Privacy Policy

The controller for the purposes of data protection laws is:

Omnora GmbH
Managing Director: Sebastian Walker
VAT ID No.: DE278351416
HRB: 139240
Local Court: Frankfurt am Main

Collection of general information

When you access our website, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet Service Provider, and similar data. This exclusively concerns information that does not allow conclusions about your person. This information is technically necessary to correctly deliver requested website content and is mandatory when using the internet. Anonymous information of this type is statistically evaluated by us to optimize our online presence and the underlying technology.

Applicable Legal Bases

In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR; the legal basis for processing to fulfill our services and carry out contractual measures, as well as to respond to inquiries, is Art. 6 para. 1 lit. b GDPR; the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR; and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Cooperation with Processors and Third Parties

If, in the course of our processing, we disclose data to other individuals and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data, this only occurs based on a legal permission (e.g., if a transfer of data to third parties, such as payment service providers, is necessary for contract fulfillment according to Art. 6 para. 1 lit. b GDPR), if you have consented, if a legal obligation requires it, or based on our legitimate interests (e.g., when using agents, web hosts, etc.).

If we commission third parties to process data based on a "data processing agreement," this occurs based on Art. 28 GDPR.

Transfer to Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this only happens if it is necessary for the fulfillment of our (pre-)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we only process or have data processed in a third country if the special conditions of Art. 44 et seq. GDPR are met. This means that processing occurs, for example, on the basis of special guarantees, such as the officially recognized determination of an adequate level of data protection (e.g., for the USA through the "Privacy Shield") or adherence to officially recognized specific contractual obligations (so-called "Standard Contractual Clauses").

Cookies / CookieBot

Like many other websites, we also use so-called "cookies." Cookies are small text files that are transferred from a web server to your hard drive. This automatically provides us with certain data, such as IP address, browser used, operating system, about your computer, and your connection to the internet.

Cookies cannot be used to launch programs or transmit viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation and enable the correct display of our web pages.

Under no circumstances will the data collected by us be passed on to third parties or linked with personal data without your consent.

Of course, you can generally view our website without cookies. Internet browsers are usually set to accept cookies. You can deactivate the use of cookies at any time via your browser settings. Please use your internet browser's help functions to learn how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

This website distinguishes between technically necessary and technically non-necessary cookies. Non-necessary cookies (such as Google Analytics) are only set if the user has given their consent. The legal basis for non-functional cookies is your consent according to Art. 6 para. 1 lit. a GDPR. This consent is stored in the form of a cookie, which is therefore technically necessary.

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

Deletion or Blocking of Data

We adhere to the principles of data avoidance and data minimization. Therefore, we store your personal data only for as long as is necessary to achieve the purposes stated here or as required by the various retention periods stipulated by law. After the respective purpose ceases or these periods expire, the corresponding data will be routinely blocked or deleted in accordance with legal regulations.

Use of Google Analytics

On our website we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Google Analytics 4 to analyse how our website is used, to generate reports on visitor activity and to evaluate these reports in order to optimise our content.

Google Analytics 4 uses cookies and similar technologies. However, the information collected about your use of the website (e.g. pages visited, browser information used, operating system and, where applicable, click paths) is not passed directly to Google. Instead, it is first processed via our server-side tagging (SST) server, which we operate in the EU-West 3 region (Frankfurt) on Google Cloud Run.

On this server, your data — in particular the IP address transmitted by your device — is anonymised or pseudonymised before being forwarded to Google servers for further processing. In this way we reduce the direct exchange of data between your device and Google and strengthen the protection of your personal data.

The data is used by Google on our behalf exclusively to generate reports on website activity and to provide further services connected with the use of the website. Based on our settings, the data is not combined with other Google data. Analytics data is retained for 14 months.

In addition, we use the Google Signals feature within Google Analytics 4. This enables cross-device reporting, provided that you have activated the "personalised advertising" option in your Google account. In this context we receive exclusively anonymous, statistical evaluations and no personal data. You can deactivate this use at any time in your Google account settings.

The legal basis for the use of Google Analytics 4 is your consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie consent tool. Without your consent, Google Analytics 4 is not used. You can withdraw your consent at any time via the consent tool with effect for the future.

We have concluded a data processing agreement with Google (Art. 28 GDPR). For any transfers to third countries (e.g. the USA), Google relies on the standard contractual clauses approved by the European Commission. Further information can be found in Google's privacy notices at: https://policies.google.com/privacy?hl=de and https://policies.google.com/technologies/partner-sites

Further Use of Our Server-Side Tagging Container

In addition to Google Analytics 4, we also use our server-side tagging container (Google Cloud Run, EU-West 3 region / Frankfurt) to process and forward data to other marketing and analytics tools, e.g. Google Ads, Meta Ads (Facebook/Instagram) or conversion APIs.

