Privacy Policy

Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

Purpose

Delivering the site, debugging, and defending the server against attacks.

Data

IP address, date and time, requested URL, HTTP status, bytes transferred, referrer, browser and device string (user agent).

Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest is running the site securely.

Retention

Rotated log files are deleted after 30 days. The active file is rotated once it reaches 50 MB.

Transfer outside the EU

No transfer outside the EU or EEA.

Self-hosted at umami.olio.solutions. Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

Purpose

Traffic measurement: how many people open which page. Umami works without cookies and without cross-device recognition.

Data

Page viewed, referrer, screen size, browser, operating system, country. Umami derives a pseudonymous session ID from the IP address and browser string; the IP address itself is not stored.

Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest is understanding which content gets read. Because nothing is stored on or read from your device, §25(1) TDDDG does not apply, which is why this script loads before you make a choice in the cookie banner.

Retention

Individual page views stay stored with their session ID until we delete them. No automatic deletion period is configured at the moment.

Transfer outside the EU

No transfer outside the EU or EEA.

PostHog, Inc., via its EU cloud (eu.i.posthog.com), data centre in Germany

Purpose

Product analytics: the paths visitors take through the site, so we can improve pages and calculators.

Data

Pseudonymous visitor ID, pages viewed, timestamps, referrer, browser and device details.

Legal basis

Art. 6(1)(a) GDPR and §25(1) TDDDG, meaning your consent alone. Without it PostHog is never loaded.

Retention

Up to 12 months. If you withdraw consent, the identifiers stored on your device are deleted immediately.

Transfer outside the EU

No transfer outside the EU or EEA.

Provider's privacy policy

Apollo.io (ZenLeads, Inc.), USA

Purpose

Company identification: the IP address is used to estimate which company is visiting, so we can approach the right contact. No advertising is served.

Data

IP address, the company and location derived from it, pages viewed, timestamps, referrer.

Legal basis

Art. 6(1)(a) GDPR and §25(1) TDDDG, meaning your consent alone. Without it the script is never loaded.

Retention

Per the provider's own schedule, see their privacy policy.

Transfer outside the EU

The provider is based in the USA and is certified under the EU-US Data Privacy Framework. The transfer therefore rests first on the European Commission adequacy decision of 10 July 2023, backed by standard contractual clauses under Art. 46(2)(c) GDPR so that it stays covered should the adequacy decision fall away.

Provider's privacy policy

Cal.com, Inc., USA

Purpose

Booking intro calls. Cal.com is not embedded in our site: a connection to Cal.com is only made once you click a booking link and leave olio.solutions.

Data

Whatever you enter in the booking form (name, email address, topic), plus connection data such as your IP address.

Legal basis

Art. 6(1)(b) GDPR, since the booking initiates pre-contractual steps at your request.

Retention

Until the matter is settled, then within statutory retention periods.

Transfer outside the EU

Cal.com, Inc. is based in the USA and is not certified under the EU-US Data Privacy Framework. We transfer nothing there ourselves: only when you click a booking link do you leave olio.solutions, and from that moment Cal.com is responsible for your data under its own privacy policy. If you would rather not, email us instead and we will arrange the time by hand.

Provider's privacy policy

Processed by us, together with our email provider.

Purpose

Answering your enquiry.

Data

Your email address, your name, and whatever you write to us.

Legal basis

Art. 6(1)(b) GDPR for enquiries about working together, otherwise Art. 6(1)(f) GDPR.

Retention

Until your matter is settled. Business correspondence is subject to commercial and tax retention periods of up to 10 years.

Transfer outside the EU

No transfer outside the EU or EEA.

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland

Purpose

We run a company page on LinkedIn to show what we do and to talk to people who are interested. Nothing from LinkedIn loads on olio.solutions itself: our links there are ordinary links, and a connection is only made once you click one.

Data

When you visit our LinkedIn page, LinkedIn processes your interactions (content viewed, clicks), device details (IP address, operating system, browser, language setting, cookie data), and profile details (job function, country, industry, seniority, company size). All we receive from that is aggregated statistics, no individual records and no names.

Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest is presenting our company and understanding which posts land.

Retention

The statistics reach us only in aggregate and over the periods LinkedIn sets. How long LinkedIn keeps the underlying data is LinkedIn's decision.

Transfer outside the EU

LinkedIn Ireland is based in the EU. Passing data on to its US parent, LinkedIn Corporation, is LinkedIn's responsibility alone; it relies on the adequacy decision for the EU-US Data Privacy Framework, backed by standard contractual clauses.

Who is responsible

We are jointly responsible with LinkedIn Ireland for collecting this data and passing it to LinkedIn (Art. 26 GDPR). Everything LinkedIn does with it afterwards is LinkedIn's responsibility alone. You can exercise access, erasure, and objection with us or directly with LinkedIn; going to LinkedIn is faster, because the individual records only exist there. None of this limits the rights listed above.

Our company pageProvider's privacy policyJoint controller arrangement