Privacy Policy

The responsible entity within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

‍Ourix
Evgeni Karb
Bertrand-Russell-Allee 8
18147 Rostock
Germany

Information on Data Processing
‍Data processed during the use of our website will be deleted or restricted as soon as the storage purpose no longer applies, provided that no legal retention obligations prevent deletion and unless otherwise specified in the processing procedures below.

‍Your Data Protection Rights
You can exercise the following rights at any time by contacting us using the contact details provided:
‍
● Access to your data stored with us and information on its processing
● Correction of inaccurate personal data
● Deletion of your stored data
● Restriction of data processing if we are not yet allowed to delete your data due to legal obligations
● Objection to the processing of your data by us
● Data portability if you have consented to data processing or have concluded a contract with us

If you have given us consent, you can revoke it at any time with effect for the future. You can also file a complaint with the supervisory authority responsible for you. Your responsible supervisory authority is determined based on your place of residence, workplace, or the alleged violation. A list of supervisory authorities (for the non-public sector) with addresses can be found here.

‍Purposes of Data Processing by the Responsible Entity and Third Parties
We process your personal data only for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those stated. We will only share your personal data with third parties if:
‍
● You have given your explicit consent
● Processing is necessary for the execution of a contract with you
● Processing is necessary to fulfill a legal obligation
● Processing is necessary to protect legitimate interests, and there is no reason to believe that you have an overriding interest in not disclosing your data

‍Collection of General Information When Visiting Our Website
When you access our website, general information is automatically collected via cookies. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, and similar data. This information does not allow any conclusions to be drawn about your identity.

This information is technically necessary to correctly deliver the content of websites you request and is mandatory when using the internet. Specifically, it is processed for the following purposes:
‍
● Ensuring a smooth connection to the website
● Ensuring the proper use of our website
● Evaluating system security and stability
● Administrative purposes

The processing of your personal data is based on our legitimate interest in data collection for the aforementioned purposes. We do not use your data to identify you personally. The only recipients of the data are the responsible entity and, if applicable, contracted processors. Anonymous information of this kind may be statistically analyzed to optimize our website and the technology behind it.
‍
‍Contact Form
If you contact us by email or via the contact form for any inquiries, you provide your voluntary consent for the purpose of contacting you. A valid email address is required for this, allowing us to attribute the request and respond to it. The provision of additional data is optional. The information you provide is stored for processing the request and possible follow-up questions. Once your inquiry has been processed, personal data will be automatically deleted.

‍Cookies and Consent Management
Our website uses cookies and comparable technologies (such as browser localStorage). We group them into three categories: Essential – required for the website to function and to store your privacy choices; these are always active and rely on § 25(2) TDDDG (no consent required). Analytics – help us understand how the website is used (Google Analytics, Microsoft Clarity). Marketing – used to measure campaigns and deliver relevant content (Meta Pixel).

Analytics and Marketing technologies are loaded only after you give your consent via our cookie banner. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can change or withdraw your consent at any time with effect for the future using the "Cookie settings" link in the footer of every page. Your preferences are stored locally in your browser (key: ourix_consent) and are not transmitted to us. An overview of the specific cookies and tools we use is provided in the table at the end of this policy.

‍Google Analytics (Analytics)
With your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies and similar identifiers to analyze your use of the website. Google Analytics 4 does not log full IP addresses; IP addresses are shortened/anonymized. The information generated is transmitted to Google and may be processed on servers operated by Google LLC in the USA. We use this information to evaluate website use, compile reports on website activity, and improve our website. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). For transfers to the USA, Google is certified under the EU-U.S. Data Privacy Framework and additionally relies on EU Standard Contractual Clauses. You can withdraw your consent at any time via "Cookie settings". More information: Google Privacy Policy.

‍Microsoft Clarity (Analytics)
With your consent, we use Microsoft Clarity, a product-analytics service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA; for the EEA: Microsoft Ireland Operations Limited, Dublin, Ireland). Clarity uses cookies and similar technologies to record interactions such as mouse movements, clicks, scrolling, and page views in aggregated, pseudonymized form (for example heatmaps and session replays) so we can understand and improve usability. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Data may be transferred to the USA on the basis of the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. More information: Microsoft Privacy Statement.

