Privacy Policy

Order Dynamics GmbH ("Order Dynamics", "we", "us") takes the protection of personal data seriously. This Privacy Policy describes how we collect, use, and process personal data in connection with the website at orderdynamics.io, in accordance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the German Federal Data Protection Act (Bundesdatenschutzgesetz, "BDSG").

1. Controller

The controller responsible for processing personal data on this website is:

Order Dynamics GmbH (in Gründung)
Geschwister-Scholl-Str. 109
20251 Hamburg, Federal Republic of Germany
Email: research@orderdynamics.io

Full company details are available on our Imprint.

2. Data protection officer

We have not appointed a data protection officer. Under German law (§ 38 (1) BDSG) we are not obliged to do so given the number of employees engaged in regular data processing. Inquiries on data protection matters may be directed to research@orderdynamics.io.

3. Categories of data we process

3.1 Server-access logs

When you visit this website, our hosting provider automatically processes technical access data including IP address, browser type and version, operating system, referring URL, requested URL, HTTP response code, and date and time of access. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in operating a secure and reliable website). Storage period: access logs are retained for no longer than 14 days unless required for the investigation of a security incident.

3.2 Access-request form

If you submit the access-request form on this website, we process the data you provide — full name, company, business email address, institutional type, and the use-case description you enter — for the purpose of evaluating your inquiry and responding to you. Legal basis: Art. 6 (1)(b) GDPR (steps prior to entering into a contract at your request). Storage period: form submissions and the resulting email correspondence are retained for up to 24 months after the last interaction, after which they are deleted unless required for an ongoing or imminent partnership.

4. Recipients and processors

We do not sell, rent, or share personal data with third parties for advertising or marketing purposes. We engage the following processors under written data-processing agreements pursuant to Art. 28 GDPR:

All processors are located within the European Union; no transfer to a third country outside the European Economic Area takes place. Should this change in the future, we will update this section and ensure an appropriate transfer mechanism under Chapter V GDPR (such as Standard Contractual Clauses) is in place.

5. No third-party analytics or tracking

This website runs no third-party web analytics, no advertising pixels, no remarketing tags, no A/B testing platforms, and no behavioural profiling. We deliberately do not implement Google Analytics, Meta Pixel, Hotjar, or comparable products.

6. Cookies

See our Cookie Policy for the categories of cookies in use on this website.

7. Your rights as a data subject

Under Chapter III of the GDPR you have the right to:

• obtain confirmation of and access to your personal data (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure of your data (Art. 17), subject to overriding legal obligations;
• restriction of processing (Art. 18);
• data portability for data you provided to us (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time, where processing is based on Art. 6 (1)(a) GDPR, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please write to research@orderdynamics.io from the email address you used in your dealings with us. We will respond within one month pursuant to Art. 12 (3) GDPR.

8. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR). The competent supervisory authority for Order Dynamics GmbH is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 7. OG, 20459 Hamburg, Germany
datenschutz-hamburg.de

9. Security of processing

We apply technical and organisational measures appropriate to the risk of processing, including transport-layer encryption (TLS 1.3) for all traffic to this website and to our SMTP provider, access controls to production systems, and the principle of data minimisation. We do not store payment data or any data category falling under Art. 9 GDPR.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities or in applicable law. The current version is always available at this URL together with the "Last updated" date at the top of this page. We will notify active partners of material changes via the email address on file.