Datenschutzerklärung
Privacy Policy.
How we handle personal data on oao.co. Short, because the site collects very little.
Controller
OAO GmbH, Tölzer Str. 1, 82031 Grünwald, Germany. For anything about your data: privacy@oao.co. More about us in the imprint.
What this site does not do
This website sets no cookies and stores nothing in your browser. It uses no analytics, tracking or advertising, and no social media plugins. Fonts, images and videos come from our own hosting, not from third-party servers.
Hosting
The website is delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. To deliver the pages and protect them from attacks, Cloudflare processes the technical data every visit produces: your IP address, the date and time, the page requested, the referring page and your browser’s identification. Legal basis: our legitimate interest in a secure, working website (Art. 6 (1)(f) GDPR).
Cloudflare acts as our processor under a data processing agreement. Data may be processed in the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework, and the agreement includes the EU Standard Contractual Clauses. We do not keep access logs ourselves.
When you email us
If you write to us, we process your email address, your name and what you write, to answer you and, where it applies, to prepare or perform a contract. Legal basis: Art. 6 (1)(b) GDPR, otherwise our legitimate interest in answering (Art. 6 (1)(f) GDPR). Our email runs on Microsoft 365 (Microsoft Ireland Operations Ltd.) as our processor. We delete messages when they are no longer needed, unless German commercial or tax law requires us to keep them for longer.
Links to other sites
We link to LinkedIn, the World Economic Forum, our game at harry.oao.co and the sign-in to our platform. Once you follow a link to another provider, that provider’s privacy policy applies. The game works like this website (same hosting, no cookies, no tracking), so this policy covers it too. The OAO platform has its own privacy notice.
Your rights
You can ask us for access to your data (Art. 15 GDPR), its correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18) and a copy to take elsewhere (Art. 20). You can object at any time to processing based on our legitimate interest (Art. 21). Write to privacy@oao.co.
You can also complain to a data protection authority. Ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Last updated
October 2026. We update this policy whenever the website changes how it handles data.