Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

Data Collection on This Website

Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

2. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy.

Note on the Responsible Party

The responsible party for data processing on this website is:

OverStartup GmbH
SportPlatzWeg 19, 87471 Durach, Germany
Email: [email protected]
Phone: (+49) 1734395072

3. Data Collection on This Website

Cookies

Our web pages use cookies. Cookies are small text files that are stored on your device and saved by your browser. They serve to make our offer more user-friendly, effective and secure.

Types of Cookies

• Essential Cookies: These cookies are essential for the operation of the website and enable basic functions such as page navigation and access to secure areas.
• Functional Cookies: These cookies enable the website to provide enhanced functionality and personalization, such as language selection.
• Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.

Most browsers automatically accept cookies. However, you can configure your browser not to accept cookies or to notify you when a cookie is set.

Server Log Files

The page provider automatically collects and stores information in server log files that your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address

Contact Form

If you send us inquiries via the contact form, your information from the inquiry form including the contact details you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

SSL/TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser line.

4. Third Parties and External Services

Use of APIs and External Services

Our website uses external APIs and services to provide functions such as AI assistance and data analysis. These services may collect data when you use our website. Data processing is carried out within the framework of the respective privacy policies of third-party providers.

Content Delivery Networks (CDN)

We use content delivery networks to optimize the loading speed of our website. These services may process your IP address and other technical data to deliver content efficiently.

OpenAI API Integration

We use the OpenAI API for AI-powered functions on our website. When you use these functions, your requests are transmitted to OpenAI servers. OpenAI processes this data according to its own privacy policy. We do not store any personally identifiable information in connection with these API calls.

AI-Generated Content

Some content on this website, including blog posts, service descriptions, and documentation, has been created with the assistance of AI tools. All AI-generated content is reviewed, edited, and validated by our experienced team to ensure accuracy, quality, and relevance before publication. We use AI as a tool to enhance our efficiency while maintaining human expertise and quality control at the core of our content production.

Important points regarding AI-generated content:

• AI serves as an assistive tool, not a replacement for human expertise
• All content is reviewed and approved by humans before publication
• We value transparency about our working methods
• AI helps us deliver high-quality content more frequently
• We take full responsibility for all published content

5. Data Storage and Retention Periods

We store your personal data only as long as necessary to fulfill the purposes for which they were collected or as required by law:

• Server Logs: 7 days
• Contact Inquiries: 3 years after completion of correspondence
• Cookies: Varies by cookie type (see cookie settings)
• User Accounts: Until account deletion by the user
• Newsletter Data: Until unsubscribing from the newsletter

6. Your Rights under GDPR

You have the following rights under the General Data Protection Regulation (GDPR):

Right of Access (Art. 15 GDPR)

You have the right to receive free information at any time about your stored personal data, their origin and recipient, as well as the purpose of data processing.

Right to Rectification (Art. 16 GDPR)

You have the right to request the immediate correction of inaccurate personal data concerning you.

Right to Erasure (Art. 17 GDPR)

You have the right to request the immediate deletion of personal data concerning you, unless there are legal retention obligations.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing of your personal data if certain conditions are met.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit this data to another controller.

Right to Object (Art. 21 GDPR)

You have the right to object at any time to the processing of personal data concerning you based on Art. 6(1)(e) or (f) GDPR.

Withdrawal of Consent

If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. The legality of the processing until withdrawal remains unaffected.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

7. Social Media Integration

Our website may contain social media plugins (e.g., Facebook, Twitter, LinkedIn, Instagram). When you visit a page with social media plugins, a connection is established between your browser and the social media provider's servers. Data may be transmitted to the social media provider.

We have no control over the scope of data collected by social media providers. Information about the purpose and scope of data collection as well as further processing by social media providers can be found in their respective privacy policies.

8. Newsletter and Email Marketing

If you would like to subscribe to our newsletter, we need a valid email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter.

You can revoke your consent to the storage of data, the email address, and its use for sending the newsletter at any time, for example via the 'unsubscribe link' in the newsletter or by a message to us.

9. Payment Processing

For payment processing, we work with external payment service providers. When you make a payment via our website, your payment data is transmitted directly to the respective payment service provider. We do not store complete credit card information or bank data.

Payment service providers process your data in accordance with their own privacy policies and are responsible for the security of your payment information. We receive only the information necessary for order processing (e.g., payment confirmation, transaction ID).

10. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Should this change in the future, we will inform you accordingly and obtain your consent if legally required.

11. Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently received data from a child under 16, we will delete it immediately.

Parents or legal guardians who discover that their child has provided us with personal data without their consent should contact us so that we can take the necessary steps to delete this data.

12. Data Breach Notification

In the event of a data breach that is likely to result in a high risk to the rights and freedoms of natural persons, we will notify you without undue delay in accordance with Art. 34 GDPR. The notification will be sent via email and will include:

• A description of the nature of the data breach
• The likely consequences of the data breach
• The measures taken or proposed by us to address the data breach
• Contact details for further information

13. International Data Transfers

Your personal data may be transferred to servers outside the European Economic Area (EEA), particularly when using cloud services and APIs. We ensure that such transfers only occur when:

• An adequacy decision by the EU Commission exists for the third country
• Appropriate safeguards such as standard contractual clauses are in place
• Your explicit consent is obtained

For data transfers to the USA, we use service providers that are certified under the EU-US Data Privacy Framework or with whom we have concluded standard contractual clauses.

14. Changes to This Privacy Policy

We reserve the right to change this privacy policy to adapt it to changed legal situations or in case of changes to our services and data processing. We recommend that you review this privacy policy regularly.

In case of significant changes, we will inform you through a clear notice on our website or via email.