WerkWorks
DE Contact
Menu

OpenVizPilot Privacy Notice

Last updated: September 16, 2026

1. Controller

The controller under the General Data Protection Regulation (GDPR) for the processing by WerkWorks described in this notice is:

Mathias Werk
Sole proprietor
Auf der Koppel 4​6
2​23​99 Hamburg
Germany
Email: info [at] werkworks [punkt] de

WerkWorks is the brand under which Mathias Werk offers the OpenVizPilot product.

2. Scope: operation on customer infrastructure

OpenVizPilot is a Tableau dashboard extension with an AI chat. The software runs entirely on the customer's infrastructure: the extension inside the Tableau dashboard, a Node.js middleware, and a database. The customer configures the AI model endpoint (OpenAI-compatible), optionally an identity provider (OIDC), optionally Tableau Server (Connected App, REST and Metadata API), and optionally MCP services.

For all data processed within this installation — in particular dashboard data, chat questions and answers, accounts, approvals, usage statistics, and personal facts stored in the Enterprise edition — the respective customer alone is the controller under the GDPR. WerkWorks has no access to this data and is not involved in this processing. Requests regarding this processing must be directed to the operator of the respective installation, not to WerkWorks.

3. Data WerkWorks itself receives: license heartbeat

Only while a valid Enterprise license is active, the installation sends a license heartbeat once daily to https://werkworks.de/ovp-lizenz/heartbeat.php. Only the following is transmitted:

  • a randomly generated installation UUID
  • the signed license key (contains licensee, license ID, tier, enabled features and term)
  • the product version
  • the timestamp of the transmission
  • the number of active users over the last 30 days
  • the number of dashboards

Not transmitted are chat contents, dashboard data, dashboard names, or usernames or user IDs. The IP address and user agent of the requesting system are not stored. A single record is kept per installation and is overwritten on each transmission; no history of prior transmissions is kept.

Purpose and legal basis: administration of the Enterprise license (performance of a contract, Art. 6(1)(b) GDPR). The heartbeat is a fixed technical part of the Enterprise license, cannot be disabled, and is part of the license terms. The Core edition does not send a heartbeat and transmits no data to WerkWorks.

Retention: the heartbeat record for an installation is kept for up to 12 months after the associated license ends and is then deleted. This period is set by WerkWorks as the provider.

4. Support requests

When a customer contacts support by email, WerkWorks processes the data provided (sender address, content of the request, and any attached excerpts such as log snippets) for the duration of handling the request. Legal basis: Art. 6(1)(b) or (f) GDPR.

5. GitHub

Issues and the wiki for OpenVizPilot are hosted on GitHub (github.com/bl0rb/OpenVizPilot). Processing of personal data by GitHub, Inc. when using these services is governed by GitHub's privacy statement (docs.github.com/.../github-privacy-statement).

6. Data subject rights

With respect to the controller named in Section 1, and regarding the data WerkWorks itself processes (Sections 3–5), you have the following rights:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)

To exercise these rights, an informal message to info [at] werkworks [punkt] de is sufficient. Rights regarding data processed within a customer installation (Section 2) must be exercised against that customer as the controller.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information: datenschutz.hamburg.de

7. Contact

For questions about this privacy notice, please contact: info [at] werkworks [punkt] de

8. Privacy of the WerkWorks website

For the WerkWorks website itself (werkworks.de), independent of the OpenVizPilot product, the general privacy policy applies: werkworks.de/datenschutz/ (DE).