Privacy Policy

1. Who operates this website

This website is operated privately from Germany by the individual editor behind ooobysha ("we", "us", "the operator"). For any data protection matter, please contact: hello@ooobysha.eu.

A full legal name and postal address in accordance with § 5 TMG / § 18 MStV are provided in the site imprint once published. Until then, written enquiries should be sent to the email address above.

2. Scope

This policy applies to visitors of https://ooobysha.eu and its subpages. It does not apply to third-party websites linked from ooobysha, which have their own privacy policies.

3. What personal data may be processed

Depending on how you use the site, the following categories of data may be processed:

• Server / technical data handled by our hosting provider when your browser requests a page: IP address, date and time of the request, the requested URL, HTTP status, referrer, and user-agent string (browser and operating system).
• Analytics data — only if you accept analytics consent (see section 5).
• Consent preferences stored locally in your browser (see section 6).
• Information you send us voluntarily by email, including your email address, name if provided, and the content of your message.

4. Purposes and legal bases

• Operating and securing the website (server logs, delivering pages, protecting against abuse). Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a functioning and secure website.
• Responding to enquiries you send by email. Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a pre-contractual or contractual matter, otherwise Art. 6(1)(f) GDPR — our legitimate interest in replying to correspondence.
• Web analytics (Google Analytics 4) to understand how the site is used and to improve it. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (formerly TTDSG) — your explicit consent.
• Storing your consent decision so we don't ask again on every visit. Legal basis: Art. 6(1)(c) GDPR — legal obligation to demonstrate consent under Art. 7(1) GDPR.

5. Google Analytics 4

This site uses Google Analytics 4 (Measurement ID G-8LTTF9YZSZ), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics is not activated until you actively accept analytics in the consent banner. If you reject analytics, or ignore the banner, no Google Analytics script is loaded, no requests are sent to Google, and no analytics cookies or identifiers are set.

After you accept, Google Analytics may process: pages viewed and the order in which they are viewed, the referring URL, an approximate geographic location derived from a truncated IP address, device and browser type, screen size, language, and a randomly-generated client identifier used to distinguish sessions. The purpose is aggregate, statistical analysis of site usage; we do not attempt to identify individual visitors.

Google acts as a data processor and independent recipient in respect of some of this data. Google may transfer data to servers in third countries, including the United States. Google is certified under the EU-U.S. Data Privacy Framework, and where applicable relies on Standard Contractual Clauses under Art. 46 GDPR as a transfer safeguard. Please refer to Google's own privacy documentation for details on how Google processes data: policies.google.com/privacy.

Retention: standard Google Analytics 4 retention settings apply. No custom retention configuration is asserted here; specific retention values will be confirmed and added once verified in the Google Analytics property.

6. Cookies and similar technologies

"Cookies and similar technologies" includes cookies and values stored in your browser's local storage.

Strictly necessary storage (no consent required). One entry is written to your browser's local storage under the key ooobysha:consent:analytics to remember whether you accepted or rejected analytics. Without this entry we would have to show the consent banner on every visit.

Analytics (consent required). If — and only if — you accept analytics, Google Analytics 4 may set cookies and/or similar identifiers in your browser as part of its normal operation.

You can withdraw your analytics consent at any time by clicking Cookie settings in the site footer and choosing Reject. Withdrawal is as easy as giving consent, is effective for the future, and does not affect the lawfulness of processing carried out before withdrawal. You can also delete cookies via your browser settings.

7. Consent

Analytics is entirely optional. Rejecting analytics does not restrict access to the website or its content in any way. You can change your decision at any time via Cookie settings in the footer.

8. Recipients and third parties

Depending on your actions, personal data may be processed by:

• Our hosting provider, which processes server logs on our behalf as a data processor under Art. 28 GDPR.
• Google Ireland Limited (Google Analytics 4) — only after your consent.
• Google Fonts — the site loads typography from Google's font servers (fonts.googleapis.com, fonts.gstatic.com). This request necessarily transmits your IP address to Google. This is used only to deliver the font files and to secure the service. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a consistent, performant visual presentation.
• Your email provider and ours if you contact us by email.

The site's editorial content is managed via a private content-management interface. That interface is not exposed to ordinary visitors and does not process visitor data.

9. International data transfers

Some recipients (in particular Google) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by an appropriate GDPR safeguard — for U.S. transfers to Google, the EU-U.S. Data Privacy Framework and, where relevant, the European Commission's Standard Contractual Clauses under Art. 46(2) GDPR.

10. Data retention

Personal data is kept only for as long as necessary for the purpose it was collected for, or for as long as required by law. Email correspondence is kept for as long as needed to handle your enquiry and, where applicable, to comply with statutory retention duties. Analytics retention follows Google Analytics 4's configured settings.

11. Your rights

Under the GDPR, you have the right to:

• request access to your personal data (Art. 15 GDPR);
• request rectification of inaccurate data (Art. 16 GDPR);
• request erasure of your data (Art. 17 GDPR);
• request restriction of processing (Art. 18 GDPR);
• object to processing based on legitimate interests (Art. 21 GDPR);
• data portability (Art. 20 GDPR);
• withdraw consent at any time, with effect for the future (Art. 7(3) GDPR);
• lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

12. Supervisory authority

You have the right to lodge a complaint with a competent data protection supervisory authority — for example, in the EU Member State where you live or work, or where you believe an infringement has occurred. Because the operator is based in Germany, the competent authority is the state data protection commissioner (Landesbeauftragte(r) für Datenschutz) of the German federal state in which the operator is resident. The specific state authority will be listed once the imprint is finalised.

13. Contact

For any privacy or data-protection question, or to exercise your rights, please write to hello@ooobysha.eu.

14. Changes to this Privacy Policy

This policy may be updated when the website, the services it uses, or applicable law change. The current version is always available at this page, with the "Last updated" date shown at the top.