Data protection

When you visit our website, your surfing behavior may be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in this privacy policy.

You can object to this analysis. We will inform you about the objection options in this privacy policy.

The controller responsible for data processing on this website is named in the legal notice.

The "controller" is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

The use of contact data published in the context of the imprint obligation to send unsolicited advertising and information materials is hereby prohibited, as is the exception of recital 47 of the GDPR. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of other advertising information, such as spam e-mails.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - the server log files must be recorded for this purpose.

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us via CRM (see below) for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Calendly
We also use the online booking system Calendly. The service provider is the American company Calendly Inc, 115 E. Main St., Ste A1B, Buford, GA 30518, USA.
Calendly also processes your data in the USA, among other places. Calendly is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Calendly also uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Calendly undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.
You can find more information about the standard contractual clauses at Calendly in the data processing conditions at https://calendly.com/dpa.
You can find out more about the data that is processed through the use of Calendly in the privacy policy at https://calendly.com/privacy.

Order processing contract (AVV) Calendly

We have concluded a data processing agreement (DPA) with Calendly in accordance with Article 28 of the General Data Protection Regulation (GDPR). This contract is required by law because Calendly processes personal data on our behalf. It clarifies that Calendly may only process data that it receives from us in accordance with our instructions and must comply with the GDPR. You can find the link to the data processing agreement (DPA) at https://calendly.com/dpa.

For the comment function on this page, in addition to your comment, information about the time the comment was created, your e-mail address and, if you are not posting anonymously, the user name you have chosen will be saved.

Subscribing to comments

As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to check whether you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info mails. In this case, the data entered when subscribing to comments will be deleted; however, if you have transmitted this data to us for other purposes and elsewhere (e.g. newsletter subscription), it will remain with us.

Storage duration of comments

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).

Legal basis

Comments are stored on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations already carried out remains unaffected by the revocation.

LinkedIn plugin
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

Further information on this can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

Facebook Pixel
Our website uses the visitor action pixel from Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to measure conversions.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This allows Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.

You can find more information on protecting your privacy in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

Facebook Custom Audience
If you contact us (see Newsletter (Mailchimp) or have been added to our CRM (see OnePageCRM)), we may use the data provided to us, in particular your email for Custom Audiences / LookALike lists on Facebook. You can deactivate the remarketing function "Custom Audiences" in the settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. We can transfer newsletter data to our CRM (see below).
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

MailChimp
This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service that can be used to organize and analyze the sending of newsletters, among other things. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), this data is stored on MailChimp's servers in the USA.
MailChimp is certified in accordance with the "EU-US Privacy Shield". The "Privacy Shield" is an agreement between the European Union (EU) and the USA, which is intended to ensure compliance with European data protection standards in the USA.
With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you do not want MailChimp to analyze your data, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
Data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. email addresses for the member area) remain unaffected by this.
You can find more details in MailChimp's privacy policy at: https://mailchimp.com/legal/terms/.
Conclusion of a data processing agreement.
We have concluded a so-called "data processing agreement" with MailChimp, in which we oblige MailChimp to protect our customers' data and not to pass it on to third parties. This agreement can be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.

Individual e-mails in accordance with Section 47 GDPR
Recital 47 of the General Data Protection Regulation expressly states that the law also recognizes the processing of personal data for the purpose of direct marketing as a legitimate interest of the controller. Oplayo will only write to you / your company if there is a legitimate interest in our offers. You will always find an opt-out option to stop receiving information from us by email. You object to processing for advertising purposes. Your data according to "Individual e-mails according to § 47 DSGVO" will only be stored by us as e-mails. There is no further recording, e.g. via CRM etc. This does not apply if you reply to us and express an interest. In this case, data may be recorded via CRM.

Plugins and tools:

YouTube
Our website uses plugins from the Google-operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Vimeo
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.
You can find further information on the handling of user data in Vimeo's privacy policy at: https://vimeo.com/privacy.

LeadInfo data collection
We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits from companies to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. "leadinfo.com") in order to correlate IP addresses with companies and improve services. Further general information can be found at www.leadinfo.com. According to the manufacturer, LeadInfo is 100% GDPR-compliant (more: https://www.leadinfo.com/de/rechtliches/dsgvo/). On this page: https://www.leadinfo.com/en/opt-out you have an opt-out option. If you opt out, your data will no longer be collected by Leadinfo.