The procedure is identical in each case:

• The data relating to your use of the website is first transmitted to our SST server in the EU.
• There — as far as technically possible — the data is anonymised or pseudonymised (e.g. by truncating the IP address).
• Only then is the processed information forwarded to the respective providers.

These tools are generally used only with your express consent (Art. 6(1)(a) GDPR) given via our cookie consent tool. Purely technical log data that is necessary to ensure trouble-free operation and IT security may be processed on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Where we pass on data to third-party providers (e.g. Google, Meta) on the basis of your consent, this data may also be processed in countries outside the EU (in particular the USA). In such cases, the transfer takes place on the basis of the standard contractual clauses approved by the European Commission or other safeguards.

You can withdraw your consent to the respective services at any time with effect for the future via our consent management tool.

.

‍

‍

Use of Script Libraries (Google Webfonts)​

To display our content correctly and graphically appealing across browsers, we use script libraries and font libraries on this website, such as Google Webfonts (https://www.google.com/webfonts/). Google Webfonts are transferred to your browser's cache to avoid multiple loading. If the browser does not support Google Webfonts or prevents access, content will be displayed in a standard font.

Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – although currently unclear whether and, if so, for what purposes – that operators of such libraries collect data.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Embedded YouTube Videos​

On some of our web pages, we embed YouTube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can personally associate your browsing behavior with you. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behavior.

Users who have disabled cookie storage for the Google Ad program will also not encounter such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/

‍

‍

Google Services​

‍

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") described below. The information automatically collected by Google's technologies about your use of our website is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless stated otherwise for the individual technologies, data processing is carried out on the basis of an agreement concluded between joint controllers pursuant to Art. 26 GDPR for the respective technology. Further information on data processing by Google can be found in Google's privacy notices.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based and/or use servers in countries outside the EU and the EEA. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

Google Ads Customer Match

We use the "Customer Match" and "Conversion-based Customer Match" features provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on our website.

How it works: As part of these features, data we have received from you (e.g., email address or phone number) is transmitted to Google in pseudonymized form (hashed via SHA-256). Google matches these hash values with existing Google accounts. This enables us to target our advertisements more precisely to you or to target groups with similar interests (Similar Audiences), as well as to attribute conversions (e.g., blog sign-ups or purchases) more accurately.

Legal basis: This processing is based exclusively on your explicit consent pursuant to Art. 6 (1) (a) GDPR.

Data processing: Google processes this data as our data processor. We have concluded a corresponding data processing agreement for this purpose. Since Google is a US-based company, a transfer of data to Google LLC in the USA and access by authorities there cannot be completely ruled out. According to Google, the transmitted hash values are deleted immediately after the matching process is completed.

Withdrawal of consent: You can withdraw your consent at any time with effect for the future via our Consent Management Tool or disable the use of your data by Google in the Google Ad Settings.

‍

Google Ads​

We use Google Ads Conversion Tracking, a service provided by Google Ireland Limited.

If you reach our website via a Google ad, a cookie with a limited lifespan (max. 90 days) is stored, which serves exclusively to measure advertising effectiveness. We only receive aggregated values, such as how many users clicked on an ad and subsequently completed a conversion. Personal identification is not possible.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TTDDG. No personal data is transmitted without consent.

Any transfers to the USA are based on the EU Commission's standard contractual clauses. Google is also certified under the EU-US Data Privacy Framework (DPF).

From March 2024, Consent Mode v2 is mandatory. Our cookie banner ensures that consent for the categories "ad_user_data" and "ad_personalization" is obtained in compliance with the GDPR. Without consent, Google only processes anonymized, modeled conversions.

.

‍

Google Tag Manager​

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used for the technical management and delivery of scripts (e.g. for Google Analytics or marketing tools). The Tag Manager itself does not perform any analysis, does not store cookies, and does not create its own usage profiles.

Technical data (e.g. IP address, browser information) is processed to deliver the Tag Manager. Where possible, the Tag Manager is not loaded directly from the servers of googletagmanager.com, but via our own infrastructure (e.g. a so-called GTAG Gateway). This reduces data transfer to Google and makes the processing of technical connection data more privacy-friendly.

Insofar as data is transmitted to Google (e.g. when the Tag Manager is loaded directly), this may also involve transmission to servers in the USA. Google is certified under the EU-US Data Privacy Framework (DPF).

