognized transfer mechanisms (including exceptions under Art. 49 GDPR).
OKM has connections to third countries in particular through the use of US service providers (including the Google services referred to in Sections 19–22, the WhatsApp Business Platform in Section 10), and through Shopify's group-wide hosting infrastructure (Section 9). The relevant applicable mechanism (EU-US Data Privacy Framework or standard contractual clauses) is stated for the respective service.
28. Processors
To provide our services, we engage carefully selected external service providers who process personal data on our behalf. Data processing agreements pursuant to Art. 28 GDPR are concluded with all processors, where legally required. Our processors are carefully selected and regularly reviewed for compliance with data protection requirements. Processing only takes place within the scope of our instructions and applicable statutory provisions.
29. Storage Period
We store personal data only for as long as necessary to fulfill the respective processing purposes or as required by statutory retention obligations. Once the purpose no longer applies and no statutory or contractual retention obligations remain, the data is deleted or, where legally permissible, anonymized. Statutory retention periods, in particular under the German Commercial Code (HGB) and the Fiscal Code (AO), remain unaffected.
30. Rights of Data Subjects
Provided the statutory requirements are met, you have in particular the following rights under the GDPR: right of access (Art. 15), right to rectification (Art. 16), right to erasure (Art. 17), right to restriction of processing (Art. 18), right to data portability (Art. 20), right to object (Art. 21), and the right to withdraw consent given, with effect for the future (Art. 7(3)). To exercise your rights, you may contact us at any time using the contact details provided in this privacy policy.
31. Right to Object under Art. 21 GDPR
Where personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your data. Where personal data is processed for direct marketing purposes, you have the right to object at any time; this also applies to any related profiling. Following receipt of your objection, we will no longer process the data concerned for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, or the processing serves to assert, exercise, or defend legal claims.
32. Withdrawal of Consent
Where processing is based on your consent, you may withdraw it at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out until the withdrawal.
33. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. You may in particular contact the supervisory authority of your habitual residence, place of work, or the location of OKM GmbH's registered office.
34. Obligation to Provide Personal Data
The provision of personal data is in some cases required by law or contract, or is necessary for the conclusion and performance of a contract. Where provision is required, we will inform you of this separately in each case. Failure to provide the data may result in a contract not being concluded or performed, or in certain services not being available.
35. Automated Decision-Making and Profiling
OKM GmbH generally does not engage in decision-making based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR. Should we implement such procedures in the future, we will inform you separately in accordance with statutory requirements.
36. Changes to This Privacy Policy
OKM GmbH reserves the right to amend this privacy policy where this becomes necessary due to technical developments, changes in statutory requirements, new services, or changes in data processing. The version published at the time of your visit shall apply. We recommend reviewing this privacy policy regularly.
37. Use of Artificial Intelligence (AI)
OKM GmbH may use applications based on artificial intelligence (AI) to support internal business processes and to create, optimize, and edit texts, translations, evaluations, documentation, or other content, in some cases using AI services from external providers. Personal data is only processed to the extent necessary for the respective purpose and permissible under data protection law — on the basis of consent, for the performance of a contract, or on the basis of legitimate interests pursuant to Art. 6(1) GDPR. Where AI services from external providers are used, this takes place exclusively in compliance with applicable data protection requirements; in the case of transfers to third countries, Art. 44 et seq. GDPR shall apply.
Version of this privacy policy: July 2026