Microsoft Clarity
We use the "Microsoft Clarity" service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter "Microsoft") on the website for statistical analysis of user behaviour and for optimization and marketing purposes various user information collected and stored. This information, which can never be traced back to individuals, includes time zone settings, operating system and platform, the geographical origin of the page view, the origin of the redirect if the user is redirected to our site, the duration of visits to certain pages and information about website interaction (e.g. scrolling, clicks and mouse-overs). Pseudonymized user profiles can be created and evaluated from this data for the same purpose. Cookies are used for collection and analysis (see above under Cookies). The data collected with Microsoft technologies will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.
Data is transferred to Microsoft Ireland Operations Ltd, South County Business Park, One Microsoft Place, Carmanhall And Leopardstown, Dublin, D18 P521, Ireland. The legal basis for the transfer of data to Microsoft Ireland Operations Ltd. is your consent in accordance with Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, as the data recipient has undertaken to comply with the data processing principles of the Data Pricacy Framework (DPF). To contact the Data Protection Officer of Microsoft Ireland Operations Ltd., please use the web form: https://www.microsoft.com/en-us/concern/privacyrequest-msa or call +353 1 706 3117
We have concluded an order processing contract with Microsoft, in which we oblige Microsoft to protect our customers' data and not to pass it on to third parties.
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Microsoft Clarity will not be used during your visit to our website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" (Cookiebot) provided on the website.
For more information about Microsoft Clarity's privacy policy, please visit https://clarity.microsoft.com/terms

OnePageCRM
Anyone who has had business dealings (commissions) or informative exchanges (newsletters, personal inquiries / participation in workshops etc.) with us in recent years or sends us inquiries has / will have their data recorded / recorded in our CRM. The CRM is from the company Novus Via Limited t/a OnePageCRM in Ireland with company number 457640. office address: Unit 109, Business Innovation Centre, Upper Newcastle, Galway, Ireland.
You can find out more about the GDPR here: https://www.onepagecrm.com/gdpr.
By linking CRM to newsletter (Mailchimp see above), you will first receive the next Oplayo newsletter. You can unsubscribe from the newsletter list for each newsletter.
If you wish to be removed from our CRM, please send us an e-mail to info@oplayo.com.

SoundCloud
Plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom) may be integrated on our pages. You can recognize the SoundCloud plugins by the SoundCloud logo on the affected pages.
When you visit our pages, a direct connection is established between your browser and the SoundCloud server after activating the plugin. SoundCloud then receives the information that you have visited our site with your IP address. If you click on the "Like button" or "Share button" while you are logged into your SoundCloud user account, you can link and/or share the content of our pages with your SoundCloud profile. This allows SoundCloud to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by SoundCloud. Further information on this can be found in SoundCloud's privacy policy at: https://soundcloud.com/pages/privacy.
If you do not want SoundCloud to associate your visit to our pages with your SoundCloud user account, please log out of your SoundCloud user account before activating the SoundCloud plugin content.

FastBill
If you have business dealings with us, we have recorded some data in FastBill since October 1, 2017. FastBill can be reached at: FastBill GmbH, Wildunger Str. 6, 60487 Frankfurt am Main.
You can find out more about data protection at FastBill here: https://www.fastbill.com/datenschutz.

BND (Federal Intelligence Service)
According to a ruling by the Federal Administrative Court in Leipzig, the BND is allowed to intercept data without cause. Information on the ruling from May 30, 2018 after 10:30 p.m.: https://www.heise.de/newsticker/meldung/Gerichtsurteil-BND-darf-weiterhin-Internet-Knoten-De-CIX-anzapfen-4061494.htm and contact the BND and its data protection officer here:

https://www.bnd.bund.de/DE/Service/Datenschutz/datenschutz_node.html.

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both its website and its advertising.

IP anonymization - automatic under GA4

We have activated the IP anonymization function on this website (GA4 does this automatically). As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can also prevent the storage of cookies and cookiebot by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics with Google Analytics

This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

Google Maps
This site uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Google Web Fonts
A court in Munich ruled at the beginning of 2022: Anyone using the online version of Google Fonts - a directory of fonts - may be in breach of the GDPR. We have removed the "online fonts" from our website as a preventive measure.