Privacy notice


The German language version of this Agreement will prevail over any other language version issued by us.


Preamble/Scope of Applicability

This Privacy Notice describes the collection and use of your personal data in the context of your usage of our websites according to the legal requirements.

Please note that the usage of particular web content on our websites (such as OrgOS software, recruiting module etc.) may involve further processing of your personal data which will be described in complementary Privacy Notices that have to be considered additionally.


1. Controller

Controller pursuant to Art. 4 paragraph 7 General Data Protection Regulation (‚GDPR‘) is

Org OS GmbH

Urbanstraße 71

10967 Berlin



2. Contact details of our Data Protection Officer

You can reach our Data Protection Officer

a) via E-Mail at:

b) via postal Mail at:

Org OS GmbH

– Data Protection Officer –

Urbanstraße 71

10967 Berlin



3. Collection of personal data when you visit our website(s)

When visiting our website(s) without personally providing information to us, personal data is collected by our webserver collecting the data transmitted in connection with your access.

The data transmitted includes:

  • IP-Address
  • Name of access provider
  • Browser type, version of browser software and language of browser
  • Operating system
  • Date and time of access
  • Content of access
  • Amount of data transferred
  • Access status (successful transmission/error)
  • Website(s) the access was forwarded to
  • Website(s) accessed

In addition to the aforementioned data collection, our website(s) collect data in connection with the usage of cookies (see Section 4. of this Privacy Notice).


4. Cookies

We use cookies on our website(s). Cookies are text files that are stored on a user’s computer system. If a user accesses our website(s) a cookie file can be saved on the local operating system. A cookie contains information that enables the identification of a user returning to our website(s).

Session cookies process information in so called Session-IDs which serve towards identifying a person during continuous access to our website(s). Session-IDs are deleted automatically when closing the browser.

Persistent cookies will remain in the cookie files of your browser after the browser has been closed. Persistent cookies are deleted after a certain period of time has elapsed. The length of this period vary amongst the different cookies used.

The use of cookies can be disabled by changing the security settings on your browser. Further adjustments with regard to the cookie usage can be made in the security settings of your browser to block certain cookies (e.g. cookies of third parties) or disable cookies altogether.

Detailed information concerning third party cookies can be found in Section 5. of this Privacy Notice.


5. Inclusion of third-party services and cookies

5.1. GoSquared

Our website(s) use the tracking tool “Goquared”, a web analytics tool of Go Squared Ltd. (3 Barn Hawe, High Street, Edenbridge, Kent, England, TN8 5AQ, UK). In this context information about the usage of the website are transferred to GoSquared servers in the United Kingdom. GoSquared processes this information to analyse the visitor activity and to create reports on behalf of OrgOS.

You can deactivate the website tracking in your browser settings. More information about GoSquared is available at:


5.2. Hotjar

Our website(s) uses the tracking tool “Hotjar” a web analytics tool of Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

Hotjar analyses the user behavior of website visitors (such as clicks, movements and keyboard inputs, in-/outgoing links) to optimize our website(s) and create customized reports on behalf of OrgOS. The data is saved in pseudonimized user profiles which will not be connected to further information of website visitors (such as names and e-mail adresses). You can deactivate Hotjar by following this link:

More information about Hotjar is available at:


5.3. Hubspot

Our website(s) use Hubspot a marketing automation and tracking tool of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA.

Hubspot analyses website visitor’s behavior in order to optimize our website performance and to administrate our customer database. If you provide us with information via our web forms (e.g. Name and e-mail address) this data is saved at the Hubspot server and is connected with your user profile. This enables us to track your user behavior (e.g. clicks on the website, sites visited, e-mails received and clicks in e-mails). You can demand your rights with regard to these tracking activities according to No. 11 of this declaration (e.g. object to data processing or deletion of personal data collected by Hubspot). You can prevent the described website tracking in your browser settings.

