Privacy policy

Data protection at a glance

Personal data is any information that can identify you directly or indirectly. This policy covers the websites eqx247.com (English) and eqx247.de (German), which have the same content.

We process personal data in three main situations: when you open a page (the hosting provider processes your IP address and request data to deliver it), when you send a quote request or an email, and, only if you agree, when we measure how the website is used with Google Analytics.

The website sets no cookies of its own. Fonts are served from the website itself, so no request is made to Google Fonts. There is no newsletter, no user account and no payment on the website.

Who is responsible

The controller responsible for data processing on this website is:

Optiop GmbH, Am Hauptbahnhof 16, 60329 Frankfurt am Main, Germany. Commercial register: Local Court of Frankfurt am Main, HRB 137642. Email: hello@eqx247.com.

Please send questions about this website and your requests to this address.

Hosting and server logs

This website is a static website hosted on Amazon Web Services (AWS). The files are stored in Amazon S3 in the Frankfurt region (eu-central-1) and delivered through Amazon CloudFront, a content delivery network with edge locations worldwide. Our contracting partner is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.

When you open a page, AWS processes your IP address and the data of your request, such as the page requested, in order to deliver the page to you. Because CloudFront delivers content from edge locations around the world, this data may be processed outside the European Union.

CloudFront access logs are switched off. We do not keep a log of the pages you request.

The legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in delivering the website securely and reliably.

We have concluded a data processing agreement with AWS under Art. 28 GDPR.

Quote form

You can ask for a quote using the form at /quote. The form asks for:

• required: name, email address and the service you are interested in
• optional: company, phone number, location, volume, timeline and a message
• the language of the page you sent the form from (added automatically)

How quote requests are processed

When you submit the form, your request is sent to an AWS Lambda function in the Frankfurt region (eu-central-1). This function does two things.

First, it checks the request with Cloudflare Turnstile, a spam protection service by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The Turnstile widget runs in your browser, and your IP address is sent to Cloudflare for verification. We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR.

Second, it stores your request as an entry in a Notion database used by Optiop’s sales team. Notion is provided by Notion Labs, Inc., 2300 Harrison Street, San Francisco, CA 94110, USA.

The Lambda function logs only a request ID and the outcome of the request, not the content of the form. These logs are stored in Amazon CloudWatch in the Frankfurt region and kept for one month.

We use your details to answer your request and to prepare a quote. The required fields are needed to do this; without them we cannot reply. The optional fields help us prepare an accurate quote.

The legal basis is Art. 6(1)(b) GDPR where your request is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering requests sent to us.

Spam check with Cloudflare Turnstile: the legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in protecting the form against spam and abuse. Where the widget stores or reads information on your device, this is strictly necessary to provide the form you chose to use (§ 25(2) no. 2 TDDDG).

Email

If you write to hello@eqx247.com, your message and the data it contains (such as your name, email address and anything you include) are processed to answer you. hello@eqx247.com is a Google Workspace group, so emails are processed by Google. Our contracting partner for Google Workspace is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland.

The legal basis is Art. 6(1)(b) GDPR where your message is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering messages sent to us.

We have concluded a data processing agreement with Google for Google Workspace under Art. 28 GDPR.

Google Analytics, only with your consent

With your consent, we use Google Analytics 4, a web analytics service by Google, to understand how the website is used. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you first visit, a consent banner asks whether you accept analytics. You can accept or decline with equally prominent buttons. Until you accept, Google Analytics is not loaded and no analytics cookies are set.

If you accept, Google Analytics is loaded and sets cookies in your browser, and Google receives information about how you use the website, such as the pages you view.

Google Analytics is loaded through Google Tag Manager, a tool by the same provider that loads the analytics code. Google Tag Manager is also loaded only after you accept and sets no cookies itself; your browser’s request for it does send Google your IP address.

Google Analytics 4 does not log or store the IP addresses of users in the EU. Advertising features are switched off: ad_storage, ad_user_data and ad_personalization are set to “denied”, so no advertising cookies are set and your data is not sent to Google for advertising or used for personalized ads. Otherwise, data is processed in line with Google’s settings for this Analytics property.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future. Use the “Cookie settings” link in the footer of any page to change your choice. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Storing your consent choice

Your choice in the consent banner is stored in your browser’s local storage under the key “eqx247.analytics”, so that the banner is not shown again on every page. No cookie is used for this. This entry stays in your browser until you change your choice or clear your browser’s stored data.

The legal basis is § 25(2) no. 2 TDDDG, because storing your choice is strictly necessary to respect it, and Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, because we must be able to show that you gave your consent.

Recipients

We share personal data only as far as needed for the purposes described above. Recipients are:

• Amazon Web Services (hosting, content delivery and the quote form backend)
• Cloudflare, Inc. (spam protection for the quote form)
• Notion Labs, Inc. (storing quote requests for Optiop’s sales team)
• Google (email via Google Workspace, and Google Analytics if you consent)
• Optiop’s sales team, who handle your request

Transfers to third countries

Some of the providers named above are based in the USA or process data outside the European Union: Notion Labs, Inc. (USA), Cloudflare, Inc., Google, and Amazon CloudFront through its worldwide edge locations.

Notion Labs, Inc., Cloudflare, Inc., Google LLC and Amazon Web Services are certified under the EU-US Data Privacy Framework. Transfers to them are based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).

Where they apply, our data processing agreements with AWS, Cloudflare and Google also include the EU standard contractual clauses (Art. 46(2)(c) GDPR).

Data processed at Amazon CloudFront edge locations outside the EU is covered by our data processing agreement with AWS, including the standard contractual clauses where they apply.

How long we keep data

We keep personal data only as long as needed for the purpose it was collected for, unless a more specific period is stated below or statutory retention obligations require us to keep it longer.

AWS Lambda logs (request ID and outcome only) are kept for one month.

Quote requests stored in Notion: we keep them only as long as we need them to handle your request. If the enquiry closes without a contract, we delete it. If it leads to a contract, we keep it for the statutory retention periods (§ 257 HGB, § 147 AO).

Emails sent to hello@eqx247.com: we keep them as long as we need them for your enquiry. Business letters and accounting records are kept for the statutory retention periods (§ 257 HGB, § 147 AO).

Your consent choice stays in your browser’s local storage until you change it or clear your browser’s stored data.

Where commercial or tax law requires us to keep data, for example once a request leads to a contract, we keep it for the statutory period.

Your rights

Under the GDPR you have the following rights regarding your personal data:

• access to the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdrawal of any consent you have given, with effect for the future (Art. 7(3) GDPR)

Right to object

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process your data unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

To exercise any of your rights, write to hello@eqx247.com.

Right to complain

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Changes to this policy

We may update this privacy policy when the website or our processing changes, or when the law requires it. The current version is always available on this page.

Last updated: November 2026