This Privacy Policy is provided in both English and German. In case of any discrepancies or contradictions between the two versions, the German version shall prevail. The English version is provided for convenience only.

The GDPR (General Data Protection Regulation), known as the DSGVO (Datenschutz-Grundverordnung) in Germany, applies as the legal basis for data protection.

Privacy policy 

In the OKR Companion App, we attach great importance to data protection. The protection of your privacy is important to us. We would therefore like to take this opportunity to inform you about data protection when using the OKR Companion App.

1. Person responsible 

The controller responsible for data processing is 

DigitalWinners GmbH 

Hauptstrasse 30

83109 Grosskarolinenfeld, Germany

privacy-policy@digitalwinners.net.

You will find further information and contact options in the imprint.

2. General purposes of data processing

The "OKR Companion App" serves to provide tools for OKR coaches / masters 

to better advise or coach teams, companies or organizations. 

Data processing also serves this purpose.  

3. What data we process and why we do so 

3.1 Hosting and access data

We collect data in order to deliver the community website in the correct format and to improve the structure and user-friendliness of the community website. This may include information about which browser was used, which subpages were visited, the referrer (the website from which you accessed our offer), the date and time the page was accessed, the device used (e.g. mobile device or computer), the screen resolution used and similar data. 

The registration data you enter on our website and the IP timestamp at the time of registration are also stored and can be used for identification purposes in the event of suspected misuse. Furthermore, this data is not merged with other personal data. 

Insofar as we use access data to improve our offer (analysis of user behavior, identification of problems when using the site, etc.), the data is used in aggregated form and not assigned to specific persons. 

The legal basis for data processing in these cases is our legitimate interests as described above, Art. 6 para. 1 f) GDPR.

3.2 Management of the user account / fulfillment of our contractual obligations

To actively use the community website, you must create a user account on it. If you wish to do so, we need the personal data requested when you log in. When you log in later, only your e-mail address and the password you have chosen will be required. You can update your personal user data or delete your user account at any time.

As part of the use of the user account, we store the content you have uploaded and, if applicable, your login history. 

The data processed for the user account will be deleted when the user account is deleted. Some of the data stored in the account may continue to be stored for other reasons, such as content for which rights of use exist even after deletion of the user account, see the terms of use (https://www.okr.community/terms-of-service). 

The legal basis for the processing of this data is Art. 6 para. 1 b) GDPR, because this data is required so that we can fulfill our contractual obligations to you. 

3.3 Data that you publish or send

The data that you enter, publish and send yourself is processed on the community website. In particular, posts that you make are visible to all other users who have a member account on the community website and to us as the operator of the community website. This also applies to public profile information. 

The legal basis for the processing of this data is Art. 6 para. 1 b) GDPR, because this data processing is precisely the fulfillment of our contractual obligations to you. 

3.4 Newsletter 

With your consent or legal permission, we will send you reports on the work of the OKR community and similar content in a newsletter. 

To register for the newsletter, the data requested in the registration process is required. Registration for the newsletter is logged. After registering, you will receive a message to the email address provided asking you to confirm your registration ("double opt-in"). This is necessary so that third parties cannot register with your email address. 

We store the registration data for as long as it is required for sending the newsletter. We store the logging of the registration and the dispatch address as long as there is an interest in proving the consent originally given; as a rule, these are the limitation periods for civil law claims, i.e. a maximum of three years.  

You can revoke your consent to receive the newsletter at any time and thus unsubscribe from the newsletter. 

The legal basis for sending the newsletter is your consent in accordance with Art. 6 para. 1 a ), Art. 7 GDPR. The legal basis for logging the registration is our legitimate interest in proving that the newsletter was sent with your consent, Art. Art. 6 para. 1 f) GDPR.  

3.5 Contact us

If you contact us, for example by contact form, e-mail or telephone, we will process the data required to process the contact. For this purpose, an entry may also be created in our computer systems. 

We delete this data when it is no longer required and there are no legal retention periods to the contrary. 

The legal basis for this data processing is the implementation of pre-contractual measures that take place at your request or, if you are already our customer, the execution of the contract, Art. 6 para. 1 b) GDPR.

4. Third-party content that we integrate & data transfers

We do not sell or market any personal data to third parties. Personal data will only be passed on if you have given your express consent, if the transfer is required by law, if it is in our legitimate interests, or if the fulfillment of contractual relationships between us and you makes the transfer necessary. This applies in particular to companies that we use to fulfill our contractual obligations or to which we outsource services. 

