Privacy Policy

1. Controller

The controller responsible for this website is:

Email: hallo [at] okkisolutions.com

For data protection enquiries, please contact:

data [at] okkisolutions.com

2. Provision and Hosting of the Website

When this website is accessed, technically necessary connection and access data is processed. This may in particular include:

• IP address,
• date and time of access,
• page or file requested,
• amount of data transferred,
• browser type and browser version,
• operating system,
• referrer information,
• technical status and error information.

The processing is carried out in order to technically provide the website, ensure secure and stable operation, and detect and prevent technical disruptions and misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically proper provision of this website.

We use an external hosting provider that processes the data required for the technical provision of the website.

According to the hosting provider, IP addresses are stored for a maximum of seven days for the detection and prevention of attacks. The web server log files available to us cover a maximum period of the preceding six weeks. Older log files are no longer made available to us by the hosting provider. In the log files made available to us, the hostname or IP address of the accessing system is anonymised by the hosting provider.

3. Contacting the GmbH by Email

If you contact the GmbH using an email address provided on this website, we process the personal data you provide in order to handle your message.

This may in particular include:

• name,
• email address,
• other contact details,
• the content of your message,
• documents provided by you,
• information relating to your enquiry.

We use an external email service provider that processes personal data in connection with the provision and operation of the email service.

Where your message relates to entering into a contract, you request pre-contractual measures, or the communication concerns an existing contractual relationship, the processing is based on Article 6(1)(b) GDPR.

Where a specific processing activity is based on consent given by you, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

Where processing is necessary for compliance with a legal obligation, the legal basis is Article 6(1)(c) GDPR.

Other business communications may be processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest includes handling business enquiries and communicating with prospective customers, customers, business partners and other contact persons.

The data is retained for as long as necessary to handle the relevant matter. Data may be retained for a longer period where statutory retention obligations apply or where the data is required for the establishment, exercise or defence of legal claims.

4. Direct Contact with the Limited in Kenya

For matters relating to Africa, you may contact our Kenyan cooperation company directly using the contact details provided on this website:

Email: hello [at] okkisolutions.com

If you contact the Limited directly, Okki Solutions Limited is itself responsible for processing that communication.

The personal data provided by you in connection with your contact may in particular include:

• name,
• email address and other contact details,
• the content of your message,
• documents provided by you,
• information relating to your enquiry.

The processing is carried out in particular to handle your enquiry and, where applicable, to take steps prior to entering into a contract or to perform a contract.

Under Section 30(1)(b)(i) of the Kenya Data Protection Act 2019, personal data may be processed where this is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the data subject's request before entering into a contract. Where processing is based on consent, Section 30(1)(a) applies. Kenyan law also provides for other lawful grounds for processing, including legal obligations and legitimate interests.

Where technical service providers are used for communication, they receive personal data to the extent necessary to provide the relevant service.

The data is processed for as long as necessary to deal with the relevant matter. Longer retention may apply where required by statutory retention obligations or where the data is required for the establishment, exercise or defence of legal claims.

The data protection laws applicable to the Limited apply to this processing, in particular the Kenya Data Protection Act 2019. Where the GDPR applies to a specific processing activity of the Limited, the GDPR applies in addition.

Data protection enquiries relating to the Limited may be addressed to hello [at] okkisolutions.com.

5. Recipients of Personal Data

Personal data is disclosed to service providers or other recipients in connection with the processing activities described in this Privacy Policy where this is necessary for the relevant processing.

These recipients include in particular:

• hosting service providers for the technical provision of the website,
• email service providers for business email communications.

Service providers are engaged in accordance with their respective data protection role and the applicable legal requirements.

If you contact Okki Solutions Limited in Kenya directly, the Limited processes your message under its own responsibility.

6. Processing in Third Countries

When technical service providers are used, personal data may be processed outside the European Economic Area in connection with the relevant service.

Where such processing is subject to the GDPR rules on international data transfers, it is carried out only in accordance with the applicable legal requirements. Depending on the recipient and country, these safeguards may in particular include an adequacy decision of the European Commission or appropriate safeguards such as Standard Contractual Clauses.

Information regarding the safeguards used for a particular processing activity may be requested from data [at] okkisolutions.com.

If you contact Okki Solutions Limited directly, your communication is processed in Kenya.

7. Your Rights

Processing by the GmbH

Where the GDPR applies, you have, subject to the statutory requirements, in particular the right to:

• access under Article 15 GDPR,
• rectification under Article 16 GDPR,
• erasure under Article 17 GDPR,
• restriction of processing under Article 18 GDPR,
• data portability under Article 20 GDPR,
• object to processing under Article 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights in relation to the GmbH, please contact data [at] okkisolutions.com.

Processing by the Limited

Under the Kenya Data Protection Act, data subjects have, in particular, the right to be informed about the use of their data, to access their personal data, to object to processing and to request correction or deletion of false or misleading data.

Requests may be addressed to hello [at] okkisolutions.com.

Where the GDPR additionally applies to a specific processing activity of the Limited, the corresponding rights under the GDPR also apply.

8. Right to Lodge a Complaint with a Supervisory Authority

For processing carried out by the GmbH, you have the right to lodge a complaint with a data protection supervisory authority.

The competent authority for the GmbH is:

For complaints concerning processing by the Limited, you may in particular contact the Kenyan data protection supervisory authority: