Privacy Policy

‍Privacy Policy – oee.ai

Controller

ifp Software GmbH

Kalverbenden 31 52066 Aachen, Germany

E-Mail: privacy@oee.ai

‍

‍1. General:

‍Protecting your personal data is important to us. This privacy policy explains what data we collect on our website, how we use it, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

‍2. Hosting and provision of this website:

‍This website is hosted and provided by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Webflow acts as a processor on our behalf on the basis of Webflow's Data Processing Addendum, which forms part of our contract via Webflow's Terms of Service. For this purpose, Webflow engages Amazon Web Services, Inc. (hosting and cloud infrastructure, USA) and Cloudflare, Inc. (content delivery network, USA), among others, as sub-processors.

When you access this website, technical connection data — including your IP address — is processed automatically. This processing is technically necessary in order to deliver the website and to operate it securely. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in the secure and reliable operation of this website). The data is processed exclusively by Webflow as part of the hosting service; we ourselves have no access to server log files. It is deleted once it is no longer required to ensure operational security.

Webflow's server infrastructure is located in the United States; static content is delivered via content delivery network data centres, which may also be located within the EU. Using this website therefore involves transfers of personal data to the United States. Webflow is certified under the EU-U.S. Data Privacy Framework, and transfers accordingly take place on the basis of the European Commission's adequacy decision (Art. 45 GDPR).

We also use Webflow as the design and content management system for creating and maintaining the content of this website.

‍3. Newsletter – beehiiv:

‍If you subscribe to our newsletter, your email address is transmitted to and stored by beehiiv Inc., 228 Park Avenue #2329976, New York, NY 10003, USA, which sends the newsletter on our behalf. Processing is based on your consent (Art. 6(1)(a) GDPR). Transfers to the United States are based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). You may withdraw your consent at any time by unsubscribing via the link in any newsletter. To protect the sign-up form against automated access, beehiiv sets a cookie (_pxvid), but only if you have consented to the “Analysis” category in the cookie settings.

‍4. Cookies and consent management – Consent Pro:

‍We use technically necessary cookies and similar storage technologies on the basis of Section 25(2) No. 2 TDDDG. All other cookies and services are only activated with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). To manage your consent, we use Consent Pro by Finsweet Inc., 1001A E Harmony Rd. #15, Fort Collins, CO 80525, USA. Your choice is stored in a cookie in your browser for 365 days. When the consent banner loads, your IP address is technically transmitted to Finsweet's servers; transfers to the United States are based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). The legal basis for storing your consent decision is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR. You can change or withdraw your choice at any time via the cookie settings in the footer.

‍5. Web analytics – Google Analytics:

‍If you have consented to the “Analysis” category in the cookie settings, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics sets cookies that allow us to analyse how our website is used, for example pages visited, time spent on the site, device type, browser and approximate region. Google Analytics 4 does not store IP addresses. We use these analyses solely to improve our website. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings in the footer.

Google processes the data as a processor on the basis of the Google Ads Data Processing Terms. Data may be transferred to Google LLC in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework, and transfers therefore take place on the basis of the European Commission's adequacy decision (Art. 45 GDPR). Event data is deleted after 14 months. The cookies _ga and _ga_JH97XVS05F are deleted after 2 years at the latest.

We use Google Tag Manager, provided by Google Ireland Limited, to control Google Analytics. Tag Manager itself does not set cookies and only loads Google Analytics after you have given your consent. When Tag Manager loads, your IP address is technically transmitted to Google. The legal basis for this is Art. 6(1)(f) GDPR (our legitimate interest in the technical management of our website).

‍6. Videos – YouTube:

‍On some pages we embed videos from YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded once you have consented to the “Marketing” category in the cookie settings. After that, data such as your IP address and information about the video you are watching is transmitted to Google, and YouTube sets its own cookies. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

‍7. Contact forms, appointment booking and spam protection: ‍

If you contact us via a form on our website or request a demo, we process the information you provide (for example name, email address, company and message) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to entering into a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). Form data is stored by Webflow (see section 2). We delete it once your request has been fully processed, unless statutory retention obligations apply.

For appointment booking on the “Book a demo” page, we embed the appointment scheduling feature of Google Calendar, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the booking area loads, your IP address is technically transmitted to Google. If you book an appointment, the information you provide (for example name, email address and selected time slot) is transmitted to Google and stored in our calendar. Google processes this data as a processor under our Google Workspace agreement. The legal basis is Art. 6(1)(b) GDPR where the booking relates to entering into a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in simple appointment scheduling). Data may be transferred to Google LLC in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

To protect our forms against spam, we use Google reCAPTCHA, provided by Google Ireland Limited. reCAPTCHA uses technical characteristics such as IP address and browser information to check whether an entry was made by a human, and stores the information required for this in your browser. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in preventing misuse) and Section 25(2) No. 2 TDDDG. Data may be transferred to Google LLC in the United States (EU-U.S. Data Privacy Framework, Art. 45 GDPR).

‍8. Overview of cookies and storage technologies used:

  • Consent Pro cookie: stores your cookie choice – necessary – 365 days
  • rc::a, rc::c (Google reCAPTCHA): spam protection in forms – necessary – rc::c until the end of the session, rc::a until deleted in the browser
  • theme (local storage): remembers your choice of light or dark mode – necessary – until deleted in the browser
  • bannerClosed (session storage): remembers that you have closed the announcement banner – necessary – until the end of the session
  • _ga, _ga_JH97XVS05F (Google Analytics): web analytics – only with consent (Analysis) – 2 years
  • _pxvid (beehiiv): protection of the newsletter form against automated access – only with consent (Analysis) – up to 1 year
  • YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-YNID and others (YouTube): video embedding – only with consent (Marketing) – end of session up to 6 months

‍9. Your rights: ‍

Under the GDPR, you have the following rights:

  • Access to your stored data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure of your data (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Objection to processing (Art. 21)

You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, contact: datenschutz@oee.ai

You also have the right to lodge a complaint with the competent supervisory authority. For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information NRW (www.ldi.nrw.de).

Last updated: October 2026