The use of the Tag Manager is based on Art. 6(1)(f) GDPR (legitimate interest in the efficient and privacy-compliant management of tracking and marketing services). Insofar as consent is required for integrated tools, these are only activated by the Tag Manager once you have given your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TTDDG.

‍

Google Tag Analytics​

We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). With the help of Google Analytics 4, we analyze the use of our website, generate reports on our visitors' activities, and evaluate them in order to optimize our content.

Google Analytics 4 uses cookies and similar technologies. However, the information collected about your use of the website (e.g. pages visited, browser information used, operating system, and, where applicable, click paths) is not passed directly to Google, but is first processed via our server-side tagging server (SST), which we operate in the EU-West 3 region (Frankfurt) on Google Cloud Run.

On this server, your data – in particular the IP address transmitted by your device – is already anonymized or pseudonymized before being forwarded to Google's servers for further processing. In this way, we reduce the direct exchange of data between your device and Google and strengthen the protection of your personal data.

On our behalf, Google uses this data exclusively to create reports on website activity and to provide other services related to the use of the website. According to our settings, this data is not merged with other data from Google. The retention period for the Analytics data is 14 months.

In addition, as part of Google Analytics 4, we use the Google Signals feature. It enables the creation of cross-device reports, provided you have activated the "personalized advertising" option in your Google account. In this context, we only receive anonymous, statistical evaluations, no personal data. You can deactivate this feature at any time in your Google account settings.

The legal basis for the use of Google Analytics 4 is your consent pursuant to Art. 6(1)(a) GDPR, which you give via our cookie consent tool. Google Analytics 4 is not used without consent. You can withdraw your consent at any time via the consent tool with effect for the future.

We have concluded a data processing agreement (Art. 28 GDPR) with Google. For any transfers to third countries (e.g. the USA), Google relies on the standard contractual clauses approved by the EU Commission. Further information can be found in Google's privacy notices at:

https://policies.google.com/privacy?hl=de

https://policies.google.com/technologies/partner-sites

‍

Use of Google Remarketing​

This website uses the remarketing function of Google Inc. The function serves to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the website visitor's browser, which makes it possible to recognize the visitor when they access websites belonging to Google's advertising network. On these pages, advertisements can be presented to the visitor that relate to content the visitor previously accessed on websites using Google's remarketing function. According to Google, no personal data is collected during this process. If you still do not wish to use Google's remarketing function, you can generally deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

The aggregation of collected data in your Google account is based exclusively on your consent, which you can give or revoke with Google (Art. 6 para. 1 lit. a GDPR). For data collection processes that are not merged into your Google account (e.g., because you do not have a Google account or have objected to the merging), the data collection is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

LinkedIn Insight-Tag​

We use the LinkedIn Insight Tag of the social network LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; "LinkedIn") on our website.

The LinkedIn Insight Tag enables us to identify visitors to our website as a target group for the display of ads ("LinkedIn Ads") and to measure the effectiveness of our advertising measures ("conversion tracking"). Via the tag, we can recognize you within the LinkedIn platform after a visit to our website and show you interest-based advertising there.

When you access our website, a direct connection to LinkedIn's servers is established. This may involve the processing of, among others, the following data:

- HTTP headers (e.g. IP address, browser information, timestamp of the page access)

- Tag-specific data (tag ID, LinkedIn cookie information)

- Event data (e.g. pages viewed, product interactions, form submissions, or purchases)

This data may be linked by LinkedIn to your LinkedIn account. LinkedIn may also use the data for its own purposes, e.g. for profile creation or ad delivery. We have no influence on further data processing by LinkedIn.

‍

In addition to the client-side Insight Tag, we use the LinkedIn Conversion API. Here, event data is transmitted server-side to LinkedIn via our server-side tagging container (Google Cloud Run, EU-West 3 region, Frankfurt).

How it works:

- Your website interactions (e.g. purchases, leads, form submissions) are first transmitted to our SST server.

- There, data is pseudonymized (e.g. by hashing email addresses with SHA-256) and then forwarded to LinkedIn via a secure interface.

- This ensures that sensitive data is not sent directly from your device to LinkedIn's servers in the USA, but is first processed via our EU infrastructure.

The use of both the Insight Tag and the Conversion API serves marketing and optimization purposes, i.e. the targeted delivery of advertising to relevant user groups and the statistical evaluation of our advertising campaigns.

Legal bases & data transfer

Legal basis: The use of the LinkedIn Insight Tag and the Conversion API is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TTDDG. No processing takes place without your consent.

