Privacy Policy

Privacy Policy

1. Controller

The entity responsible for processing your personal data under the terms of the General Data Protection Regulation (GDPR) is:
OT Consulting UG (haftungsbeschränkt)
Anton-Bruckner Str. 1a
85276 Pfaffenhofen, Germany
Phone: +49 179-2947548
Email: datenschutz@otconsulting.de

2. General Information on Data Processing

We respect your privacy and take the protection of your personal data very seriously. We process your data exclusively based on the applicable legal provisions, in particular the GDPR and the German Federal Data Protection Act (BDSG). This Privacy Policy informs you about which data we collect in our coaching app, for what purposes we use it, the legal basis for doing so, and what rights you have regarding your data.

3. Collection and Processing of Personal Data

a) Types of Data

We process the following categories of personal data, as provided by you or generated by your use of the app:

  • Contact details (e.g., name, email address, username if applicable)
  • App usage data (e.g., daily reflections, goals set, progress reports)
  • Device and log information (e.g., IP address, operating system, device type, access time)
  • Optional information on personal preferences, professional goals, and challenges, provided voluntarily by the user

b) Purposes of Processing

We process your data to:

  • Provide the coaching functions of the app
  • Send daily reminders, prompts, and personalized recommendations
  • Create statistics, evaluations, and progress reports to map your learning and growth process
  • Improve the app by gaining insights from user behavior
  • Handle support requests and ensure smooth communication with you

c) Legal Basis of Processing

The processing of your data is based on:

  • Your consent under Art. 6(1)(a) GDPR, if you voluntarily provide personal entries or enable push notifications
  • Art. 6(1)(b) GDPR, where processing is necessary to fulfill a contract or take steps prior to entering into a contract (e.g., providing app services)
  • Art. 6(1)(f) GDPR to safeguard our legitimate interests, such as improving app functionalities and ensuring IT security

4. Disclosure of Data

We will only disclose your personal data to third parties if:

  • You have given your explicit consent,
  • it is necessary to fulfill our contractual obligations,
  • we are legally obliged to do so, or
  • it is permissible on the basis of our legitimate interests (e.g., to IT service providers for technical provision and maintenance).

5. Storage Period

We store your personal data only for as long as is necessary to achieve the purposes mentioned above or as required by statutory retention periods. After that, the data will be promptly deleted or anonymized.

6. Data Security

We implement technical and organizational security measures to protect your data from manipulation, loss, destruction, or unauthorized access by third parties. Our security measures are regularly updated in accordance with technological progress.

7. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

  • Right of Access (Art. 15 GDPR): You have the right to request information about the personal data we hold about you.
  • Right to Rectification (Art. 16 GDPR): If your data is incorrect or incomplete, you have the right to request rectification.
  • Right to Erasure (Art. 17 GDPR): Under certain conditions, you have the right to request the deletion of your data.
  • Right to Restriction of Processing (Art. 18 GDPR): Under certain conditions, you can request the restriction of processing your data.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format or to request the transfer of your data to another controller.
  • Right to Object (Art. 21 GDPR): For reasons arising from your particular situation, you have the right to object to the processing of your data that is based on a legitimate interest.
  • Right to Withdraw Consent (Art. 7(3) GDPR): If you have given consent for data processing, you can withdraw it at any time with future effect.

To exercise your rights, please contact the address listed under “Controller.”

8. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a competent data protection supervisory authority about the processing of your personal data. In Germany, this is generally the state data protection authority responsible for your place of residence.

9. Changes to this Privacy Policy

We reserve the right to adjust this Privacy Policy from time to time to ensure it complies with current legal requirements or to reflect changes in our services. The most current version of the Privacy Policy will apply to your next visit.

Last updated: December 16, 2024