Loading Optiviera...

Privacy Policy

Privacy Policy

Last updated: April 24, 2026

This Privacy Policy informs you in accordance with Art. 13 and 14 GDPR about the processing of personal data by AkkisTech (Kerim Akkis) in connection with the use of optiviera.com.

Data Controller (Art. 13(1) GDPR)

CompanyAkkisTech
Operated byKerim Akkis
Registered addressBremen, Germany
Privacy contact[email protected] akkistech
Websiteoptiviera.com

For all privacy-related inquiries, access requests, or to exercise your rights, please contact us at [email protected]. We will respond within 30 days.

Categories of Personal Data

We process only the data necessary to provide the service

Account Data

Contract Required

Data you provide during registration and use of your account. This data is strictly necessary to provide the service.

  • Full name and email address
  • Company name and business details
  • Hashed password (never stored in plaintext)
  • Account settings and preferences
  • Registration and last login timestamps

Usage Data

Legitimate Interest

Anonymized or pseudonymized data about how the platform is used, to improve user experience and diagnose errors.

  • Modules and features accessed
  • Session duration and interaction patterns
  • Click and navigation events (anonymized via PostHog)
  • Feature flag evaluations

Technical Data

Security

Technical information automatically collected when accessing the platform, necessary for security and service operation.

  • IP address (stored for max. 30 days)
  • Browser type and version
  • Operating system and device type
  • Access and error timestamps
  • Server log entries

Payment Data

Via Stripe

All payment processing is handled exclusively by Stripe, Inc. AkkisTech does not store full credit card or bank account data.

  • Billing address and billing name
  • Payment history and subscription status
  • Payment tokens provided by Stripe (no raw card data)
  • Tax ID (optional, for B2B invoicing)

Communication Data

Support

Data from communications with our support team or via the contact form.

  • Support request and ticket content
  • Email correspondence with support
  • Communication timestamps

Legal Bases for Processing (Art. 6 GDPR)

Each processing activity relies on one of the following legal bases under GDPR

Processing ActivityLegal BasisArticle
Account creation, authentication & session managementContract performanceArt. 6(1)(b) GDPR
Subscription management & payment processingContract performanceArt. 6(1)(b) GDPR
Security monitoring & fraud preventionLegitimate interestsArt. 6(1)(f) GDPR
Usage analytics (PostHog, optional)ConsentArt. 6(1)(a) GDPR
Retention of business and tax recordsLegal obligationArt. 6(1)(c) GDPR
Support communication & request handlingContract performanceArt. 6(1)(b) GDPR

Third-Party Services & Processors

We use vetted third-party providers who process personal data on our behalf

Stripe

Payment Processing

Stripe processes all payment data securely and in PCI-DSS compliance. AkkisTech has a data processing agreement with Stripe. Card data is stored exclusively on Stripe's certified servers.

USA (Stripe, Inc.) EU Standard Contractual Clauses (SCCs)

PostHog

Product Analytics

PostHog collects anonymized usage events to improve the platform. Data collection only occurs after consent (optional analytics cookie). The Do-Not-Track (DNT) signal is automatically respected.

EU / USA (PostHog, Inc.) EU Standard Contractual Clauses (SCCs)

Google

OAuth Single Sign-On

Google OAuth is optionally used for sign-in and only activated when the user explicitly chooses it. Only the email address is transmitted for account identification.

USA (Google LLC) EU Standard Contractual Clauses (SCCs)

Data Retention Periods

Personal data is retained only as long as necessary for the respective purpose

Data CategoryRetention PeriodBasis
Account dataContract duration + 3 yearsContract necessity
Billing & accounting records10 years§ 147 AO, § 257 HGB
Server logs & access records30 daysLegitimate interests (security)
Analytics data (PostHog)12 monthsConsent (revocable)
Support communications3 yearsStatutory limitation period

Your Rights as a Data Subject

GDPR grants you comprehensive rights regarding the processing of your personal data

Art. 15 GDPR

Right of Access

You have the right to obtain confirmation of whether personal data about you is being processed and to receive a free copy of that data.

Art. 16 GDPR

Right to Rectification

You have the right to demand the immediate correction of inaccurate or completion of incomplete personal data.

Art. 17 GDPR

Right to Erasure

You can request deletion of your personal data, unless a legal retention obligation (e.g. tax or commercial law) prevents this.

Art. 18 GDPR

Right to Restriction

You have the right to request restriction of processing, e.g. while verifying data accuracy or during an objection.

Art. 20 GDPR

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.

Art. 21 GDPR

Right to Object

You can object to processing based on legitimate interests at any time. After an objection, data will no longer be processed unless compelling legitimate grounds exist.

Art. 7(3) GDPR

Right to Withdraw Consent

Where processing is based on consent (e.g. optional analytics cookies), you can withdraw it at any time with effect for the future, without affecting the lawfulness of prior processing.

Art. 77 GDPR

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, workplace, or the place of the alleged infringement.

To exercise your rights, please contact [email protected]. We will respond within 30 days. Any rejection of your request will be provided in writing with reasons.

Competent Supervisory Authority

Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen

The competent data protection supervisory authority for AkkisTech in Germany is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen. You have the right to lodge a complaint with this authority at any time (Arndtstraße 1, 27570 Bremerhaven; datenschutz.bremen.de).

Changes to this Privacy Policy

AkkisTech reserves the right to update this Privacy Policy when there are significant changes to processing activities or due to changes in applicable law. You will be notified of material changes by email or in-app notification. The date of the last update is shown at the top of this document.

Questions about Privacy?

For all privacy-related inquiries, access requests, or to exercise your GDPR rights, contact us at [email protected].