‍Meta Pixel / Facebook (Marketing)
With your consent, this website uses the Meta Pixel, a service provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland). The Meta Pixel uses cookies to measure the effectiveness of our advertising, to understand actions you take on our website, and to show you relevant ads on Meta platforms (Facebook, Instagram). For the collection and transfer of data via the pixel, we and Meta act as joint controllers within the meaning of Art. 26 GDPR. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Data may be transferred to Meta Platforms, Inc. in the USA on the basis of the EU-U.S. Data Privacy Framework and Standard Contractual Clauses. You can withdraw your consent at any time via "Cookie settings" and adjust your preferences in your Meta account. More information: Meta Privacy Policy.

‍Fonts (self-hosted)
To ensure a consistent and appealing presentation of our content, this website uses web fonts (such as Montserrat). All fonts are hosted by us and are loaded directly from our own domain. No connection to Google Fonts or any other third-party font server is established, and no data (such as your IP address) is transmitted to such third parties for the purpose of loading fonts.

‍Video Embeds (Wistia)
Some pages embed videos hosted by Wistia, Inc. (USA), delivered through the Embedly embedding service (owned by Wistia). When an embedded video is loaded or played, a connection to Wistia/Embedly is established and data (such as your IP address, device and browser information, and viewing data) may be processed to deliver the video and measure interaction. The legal basis is our legitimate interest in presenting our content effectively (Art. 6(1)(f) GDPR); where the embed stores or reads non-essential information on your device, we rely on your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). For details, see the Wistia Privacy Policy.

‍Newsletter, Contact and Booking Forms
If you subscribe to our newsletter or submit a form (for example to request resources or book a growth session), we process the data you provide (such as your email address) to handle your request and, where applicable, to send you the requested information. Newsletter and lead-form submissions are transmitted and processed via our automation provider Make (Make s.r.o., Czech Republic), acting as a processor on our behalf within the EU. Some pages additionally contain an embedded booking/contact form (forms.ourix.io); loading and submitting that form establishes a connection to that service and processes the information you enter. For newsletter sign-ups the legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. For other inquiries the legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or our legitimate interest (Art. 6(1)(f) GDPR).

‍Hosting
Our website is hosted by Vercel Inc. (USA) and its content-delivery infrastructure. When you visit our website, the hosting provider automatically processes server log files (including your IP address, date and time of access, the page requested, and browser/operating-system information) in order to deliver the website securely and reliably. The legal basis is our legitimate interest in the secure and efficient provision of our website (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with our hosting provider; where data is transferred to the USA, this is based on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. More information: Vercel Privacy Policy.

‍Changes to Our Privacy Policy
We reserve the right to update this privacy policy to reflect legal changes or modifications to our services. Your continued use of our website after any changes constitutes your acceptance of the updated privacy policy.

‍Questions About Data Protection
If you have any questions about data protection, please contact us via email: hey@ourix.io

‍User and Data Subject Rights
In accordance with the following data processing provisions, users and data subjects have the right to:
‍
● Confirmation of whether their data is being processed
● Access to processed data, additional information about data processing, and copies of the data (Art. 15 GDPR)
● Correction or completion of incorrect or incomplete data (Art. 16 GDPR)
● Immediate deletion of their data (Art. 17 GDPR) or, if further processing is required under Art. 17(3) GDPR, restriction of processing according to Art. 18 GDPR
● Receipt of their provided data and transmission of this data to other controllers (Art. 20 GDPR)
● File a complaint with the supervisory authority if they believe that their data is being processed in violation of data protection regulations (Art. 77 GDPR)

Additionally, the provider is required to notify all recipients of any corrections, deletions, or processing restrictions made in accordance with Art. 16, 17(1), and 18 GDPR, unless this notification is impossible or involves disproportionate effort. Users also have the right to be informed about these recipients.

Furthermore, users and data subjects have the right to object to future processing of their data under Art. 21 GDPR, especially regarding direct marketing purposes.