More information about Hubspot is available at:


5.4. Google Tag Manager

Our website(s) use the Google Tag Manager in order to administrate and browse our website(s) and to implement website trackers. The form and extend of data collection in this context is determined by Google. According to Google no personal data of website visitors is processed by this tool by itself. Further information about Google Tag Manager is available at


6. Contact possibility via E-Mail/contact form/use of comment functions

If you make use of the possibility to contact us via E-Mail or a provided contact form, the provided information (your E-Mail address, possibly your name and telephone number) will be saved by us in order to process your request. The personal data collected in this context will be deleted if the storage is no longer necessary for this purpose. Alternatively we may restrict access to the stored data if legal retention periods apply.

If you contact us via E-Mail a secure transfer can only be guaranteed in case of encrypted communication. A transmission of confidential data shall be sent by postal mail.

The usage of comment functions on our website(s) includes the processing of the information provided by you and may include the processing of your IP address in this context.


7. Social-Media-Plugins

Our website(s) may use social media plugins. We make usage of the so called two-click-solution, which means that initially no user data is transferred to the plugin providers when accessing our website(s). By clicking on the button of a social media plugin you are activating the plugin which may lead to a data transfer to the plugin provider and eventually the connection to an existing user profile. The plugin provider may be seated outside the European Union (e.g. USA) which may lead to a data transfer in a third country. To prevent/minimize data transfer in this context we advise you to delete cookies prior to activating the plugins. We do not determine the data collection in this context and advise you to take note of the applicable privacy notices of the respective plugin providers.


8. Purpose and legal basis of processing your personal data

In addition to the particular purposes mentioned, the processing of your personal data is required to display our website(s), to provide stability and security of our webservers and to improve the usability of our website(s) and/or to manage our customer contacts.

The legal basis for processing your personal data is Art. 6 paragraph 1 GDPR. If we use tracking tools on our website the legal basis is Art. 6 paragraph 1 sentence 1 f) GDPR (legitimate interests). If personal data is processed on the basis of a consent, the legal basis is Art. 6 paragraph 1 sentence 1 a) GDPR.

9. Data transfer to third parties

In general data transfer to third parties is only conducted in the cases mentioned in this Privacy Notice. In addition data transfer to third parties may occur if:

  • we have received your explicit consent (Art. 6 paragraph 1 sentence 1 a) GDPR);
  • the processing is necessary in connection with legal claims except if the respective interests are not overridden by the interests or fundamental rights and freedoms of the data subject (Art. 6 paragraph 1 sentence 1 f) GDPR);
  • the processing is necessary for compliance with a legal obligation (Art. 6 paragraph 1 sentence 1 c) GDPR);
  • the processing is necessary for the performance of a contract with the data subject or the performance of steps at the request of the data subject prior to entering into a contract (Art. 6 paragraph 1 sentence 1 b) GDPR)



10. Data deletion and data storage

Collected personal data will be deleted and/or the access to the data will be restricted if the purpose of the processing activity ceases to be relevant. Extended retention periods may apply in case of statutory legal provisions requiring further data retention.


11. Rights of the data subject and the right to lodge a complaint with a supervisory authority

With regard to the personal data processed you have the following rights according to Art. 12 – 23 GDPR:

  • Right to information and access,
  • Right to rectification and erasure,
  • Right to restriction of processing
  • Right to objection
  • Right to data portability

In addition you have the right to lodge a complaint with the competent data protection authority with regard to the processing of your personal data by us.


12. Data security

Personal data processed by us are protected against loss, falsification and unauthorized third-party access by adequate technical and organizational measures.

In order to provide a secure transmission of data between your browser and our systems, we generally use Secure Socket Layer (‘SSL’) encryption technology to encrypt communication between your browser and our webserver. URLs of websites using an SSL-encryption start with https://.


13. Update of the Privacy Notice and contact to our Data Protection Officer

Our Privacy Notice may be updated according to changes of our website(s). You can find the current version of our Privacy Notice on our websites.

For further questions and suggestions in relation to data protection you may contact our Data Protection Officer via the contact details provided under Section 2. of this Privacy Notice.