Right of withdrawal: You can withdraw your consent at any time via our consent management tool.

Transfers to the USA: Please note that data may also be transferred to the USA. LinkedIn Corporation (USA) is certified under the EU-US Data Privacy Framework (DPF), ensuring an adequate level of data protection. We also rely on the standard contractual clauses (SCCs) approved by the EU Commission.

Further information on data processing by LinkedIn can be found in their privacy notices:

https://www.linkedin.com/legal/privacy-policy

‍

Meta Pixel​

We use the Meta Pixel of the social network Facebook and Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; "Meta") on our website.

The Meta Pixel enables us to determine visitors to our website as a target group for the display of ads ("Facebook/Instagram Ads") and to measure the effectiveness of our advertising measures ("conversion tracking"). With the help of the pixel, we can recognize you within Meta's platforms after a visit to our website and show you interest-based advertising there.

For this purpose, a direct connection to Meta's servers is established by your device when you access our website. This involves the processing of, for example, the following data:

- HTTP headers (IP address, browser information, time of page access),

- Pixel-specific data (pixel ID, cookie information),

- Event data (e.g. products viewed, shopping cart, purchase, or registration actions).

This data may be linked by Meta to your Facebook or Instagram account. Meta may also use it for its own purposes, e.g. for profiling and advertising purposes. We have no influence on further processing by Meta.

‍

Meta Conversion API​

In addition to the client-side pixel, we use the Meta Conversion API (CAPI). Here, event data is transmitted server-side to Meta via our server-side tagging container (Google Cloud Run, EU-West 3 region, Frankfurt).

How it works:

- Your interactions on the website (e.g. purchases, leads, form submissions) are first transmitted to our SST server.

- There, data is pseudonymized (e.g. by hashing email addresses with SHA-256) and then forwarded to Meta via a secure interface.

- In this way, we ensure that sensitive data is not sent directly from your device to Meta's servers in the USA, but is first processed via our EU infrastructure.

The use of both the pixel and the Conversion API serves marketing and optimization purposes, i.e. for the targeted delivery of advertising to relevant user groups and for the statistical evaluation of the success of advertising campaigns.

‍

Microsoft Clarity

To provide statistics on the use of our website, in the form of heatmaps and session recordings created primarily by tracking mouse movements, we use the service Microsoft Clarity provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 USA ("Microsoft").

To analyze the use of our website, Microsoft Clarity uses cookies and pixels. In doing so, your IP address, mouse movements, clicks, time, frequency, location, and user behavior, as well as interaction data and the scrolling activity of your visit to our website and similar information, are collected and transmitted to Microsoft (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) and stored there.

In order to be able to assign the statistics to individual campaigns, Microsoft Clarity is linked to Google Analytics 4 (see the separate section on the latter service in this privacy policy), provided you have also consented to the use of Google Analytics 4.

The legal basis for the use of Microsoft Clarity, including the link to Google Analytics 4, is your consent pursuant to Art. 6(1)(a) GDPR. Insofar as personal data is transferred to the USA, this is done on the basis of Art. 45 GDPR in conjunction with the adequacy decision C(2023) 4745 of the European Commission. Both Microsoft and Google have committed to complying with the data processing principles of the Data Privacy Framework (DPF). Please note Microsoft's privacy notices at https://privacy.microsoft.com/en-us/privacystatement and at https://clarity.microsoft.com/terms.

‍

‍

HubSpot​

We use HubSpot, a service of HubSpot Inc., to statistically track the use of our website. For this purpose, so-called "web beacons" and "cookies" are used, which are stored on your computer and enable us to analyze your use of the website. HubSpot evaluates the collected information (e.g., IP address, geographical location, browser type, duration of visit, and pages viewed) on our behalf to generate reports on visits and visited pages. If you do not wish to participate in the tracking process, you can decline the necessary setting of a cookie – for example, via browser settings that generally disable the automatic setting of cookies. Furthermore, we use HubSpot to process inquiries via our website. For this purpose, the personal data you submit is processed in contact profiles and, if necessary, manually supplemented by us to inform you specifically about topics you prefer. We also use HubSpot to send marketing emails. This also includes providing content that you request via our website (e.g., white papers or webinars). For the purpose of needs-based design and continuous optimization of our emails, openings and clicks are also analyzed. You can unsubscribe from our marketing emails at any time by clicking on the corresponding unsubscribe link in each email.