Some of these service providers are based outside the European Union, in particular in the USA. In order to ensure adequate protection of your data, we conclude a contract with these companies for data processing on our behalf. If the companies are not certified according to the EU-US Data Privacy Framework, the contract for order processing includes the Standard Contractual Clauses (SCC) of the European Union, which have been approved by the EU Commission and are included in our agreements with these service providers. These clauses oblige the service providers to comply with a European level of data protection and thus guarantee the protection of your personal data.

The legal basis for the transfer of data to companies with which we have concluded a contract for data processing on our behalf is the performance of (pre-)contractual measures, Art. 6 para. 1 b) GDPR.

In detail: 

4.1 Operation of the website: Lindo.ai

We use Lindo.ai, a service for the creation, management and operation of websites including okr.community. Lindo.ai is operated by Hormo Studio LTD, Canada, and processes data to provide the services, improve the user experience and respond to legal requests. Personal data is stored in Canada and is not sold. Users have the option of deleting their data themselves. Further information on data protection can be found at: https://lindo.ai/privacy. 

4.2 N/A

4.3 Google Tag Manager

Our websites use the Google Tag Manager. This tool enables us to manage website tags via an interface. The Tag Manager only implements tags without collecting personal data. Data may be collected by other services that are activated via the Tag Manager, but this data is not used by the Tag Manager itself. Further information can be found in Google's privacy policy at: https://policies.google.com/privacy.

4.4 Google Maps

The websites use Google Maps, a map service from Google Inc. In order for interactive maps to be displayed, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. Further information on the handling of user data can be found in Google's privacy policy: https://www.google.com/policies/privacy/.

4.5 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We have activated IP anonymization so that your IP address is truncated. You can find more information on the use of data by Google Analytics at: https://www.google.com/analytics/terms/.

4.6 Google Fonts

Our websites use so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. You can find more information about Google Web Fonts at: https://developers.google.com/fonts/faq. 

4.7 Hotjar

We use Hotjar, an analytics service provided by Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville, St Julian's STJ 3141, Malta. Hotjar helps us to understand user behavior on our website by collecting data such as clicks, scrolling and interactions anonymously. This information helps us to improve user-friendliness. You can find more information on data protection at Hotjar at https://www.hotjar.com/legal/policies/privacy. 

4.8 YouTube

Videos from the provider YouTube are integrated on our website. The platform operator is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy. 

4.9 Vimeo

Videos from the provider Vimeo are integrated on our website. The platform is operated by Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Further information on data protection at Vimeo can be found at: https://vimeo.com/privacy. 

4.10 Stripe

Our website uses the payment service provider Stripe to process payments. The provider is Stripe, Inc, 510 Townsend Street, San Francisco, CA 94103, USA. Under certain circumstances, Stripe may pass on data to third parties if this is necessary for the fulfillment of the contract or if Stripe is legally obliged to do so. Further information on data protection at Stripe can be found at: https://stripe.com/de/privacy. 

4.11 Slido

To conduct surveys and live questions during events, we use the tool Slido, a product of Slido s.r.o., Bratislava, Slovakia. When using Slido, personal data such as e-mail address or name may be collected. You can find more information on data protection at Slido at: https://www.sli.do/terms#privacy-policy. 

4.12 Miro

We use the Miro service for collaborative work. Miro is provided by Miro, Inc, 201 Spear Street, Suite 1100, San Francisco, CA 94105, USA. Miro may collect and process data about the use of the service to ensure its functionality. Further information can be found in Miro's privacy policy: https://miro.com/legal/privacy-policy/. 

4.13 LinkedIn Pixel

We use the LinkedIn pixel on our websites. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This pixel helps us to analyze the activities on our website and to optimize marketing measures. You can find more information about LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy. 

4.14 Meta Pixel (Facebook, Instagram)

Our websites use the so-called meta pixel of the social network Facebook, which is operated by Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. The pixel allows us to track the behavior of users after they have been redirected to our website by clicking on a Facebook or Instagram ad. You can find more information on data protection at Meta at: https://www.facebook.com/privacy/explanation. 

4.15 Google Ads

Our websites use Google Ads, a service provided by Google Inc. to place advertisements. By using Google Ads, we can place targeted ads and measure success. You can find more information on the use of data by Google Ads at: https://policies.google.com/privacy. 

