Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Tobias Schlitt
Büngelerstr. 64
46539 Dinslaken
Germany

Email: support@organaize.eu

2. Overview

This privacy policy explains how we collect, use, and protect your personal data when you visit our website https://organaize.eu (hereinafter “Website”). We take the protection of your personal data seriously and process it in accordance with the GDPR and other applicable data protection legislation.

You can generally use our Website without providing personal data. Where personal data is collected, this is done on a voluntary basis.

3. Hosting

3.1 Website Hosting

Our Website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you access our Website, the web server automatically collects the following data in server log files:

  • Browser type and version
  • Operating system
  • Referring URL (previously visited page)
  • Hostname of the accessing device
  • Date and time of the request
  • IP address (in anonymised form)

This data is collected to ensure the reliable operation of the Website and to detect and prevent attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Server log files are automatically deleted after 14 days.

We have concluded a Data Processing Agreement (DPA) with Hetzner in accordance with Art. 28 GDPR. Hetzner processes all data exclusively within the European Union. For more information, see Hetzner’s privacy policy: https://www.hetzner.com/legal/privacy-policy/

4. Web Analytics

4.1 Matomo (Self-Hosted)

We use the open-source web analytics tool Matomo on our Website. We operate Matomo on our own server hosted by Uberspace (Jonas Pasche, Kaiserstr. 15, 55116 Mainz, Germany). Your data is processed exclusively on this server and is not shared with any third parties.

Data processed:

  • Anonymised IP address (the last 2 bytes are removed before storage)
  • Date and time of access
  • Page title and URL visited
  • Referring URL
  • Screen resolution and time zone
  • Files clicked and downloaded
  • External links clicked
  • Page view duration
  • Access type (JavaScript or custom event)
  • Approximate location (country, region, city — derived from the anonymised IP address)
  • Browser language
  • Browser user agent

Cookies:

Matomo uses cookies on your device to associate repeat visits with a single visitor profile. These cookies are used exclusively for web analytics and are only set with your consent. You can grant or withdraw consent via our cookie banner at any time.

Retention period:

Raw data from all visits and actions is automatically deleted after 5 months and 28 days. Aggregated statistical reports are retained indefinitely and do not contain personal data.

Legal basis:

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG (German Telecommunications-Telemedia Data Protection Act). You may withdraw your consent at any time with effect for the future by adjusting your cookie settings on our Website.

Opt-out:

You can prevent data collection by Matomo at any time by adjusting your cookie settings via our cookie banner. You can also delete cookies already stored in your browser settings. Additionally, you can opt out of Matomo tracking directly here:

5. Beta Waitlist Registration

5.1 Registration Form

We offer a registration form on our Website to join the waitlist for our closed beta. When you sign up, we process the following data:

  • Full name
  • Email address
  • Country

Registration uses a double opt-in process: after submitting the form, you will receive a confirmation email with a link you must click to verify your email address and complete your registration. We store the IP address and timestamp of the confirmation as proof of consent.

Your data is used exclusively to manage your place on the waitlist, grant you access to the beta when available, and inform you about the status of your registration. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).

During registration, you may also separately consent to receiving our newsletter by checking a dedicated checkbox. This consent is optional and does not affect your beta registration (see Section 5.3).

5.2 MailerLite

We use MailerLite to manage beta waitlist registrations. The provider is MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland (parent company: Vercom S.A.).

When you register via our form, your data is stored on MailerLite’s servers within the European Union (data centres in Germany and the Netherlands). MailerLite is ISO/IEC 27001:2022 certified.

MailerLite processes the following data on our behalf:

  • Your full name
  • Your email address
  • Your country
  • Time and date of registration
  • IP address at the time of registration (as proof of consent)
  • Double opt-in confirmation timestamp

We have concluded a Data Processing Agreement (DPA) with MailerLite in accordance with Art. 28 GDPR (included in the MailerLite Terms of Use). For more information, see MailerLite’s privacy policy: https://www.mailerlite.com/legal/privacy-policy

Retention: Your data is stored for as long as your registration is active. You may cancel your registration at any time (see Section 9 “Your Rights”).

5.3 Newsletter

If you separately consent to receiving our newsletter during the beta waitlist registration — by checking the dedicated, pre-unchecked checkbox — we will also use your email address to send you product updates, news, and related information. This consent is independent of your beta registration and is not required to join the waitlist.

You can unsubscribe from the newsletter at any time. An unsubscribe link is included in every newsletter email. Upon unsubscription, your data will be removed from the newsletter distribution list.

The legal basis is Art. 6(1)(a) GDPR (consent).

6. Transactional Emails

6.1 Lettermint

We use Lettermint for the delivery of transactional emails (e.g. double opt-in confirmation emails, beta access notifications). The provider is Lettermint B.V., based in Zwolle, the Netherlands. Lettermint operates its entire infrastructure exclusively within the European Union (servers in France and Germany, hosted by OVH Group SA).

When sending an email, the following data is transmitted to Lettermint:

  • Recipient’s email address
  • Email content (e.g. confirmation link)
  • Sender address

We have concluded a Data Processing Agreement (DPA) with Lettermint in accordance with Art. 28 GDPR. Lettermint acts as a data processor and processes your data exclusively on our instructions. For more information, see Lettermint’s trust page: https://trust.lettermint.co/

The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in the reliable delivery of transactional emails).

7. Cookies

Our Website uses cookies. Cookies are small text files stored on your device.

7.1 Strictly Necessary Cookies

We use strictly necessary cookies that are required for the operation of the Website. These include cookies for storing your cookie consent preferences. The legal basis is Art. 6(1)(f) GDPR (legitimate interest) in conjunction with § 25(2) TTDSG.

7.2 Analytics Cookies (Matomo)

Matomo sets analytics cookies to statistically record your visit to our Website. These cookies are only set if you have given your consent via our cookie banner. See Section 4.1 for details.

The following cookies are set by Matomo:

Cookie Purpose Retention
_pk_id.* Identifies returning visitors 13 months
_pk_ses.* Stores the current session 30 minutes
_pk_ref.* Stores referrer information 6 months
mtm_consent Stores your consent decision 30 years

7.3 Managing Cookies

You can adjust your cookie settings at any time via our cookie banner. You can also view, manage, and delete cookies in your browser settings.

8. SSL/TLS Encryption

Our Website uses SSL/TLS encryption for security purposes. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar and the padlock icon. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

9. Your Rights

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we process about you.

Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate data or the completion of incomplete data.

Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided no legal retention obligations apply.

Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your data.

Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR.

Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any consent you have given at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise your rights, please contact us by email at: support@organaize.eu

10. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44
40102 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de

You may also contact the supervisory authority in your country of residence.

11. Data Protection Officer

We are not legally required to appoint a Data Protection Officer. For any questions regarding data protection, please contact the controller directly (see Section 1).

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version of the privacy policy applies to each visit to our Website.

13. Automated Decision-Making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Last updated: February 10, 2026

We use cookies for anonymous website usage statistics (Matomo). Declining has no effect on your experience. See our Privacy Policy.