Further information on how HubSpot works can be found in the privacy policy of HubSpot Inc., available at: https://legal.hubspot.com/de/privacy-policy

Processing of Applicant Data

For the processing of applicant data and the management of open positions, Omnora relies on the "Kenjo.io" solution. Resumes, documents, and correspondence within the application process are stored on Kenjo.io's servers, which may be located outside the EU. Kenjo.io is a certified provider under the EU Privacy Shield. Omnora has a legitimate business interest in storing and processing candidate data during the application phase. Omnora will delete the data received during the application phase no later than 12 months after the last contact with the data subject (= the applicant), unless the data subject has been hired by Omnora or is otherwise collaborating with Omnora. Should Omnora intend to include the data subject's data in the talent pool, separate consent will be obtained before the data is stored.

By submitting the current application, you agree that Omnora will store and process your data and further information (e.g., from professional networks) for the application process and for consideration for future roles (provided these arise within the next 12 months). If you do not wish to be considered for further roles at Omnora, you can inform us informally in writing, and we will delete your data.

Use of the Omnora Application

By registering to use the web application ("application") offered by Omnora, you agree to the associated storage of your data. This includes the email address used during registration and – if created and/or processed with the application – audio and video recordings of individuals. This email address is necessary for creating and accessing the user account. The authenticity of this email address is verified by an activation email. Furthermore, you grant us permission to contact you via the provided email address.

Additional information that can be provided within the application (such as a phone number or a name) is voluntary and does not have to be provided by the user. If you choose to provide such information, you agree to its storage by us.

As we have a legitimate interest in analyzing and optimizing our application, by registering, you also agree to the storage of your data for the following purposes:

Fullstory
In the context of using the Omnora application, we employ software from Fullstory to improve our product. The purpose of this software is to record analytical information within our software, for example, to enhance the application's interface and processes. For this purpose, mouse movements or clicks, for instance, are recorded. At no time is information about the content processed within the application recorded. Additionally, users' IP addresses are anonymized to prevent personal identification. We have also concluded a data processing agreement with the provider, which regulates the transfer of data.

Should you wish to object to the use of your anonymized data for analysis in Fullstory, you can do so on the following page by clicking "Opt out of Fullstory": Click here

Intercom
We use "Intercom" from Intercom, Inc. to better understand your use of our application. Specifically, we provide Intercom with a limited amount of your data (such as your registration date and some personal data like your email address) and use Intercom to collect data for analytical purposes when you visit our website or use our application. As an analytics service acting on our behalf, Intercom analyzes your use of our application and logs your activities using cookies and similar technologies so that we can improve our service for you. Further information on Intercom's use of cookies can be found at https://www.intercom.com/terms-and-policies#cookie-policy. We also use Intercom as a communication medium, either via email or through messages within our application, to provide you with relevant information and assistance for optimal use. For more information on Intercom's privacy policy, please visit https://www.intercom.com/terms-and-policies#privacy. Intercom's services are subject to Intercom's terms of use, which can be found at https://www.intercom.com/terms-and-policies#terms. If you wish to object to the collection or transmission of this information via Intercom, please contact us at the email address provided below.

Productboard
We use "Productboard" from Productboard, Inc. to better understand your requirements for using our application. Specifically, we provide Productboard with a limited amount of your data (such as your email address) as soon as you vote for a feature or submit a product idea. Further information on Productboard's privacy policy can be found at https://www.productboard.com/privacy-policy/. Productboard's services are subject to Productboard's terms of use, which can be found at https://www.productboard.com/website-terms-of-use/. If you wish to object to the collection or transmission of this information via Productboard, please contact us at the email address provided below.

Your rights to access, rectification, restriction, erasure, and objection; withdrawal of consent

You have the right to obtain confirmation as to whether your data is being processed, and to access information about this data, as well as further information and a copy of the data, in accordance with Article 15 GDPR.

In accordance with Article 16 GDPR, you have the right to request the completion of your data or the rectification of inaccurate data concerning you.

You have the right, in accordance with Article 17 GDPR, to request that your data be erased without undue delay, or alternatively, in accordance with Article 18 GDPR, to request a restriction of the processing of your data.

You have the right to request that you receive the data concerning you that you have provided to us, in accordance with Art. 20 GDPR, or to demand its transmission to other controllers.

You also have the right, pursuant to Art. 77 GDPR, to lodge a complaint with the competent supervisory authority.You have the right to revoke consents granted pursuant to Art. 7 (3) GDPR with effect for the future.

Changes to our Privacy Policy

We reserve the right to occasionally adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.

Questions for the Data Protection Officer

If you have any questions about data protection, please send us an email or contact our data protection officer directly: datasecurity@omnora.com

‍