<- back

Privacy Policy

This policy explains how we process personal data when you visit oari.io, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Last updated: September 2026

1. Controller

Name
Marc-Emanuel Otto and Milutin Popovic GbR
Address
Brienner Str. 45/a-d, 80333 Munich, Germany
E-mail
[email protected]
Phone
+49 156 79799056

2. No cookies, no tracking

This website does not set cookies of its own and does not use analytics, advertising, or social-media tracking. All scripts, styles, and fonts are served from our own server through Cloudflare (see section 3). No other third-party content is loaded.

3. Hosting, Cloudflare, and server logs

When you visit this website, your browser automatically sends technical data so the page can be delivered. This may be recorded in log files:

All requests pass through Cloudflare, a content delivery and security network. Cloudflare delivers cached copies of the website from servers close to you and protects it against attacks and abuse. To do this, Cloudflare processes the data listed above on our behalf, under a data processing agreement pursuant to Art. 28 GDPR.

Cloudflare also asks your browser to report failed connections to this website (Network Error Logging), so outages can be detected. If Cloudflare detects suspicious traffic, it may set a strictly necessary security cookie such as __cf_bm for up to 30 minutes to tell people apart from bots.

Processor
Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
Transfer safeguard
EU-U.S. Data Privacy Framework (Art. 45 GDPR) and EU Standard Contractual Clauses (Art. 46(2)(c) GDPR)
More information
cloudflare.com/privacypolicy

We process this data to deliver the website reliably and keep it secure, based on our legitimate interest under Art. 6(1)(f) GDPR. Security cookies and error reports are strictly necessary for this purpose (§ 25(2) no. 2 TDDDG). Log data is deleted after 30 days at the latest, unless it is needed to investigate a specific security incident.

4. Contact form

If you send us a message through the contact form, we collect your name, e-mail address, company name (optional), and message. We use this data only to answer your enquiry and, where relevant, to take steps towards a contract with you (Art. 6(1)(b) GDPR) or based on our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).

The form is only sent when you press send. Providing the data is voluntary, but we cannot answer without an e-mail address.

5. HubSpot

Contact form submissions are transmitted directly to HubSpot and stored in our HubSpot CRM. HubSpot processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. No HubSpot tracking code or cookies are used on this website.

Processor
HubSpot Ireland Ltd., 1 Sir John Rogerson's Quay, Dublin 2, Ireland, and its parent HubSpot, Inc., Cambridge, MA, USA
Transfer safeguard
EU-U.S. Data Privacy Framework (Art. 45 GDPR) and EU Standard Contractual Clauses (Art. 46(2)(c) GDPR)
More information
legal.hubspot.com/privacy-policy

6. Retention

We keep contact form data for as long as needed to handle your enquiry and any resulting business relationship. After that we delete it, unless statutory retention periods under commercial or tax law require us to keep it for up to 6 or 10 years.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). To exercise them, e-mail [email protected].

Right to object (Art. 21 GDPR): where we process your data based on legitimate interest, you may object at any time for reasons arising from your particular situation.

8. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. Changes

We update this policy when our website or legal requirements change. The date at the top shows the latest version.