4.16 ActiveCampaign

We use ActiveCampaign, a product of ActiveCampaign, LLC, 1 N Dearborn, 5th Floor, Chicago, IL 60602, USA, to send our newsletter and manage our customer relationships. The data collected during registration for the newsletter is stored on ActiveCampaign's servers. Further information on data protection at ActiveCampaign can be found at: https://www.activecampaign.com/privacy-policy.

4.17 Calendly

Our website uses Calendly, an appointment scheduling tool provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. When using Calendly, data such as name, e-mail address and appointment requests are processed to enable appointment scheduling. Data may be transferred to the USA. Further information on data processing by Calendly can be found at: https://calendly.com/privacy.

4.18 Microsoft Teams

For online meetings and video conferences, we use Microsoft Teams, a product of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Teams processes data such as name, e-mail address and communication content. The data may be transferred to the USA and is subject to Microsoft's data protection regulations. Further information can be found at https://privacy.microsoft.com/. 

4.19 Zoom

For video conferences and online meetings, we use Zoom, provided by Zoom Video Communications, Inc, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. When using Zoom, personal data such as name, e-mail address and communication content may be processed and transferred to the USA. Details can be found at https://zoom.us/privacy,

4.20 ChatGPT from OpenAI

Our website uses ChatGPT, an AI-based text generator from OpenAI, L.L.C., based in San Francisco, USA. ChatGPT enables interactive conversations and the automated answering of questions. During use, text entries can be processed and temporarily stored in order to generate a corresponding response. OpenAI complies with the applicable data protection regulations. Further information on data processing can be found at https://openai.com/privacy.

4.21 JotForm

We use JotForm, a service for creating online forms, provided by JotForm Inc, 111 Pine St. Suite 1815, San Francisco, CA 94111, USA. JotForm enables us to collect and process data such as names, e-mail addresses and other form content. Data may be transferred to the USA. JotForm adheres to data protection regulations to ensure the protection of personal data. Further information can be found at https://www.jotform.com/privacy/.

4.22 Eventbrite

We use Eventbrite, a platform for the creation, management and marketing of events, provided by Eventbrite, Inc, 535 Mission Street, San Francisco, CA 94105, USA. When using Eventbrite, data such as name, e-mail address and payment information may be collected to enable registration and participation in events. Data may be transferred to the USA. Further information on data processing can be found at https://www.eventbrite.com/support/articles/de/Troubleshooting/datenschutzerklarung.

4.23 pdfRest from Datalogics

We use pdfRest, a product from Datalogics, Inc. that provides tools for editing, converting and managing PDF files. We provide pdfRest with personal data such as name and e-mail in order to watermark and password-protect PDF files. Datalogics stores this data in Canada and does not pass it on to third parties. In addition, pdfRest uses Google Analytics for anonymous traffic analysis. Users have the right to have their personal data deleted. Further information on data protection can be found at https://pdfrest.com/privacypolicy. 

5. Storage duration, deletion and blocking of data - General information

5.1 Unless specified separately for individual data, we will delete data if and insofar as it is no longer required for its intended purpose. 

5.2 In some cases, the legislator provides for the retention of data, for example under tax or commercial law. In these cases, the data will only be stored by us for these legal purposes, but will not be processed in any other way and will be deleted after the statutory retention period has expired.  

6. How we use cookies

We use cookies to optimize and personalize the community website.  We use so-called session cookies.  

Cookies contain an identifier that can be read by the community website and enables your browser to be assigned. This allows us to distinguish you from other users. We use this technology in particular to determine that you are authorized to access the member area of the site and to deliver personalized content.  

Before cookies are set for the first time, you have the opportunity to determine which cookies the site may set. Please note that cookies necessary for the operation of the site cannot be deselected. 

You can also influence the handling of cookies by making the appropriate settings in your browser. For example, it is possible to accept or reject cookies in general or on a case-by-case basis. For more information on these settings, please refer to your browser documentation. 

7. How we ensure data security

We protect the security of your data. To this end, we take extensive technical and organizational measures.  

8. Your rights

Under the applicable laws, you have various rights regarding your personal data. If you wish to assert these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address given in section 1.

Below you will find an overview of your rights.

• You have the right to withdraw your consent at any time and with immediate effect.

• You have the right to information about the personal data stored about you.

• You have the right to data portability. This means that we will transfer your data in a machine-readable format within the statutory period.

• You have the right to rectification of your personal data.

• You have the right to have your personal data deleted.

• You have the right to restrict the processing of your personal data.

• You have the right to object to the processing of your personal data.

• You have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you is unlawful.

9. No automated decision-making

Automated decision-making based on the personal data collected on this community website does not take place.