Skip to main content
OpenProspect

Privacy Policy

Last updated

18.01.2026

1. Introduction and Overview

We are delighted that you are interested in OpenProspect. Protecting your personal data and handling B2B information transparently is not only a legal obligation for us, but part of our mission. Below we inform you about which data we collect, how we use it, and what rights you have.


2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

VonderTech UG (haftungsbeschränkt)
Lexisstraße 20
12435 Berlin

Email: privacy@openprospect.io
Website: www.openprospect.io


3. Collection and storage of personal data as well as the nature and purpose of its use

a) When visiting the website

When you access our website www.openprospect.io, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • Browser used and, where applicable, the operating system of your computer as well as the name of your access provider.

The data listed above is processed by us for the following purposes:

  • Ensuring a smooth connection setup of the website,
  • Ensuring convenient use of our website,
  • Evaluating system security and stability.

The legal basis is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above.

b) When registering for and using our SaaS platform

When you register for OpenProspect, we collect the following data:

  • First and last name,
  • Business email address,
  • Company name and company data,
  • Password (encrypted),
  • Payment information (processed via our payment service provider).

This data is processed for the purpose of contract fulfilment and provision of our service pursuant to Art. 6 (1) sentence 1 lit. b GDPR.

c) Data processing in the context of profile generation (our technology)

OpenProspect is a search engine for B2B contact data. We process data to enable our users to find business contacts.

Origin of the data: We aggregate and analyse information that is publicly accessible (e.g. legal notices on company websites, the commercial register, public profiles in business social networks, Google Maps/My Business entries).

Type of data processed:

  • Company names, addresses, websites,
  • Names of decision-makers,
  • Business email addresses and phone numbers,
  • Job title and department.

Legal basis: Processing is carried out on the basis of our legitimate interest and the legitimate interest of our customers in direct B2B communication and business development (Art. 6 (1) lit. f GDPR). We ensure that the fundamental rights and freedoms of the data subjects do not prevail by strictly limiting ourselves to business data (business-to-business).

d) When subscribing to our newsletter

If you have given your express consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR, we use your email address to send you our newsletter on a regular basis. Providing an email address is sufficient to receive the newsletter. You can unsubscribe at any time, for example via a link at the end of each newsletter.


4. Disclosure of data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We only pass your data on to third parties if:

  • you have given your express consent to do so (Art. 6 (1) sentence 1 lit. a GDPR),
  • disclosure is necessary for the assertion, exercise or defence of legal claims (Art. 6 (1) sentence 1 lit. f GDPR),
  • there is a legal obligation for disclosure (Art. 6 (1) sentence 1 lit. c GDPR),
  • this is legally permissible and necessary for the processing of contractual relationships with you (Art. 6 (1) sentence 1 lit. b GDPR).

We use external service providers (processors), e.g. for hosting (e.g. AWS/Vercel), email delivery or payment processing (e.g. Stripe). Corresponding data processing agreements pursuant to Art. 28 GDPR have been concluded with all service providers.


5. Cookies and tracking tools

We use PostHog with EU hosting for privacy-conscious website analytics. Without consent, we collect basic cookieless usage events such as page views and technical page paths without persistent identifiers, marketing cookies, session recording, or person profiles. If you consent via the cookie banner, we additionally process analytics events such as CTA clicks, form status, referrers, and UTM parameters with browser-based storage so we can improve the website and campaigns. The legal basis for consent-based analytics is Art. 6 (1) sentence 1 lit. a GDPR; where required, basic cookieless measurement is based on our legitimate interest in understanding and improving our website under Art. 6 (1) lit. f GDPR. You can change or withdraw your choice at any time via “Cookies” in the footer.


6. Data security

During website visits, we use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. In addition, we use suitable technical and organisational security measures (TOMs) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties.


7. Rights of data subjects

You have the right:

  • pursuant to Art. 15 GDPR to request information about your personal data processed by us;
  • pursuant to Art. 16 GDPR to immediately request the correction of inaccurate data or the completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us;
  • pursuant to Art. 18 GDPR to request the restriction of processing of your personal data;
  • pursuant to Art. 20 GDPR to receive your personal data in a structured, commonly used and machine-readable format (data portability);
  • pursuant to Art. 7 (3) GDPR to withdraw your consent at any time;
  • pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority.


8. Right to object (opt-out for the database)

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR (in particular within our B2B database), you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data. If you would like to exercise your right of withdrawal or objection, or have your data removed from our search index, simply send an email to: privacy@openprospect.io.


9. Topicality and amendment of this privacy policy

This privacy policy is currently valid and was last updated in January 2026. As our website and offerings develop further, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.