Privacy Policy
1. Privacy at a Glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified.
2. Data Collection on Our Website
Waitlist
If you join the waitlist, we store your e-mail address, the time of your request, the wording of the consent you ticked (as a version number), and — once you click the confirmation link — the time of that click and the IP address it came from. We use them for one purpose: to tell you by e-mail when Odo opens.
Legal basis and double opt-in
We rely on your consent (Art. 6(1)(a) GDPR), given by ticking a box that is kept apart from everything else on the page. Because anyone could type someone else's address, we send a message with a confirmation link and take you onto the list only after you press the button on the page it opens (double opt-in). The time and IP address of that click are stored as proof that you consented; we need that proof to show, if asked, that the e-mail was wanted (§ 7 UWG, Art. 7(1) GDPR). We also ask you to confirm that you are at least 18, because Odo is open to adults only.
Retention period
An address you do not confirm is deleted after 7 days. A confirmed address is kept until we have told you that Odo has opened or you leave the list, and in any case deleted after 24 months. Your consent can be withdrawn at any time with effect for the future: use the link in any message from us, or write to impressum@odo.club, and we delete your address. Withdrawal does not affect the lawfulness of the processing carried out before it.
Where your data is stored
The waitlist is stored on servers located within the European Union, regardless of the country you sign up from. Because we are established in Germany, your data is processed under the GDPR wherever you live.
Service providers
We use OVH (OVH SAS, France) for website hosting and e-mail. OVH processes your data on our behalf and on our instructions only, under a data processing agreement. We do not currently use any other processor for the waitlist. Should that change, we will update this policy before the new provider begins processing.
Recipients
Within our own organisation, the waitlist is seen only by the people who send the launch message. We do not sell your data, and we do not share it with other members or with any third party for their own purposes.
Is providing this data required?
Joining the waitlist is voluntary. Without an e-mail address we cannot tell you when Odo opens.
Earlier applications
Until we replaced it with the waitlist, this site had an application form. We no longer accept applications through it. Data from earlier applications is processed on the basis of Art. 6(1)(b) GDPR (steps taken at the applicant's request prior to a contract) and, for the two optional free-text answers, the applicant's explicit consent (Art. 9(2)(a) GDPR), which can be withdrawn at any time by e-mailing impressum@odo.club, whereupon we delete those answers. It is kept for no longer than 12 months after submission, then deleted, or earlier on request. It is stored in the EU and processed only by OVH as described above, and seen only by the people who review applications.
Local fonts
To ensure a consistent presentation of typefaces, this site uses local web fonts. These web fonts are embedded locally (on our own server). No connection to servers operated by Google or other third parties is established, which means no personal data (such as IP addresses) is transferred to third parties.
3. Your Rights
You have the right at any time to obtain information about your stored personal data (Art. 15 GDPR), its rectification (Art. 16), erasure (Art. 17) or the restriction of its processing (Art. 18), as well as the right to data portability (Art. 20). Where we process your data with your consent, as for the waitlist, you may withdraw it at any time with effect for the future. Where we process earlier applications on the basis of Art. 6(1)(b), you additionally have the right to object on grounds relating to your particular situation (Art. 21 GDPR). To exercise any of these rights, please contact us or our data protection officer at the addresses given below.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 20459 Hamburg
datenschutz-hamburg.de
4. Contact & Controller
The controller responsible for data processing is:
Kofi IT GmbH
Schopenstehl 13, 20095 Hamburg
Germany
E-Mail: impressum@odo.club
Data protection officer
We are in the process of appointing a data protection officer, as required once our app starts to collect special-category data (§ 38(1) sentence 2 BDSG). Contact details will be published here before that processing starts. Until then, please direct data protection enquiries to the address above.