Privacy notice

Last updated: 22 October 2026

Who is responsible

The legal details of the operator of OTVista will be published here. Until then, you can contact us about privacy matters at contact@otvista.com or through the contact form.

For privacy questions or requests, email contact@otvista.com.

What we collect and why

Consultation requests

When you submit the contact form we collect your name, business email address, organization, country or region, industry, service of interest, your message, and optionally your job title and preferred contact method. We also record the date and time of submission.

We use this information only to respond to your enquiry, discuss your requirements and, if you choose, prepare a proposal. The legal basis is taking steps at your request before entering into a contract and our legitimate interest in responding to business enquiries (Article 6(1)(b) and (f) GDPR).

Please do not include sensitive technical information such as network diagrams, IP addresses, asset lists or credentials in the form.

Spam and abuse prevention

To limit automated abuse, the form checks how many requests come from the same network address within a short period. For this purpose we store a one-way, salted hash of your IP address for up to 24 hours. It is not stored with your enquiry and is not used for any other purpose.

OT Security Quick Check

The Quick Check and the Custom OT Security Assessment run entirely in your browser. Your answers and results are not sent to us or stored on our servers. If you have accepted analytics cookies, we only record that a tool was completed (and, for the Custom Assessment, the industry and result band you chose), never your individual answers.

Server logs

Like any website, our hosting provider's servers record technical information about requests, such as IP address, requested page, date and time, and browser type. These logs are used to operate and secure the website and are kept for a limited period by the hosting provider.

Website analytics (only with your consent)

If you click Accept analytics in our cookie banner, we use Google Analytics 4 to understand how visitors find and use the website: for example which pages are viewed, how long visits last, the approximate region and device type, and whether a consultation request or tool was completed. Google Analytics 4 does not log or store IP addresses. We have turned off Google signals and advertising personalisation, and we do not combine this data with other data about you. Nothing is loaded from Google if you reject or ignore the banner.

Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time via Cookie settings (also in the footer). Google Ireland Limited acts as our processor; data may be transferred to Google LLC in the United States under the EU–US Data Privacy Framework. Analytics data is retained for 14 months.

Who receives your data

We do not sell personal data or use it for advertising. Your enquiry is accessible only to OTVista. We use the following service providers, who process data on our behalf:

• Hostinger — website hosting, database and email services.
• Google — website analytics, only if you accept analytics cookies.

Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision.

How long we keep it

• Consultation requests: up to 24 months after submission, unless an ongoing business relationship requires us to keep them longer. Records older than this are deleted automatically.
• Hashed network addresses for rate limiting: up to 24 hours.
• Email notifications of enquiries: deleted in line with the same 24-month period.
• Google Analytics data (only with consent): 14 months; analytics cookies expire after 13 months.
• Your cookie choice: stored in your browser until you change it or clear your browser data.

How we protect it

The website uses encrypted connections (HTTPS). Enquiries are stored in a database that is not publicly accessible, and access is limited to OTVista. Configuration secrets are kept outside the public web directory.

Your rights

Depending on applicable law, you have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, contact us at contact@otvista.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

Changes

We will update this notice when our website or processing changes. The date at the top shows when it was last revised.