privacy policy

1. data controller

neobim gmbh
roonstrasse 23a, 76137 karlsruhe, germany
email: hi@os.build
phone: +49 173 438 3864

2. data collected automatically

when you visit os.build, the following data is collected automatically by our hosting provider:

  • ip address (anonymized)
  • browser type and version
  • operating system
  • referrer url
  • date and time of access

this data is processed on the basis of art. 6 (1) lit. f gdpr (legitimate interest in secure and stable website operation).

3. newsletter

if you subscribe to our newsletter, we store your email address for the purpose of sending updates. the legal basis is art. 6 (1) lit. a gdpr (consent). you can unsubscribe at any time via the link in every email.

we use beehiiv inc. (united states) as our newsletter service provider to store subscriber data and deliver emails. when you subscribe, your email address is transferred to beehiiv on the basis of art. 49 (1) lit. a gdpr (your explicit consent). more information: beehiiv.com/privacy

4. contact & demo requests

if you submit the contact form on /contact, we process the following data to respond to your request: full name, company / organization, work email, and (if provided) phone number and message. submission requires your explicit consent (checkbox on the form). we use this data to (a) notify our team of your request, (b) send you an automated confirmation email tailored to the product you indicated, and (c) store your details in our customer relationship management (crm) system for follow-up. the legal basis is art. 6 (1) lit. a gdpr (consent) and art. 6 (1) lit. b gdpr (pre-contractual measures at your request).

we use the following processors:

  • resend (resend, inc., united states) to deliver emails. cross-border transfer is based on art. 49 (1) lit. b gdpr. resend.com/legal/privacy-policy
  • zoho corporation (zoho crm) to store contact records. zoho is hosted in the eu data centre (zoho.eu); processing takes place within the eea. zoho.com/privacy.html

you can withdraw your consent at any time by emailing hi@os.build. contact request data is retained until your request is concluded plus a reasonable period for follow-up (typically 12 months), or longer if a business relationship results.

5. hosting

this website is hosted by vercel inc. vercel may automatically collect information in server log files when you access our pages. more information: vercel.com/legal/privacy-policy

6. cookies & consent

we use strictly necessary storage required to operate the site and to remember your cookie choice. these are exempt from consent under § 25 (2) tdddg.

with your explicit consent we additionally load privacy-friendly analytics to understand how the site is used. no analytics or marketing scripts load before you opt in: tracking defaults to denied (google consent mode v2) and is only activated after you accept via our cookie banner. the legal basis is art. 6 (1) lit. a gdpr and § 25 (1) tdddg (consent).

you can change or withdraw your choice at any time via the "cookie settings" link in the footer, with effect for the future.

7. data sharing

we do not sell, trade, or transfer your personal data to third parties. data may be shared with:

  • hosting providers (vercel) for website delivery
  • newsletter provider (beehiiv) for subscribers who opt in
  • email delivery provider (resend) for contact form submissions
  • crm provider (zoho, eu data centre) for storing contact requests
  • legal authorities when required by law

8. data retention

personal data is retained only as long as necessary for the purposes stated above. server logs are deleted after 30 days. newsletter subscriptions are stored until you unsubscribe.

9. your rights

under the gdpr, you have the right to:

  • access your stored data (art. 15 gdpr)
  • rectification of inaccurate data (art. 16 gdpr)
  • erasure of your data (art. 17 gdpr)
  • restriction of processing (art. 18 gdpr)
  • data portability (art. 20 gdpr)
  • object to processing (art. 21 gdpr)
  • withdraw consent (art. 7 (3) gdpr)

to exercise your rights, contact us at: hi@os.build

10. supervisory authority

you have the right to lodge a complaint with a data protection supervisory authority. the authority responsible for us is the landesbeauftragte für den datenschutz und die informationsfreiheit baden-württemberg.

11. changes to this policy

we may update this privacy policy from time to time. changes will be published on this page with a revised date.

last updated: may 2026