Legal

Privacy policy

We are pleased about your interest in our company. Protecting your personal data is important to us. Below we inform you about the processing of personal data when you use our website.

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):
eyeworkers GmbH, Hübschstraße 23, 76135 Karlsruhe
E-mail: kontakt@eyeworkers.de

2. Hosting and server log files

When you access this website, your browser automatically sends information to our hosting provider's server, where it is temporarily stored in so-called log files:

IP address of the requesting device
date and time of access
name and URL of the retrieved file
amount of data transferred, message about successful retrieval
browser and operating system used, referrer URL

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). The processing serves to deliver the website, ensure system security and analyse errors.

3. Fonts and resources

This website loads fonts (DM Sans, DM Mono) as well as all of its own scripts and styles exclusively locally from our own server. No connections to third-party servers (e.g. Google Fonts) are established for this. Exceptions are the Google services described in section 5 (Google Analytics and Google Ads), which are loaded via Google Tag Manager — their code is loaded exclusively after your explicit, purpose-specific consent.

4. Consent, cookies and local storage

Without your consent, this website sets no analytics or marketing cookies and loads no third-party services. On your first visit, we ask via a consent banner whether you agree to the optional services — separately for the purposes “Statistics” (Google Analytics), “Marketing” (Google Ads/remarketing) and “AI assistant”. You can consent to each purpose individually. “Decline” is just as easy as “Accept”.

We use technically necessary storage independently of consent in your browser's local storage (localStorage): your preferred appearance (light/dark mode) and your consent decision (key ew-consent). This information remains on your device and is not transmitted to us. The legal basis for this is § 25 (2) TTDSG (strictly necessary storage) or Art. 6 (1) (f) GDPR.

You can change or revoke a decision once made at any time with effect for the future:

5. Google services via Google Tag Manager (statistics & marketing)

Google Analytics and Google Ads are integrated via Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, “Google”). The container is loaded only after your consent and controlled via Google's Consent Mode v2; which service actually runs depends on your purpose-specific choice (“Statistics” or “Marketing”).

Statistics – Google Analytics 4: Only if you consent to the “Statistics” category do we use Google Analytics 4, a web analytics service by Google. Before that, no analytics cookies are set and no analytics data is transmitted to Google.

Google Analytics uses cookies and similar technologies to analyse the use of the website (e.g. pages visited, approximate origin, device used). We evaluate on an aggregated basis how our units (Company, Agency, Engineering) are used. By default, Google Analytics 4 shortens the IP address or does not store it permanently. To manage consent, we use Google's Consent Mode v2: without consent, no analytics storage access is performed.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. A data processing agreement is in place with Google. A transfer of data to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework, supplemented by standard contractual clauses. A residual risk of access by US authorities remains.

You can revoke your consent at any time via the . Further information: Google's privacy policy.

Marketing – Google Ads (remarketing): Only if you consent to the “Marketing” category do we use Google Ads (reach/conversion measurement and remarketing by Google Ireland Limited). Only then are the marketing storage accesses (ad_storage, ad_user_data, ad_personalization) enabled and an advertising/remarketing tag executed that makes your visit usable for later, possibly personalised advertising. Without this consent, the marketing storage accesses remain disabled.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. A data processing agreement is in place with Google; a transfer of data to the USA cannot be ruled out (Google is certified under the EU-US Data Privacy Framework, supplemented by standard contractual clauses; a residual risk of access by US authorities remains). You can revoke your consent at any time via the .

6. AI assistant (ChatGPT / OpenAI)

Optionally, we offer an AI-based chat assistant that answers questions about eyeworkers. The assistant becomes active only after your explicit consent (in the consent banner or in the assistant itself). Without consent, no chat content is processed.

After activation, the messages you enter are transmitted via our own server to OpenAI, L.L.C. (provider of the “ChatGPT” language model, San Francisco, USA) in order to generate a response. Please do not enter any sensitive or special categories of personal data in the chat. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. A data processing agreement is in place with OpenAI; the transfer to the USA is based on the EU standard contractual clauses. A residual risk of access by US authorities remains. Content transmitted via the API is not used by OpenAI to train its models.

You can revoke your consent at any time via the .

7. Contacting us

If you contact us via the contact form or by e-mail, we process the data you provide (e.g. name, e-mail address, message) in order to handle your request. The form is submitted via our own server, which delivers the request as an e-mail to kontakt@eyeworkers.de; no third-party form services are used and the data is not stored permanently on the web server. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose.

8. Your rights

Under the GDPR you have the right to:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
objection to processing (Art. 21 GDPR)

In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection of Baden-Württemberg (Landesbeauftragter für den Datenschutz Baden-Württemberg).

9. Status

This privacy policy is dated August 2026. As our website develops or legal requirements change, an update may become necessary.