Privacy Policy

1. Controller (Verantwortlicher)

The controller responsible for the processing of personal data on this website is:

OnyxAi-Gents
Matti Yohannes
Hessen, Germany
Email: matti@onyxaigents.com

2. What Personal Data We Collect

When you use any of the services offered on this website, including consultation bookings and any contact forms, we collect the following personal data that you provide voluntarily:

• First name — used to personalise communications sent to you.
• Email address — used to respond to your enquiry and send follow-up information about our services.
• Phone number — collected where provided, used to contact you regarding your enquiry or to schedule a consultation call.

We do not collect sensitive personal data as defined under Article 9 of the GDPR.

3. Legal Basis for Processing

• Article 6(1)(a) GDPR — Consent: By submitting any contact form, you consent to us processing your data to respond to your enquiry. You may withdraw consent at any time.
• Article 6(1)(b) GDPR — Performance of a contract: Where you have requested a consultation call or entered into a service agreement with OnyxAi-Gents.
• Article 6(1)(f) GDPR — Legitimate interests: We may process your contact data to follow up on your enquiry where we have a legitimate business interest in doing so.

4. Purpose of Processing

Your personal data is used exclusively for the following purposes:

• Responding to enquiries submitted through this website.
• Scheduling and conducting consultation calls or strategy sessions where requested.
• Communicating with you about OnyxAi-Gents services, including our outbound client acquisition system.
• Sending follow-up information relevant to your enquiry.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. If you have not engaged with our communications for a period of 24 months, your data will be deleted from our systems. You may also request deletion at any time.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share your data with the following service providers, all of whom are bound by data processing agreements:

• Calendar and scheduling tools (e.g., Cal.com) for booking consultation calls.
• Email platforms for sending communications related to your enquiry.
• Automation platforms (e.g., Make.com) used to process and route enquiry data.

Where any of these providers are located outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Cookies and Analytics

This website may use cookies and similar tracking technologies for basic analytics purposes. No advertising or cross-site tracking cookies are used. You can disable cookies in your browser settings at any time.

8. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights, which you may exercise at any time by contacting us at the address in Section 1:

• Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): Request deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): Request that we limit the processing of your data.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): Withdraw consent at any time without affecting prior lawful processing.

You also have the right to lodge a complaint with the supervisory authority in Hessen:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
datenschutz.hessen.de

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This website is served over HTTPS. However, no method of transmission over the internet is completely secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised.