Privacy statement

This statement describes what data is processed when you visit this website, for what purpose and for how long.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Oehl.Net GmbH Interaktive Medien
Berrenrather Straße 188 c
50937 Cologne
Germany
Phone: +49 221 9415223
Email: info@oehl.net

The contact for data protection matters is Stefan Oehl, reachable at the same details.

2. Visiting the website — server logs

Every request processes the data technically required to deliver the page: IP address, date and time, the address requested, the amount of data transferred, the status code, the referring page and the identifier reported by your browser (user agent).

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. These logs are kept without a fixed retention period. You may request deletion of the entries concerning you at any time at info@oehl.net.

3. Visitor counting

Two counts run alongside each other on this website: one of our own on our server, plus Google Analytics. Both are described here — ours under a), Google Analytics under b).

a) Our own counting

It runs entirely on our server, without involving third parties, and works without a cookie.

What is processed: When you open a page, your browser sends us the address requested, the language version, the referring page and your screen resolution. Your IP address and browser identifier are added to this. When you leave the page, the time spent on it is also sent.

Recognition: From your IP address, screen resolution and browser identifier we form a checksum that serves as a visitor identifier. It allows several page views by the same person to be linked, including across separate visits. The checksum is formed without an additional random value; it is therefore stable over time and can be traced back if the input values are known. The IP address is additionally stored in plain text.

Purpose: We want to understand which content on this site attracts interest and how long it is read — in particular in the context of conversations with prospective investors and partners.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the evaluation and improvement of what we offer.

Retention: The counting logs are kept without a fixed retention period. We delete them once the purpose stated above no longer applies, and on request by the person concerned.

Objection: You may object to this processing at any time, informally, at info@oehl.net. You can also prevent the counting by disabling JavaScript for this website; the site remains fully usable.

b) Google Analytics

In addition we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open a page, your browser loads the script gtag.js from googletagmanager.com and connects to Google.

What is processed: Google processes, among other things, your IP address, the pages you open, the time and duration of use, details of your browser, operating system and device, your approximate location (country and region) and the referring page. Cookies are set on your device in the process — including “_ga” — which recognise your browser across several visits.

Purpose: measuring reach and analysing use, in order to improve our content and how we present it.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in analysing and improving what we offer.

Recipients and transfer to the USA: the recipient is Google Ireland Limited. A transfer to Google LLC in the United States and processing there cannot be ruled out. According to the provider, Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision of 10 July 2023, supplemented by standard contractual clauses pursuant to Art. 46 GDPR.

Storage period: the period set in our Google account applies, at most 14 months. The cookies set expire after up to two years, depending on the cookie; you can delete them sooner at any time.

Objection and switching it off: you can prevent this collection by blocking or deleting cookies for this website, by using a content blocker, or by installing the browser add-on provided by Google to deactivate Google Analytics (tools.google.com/dlpage/gaoptout). Preventing JavaScript from running for this website stops both counts; the site remains fully usable. You may also object informally at any time at info@oehl.net.

Further information on Google's processing is available at policies.google.com/privacy.

4. Cookies

Our pages set no cookies of their own and store nothing in your browser by themselves. Cookies are set by Google Analytics, described in section 3 b) — including “_ga”. Without it the site would work without a cookie; how to switch it off is explained there.

In the protected editorial area cookies are used for signing in, where they are technically required.

The appointment booking works without a cookie: both our own counting and Google Analytics are switched off there. How it is protected against abusive submissions instead is described in section 6.

5. Contacting us

If you write to us by email, we process your details in order to handle your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. We delete the data once the enquiry has been dealt with and no statutory retention periods apply.

6. Booking an appointment

On the page „Meet the founders“ you can arrange a conversation with us. The booking runs entirely on our own server; no scheduling provider and no other third party is involved.

What is processed: your name, email address, optionally your company, what you would like to talk about, and the time slot you chose. From your IP address we additionally form a checksum, to prevent anyone from filling the calendar with automated fake bookings. That checksum is salted and cannot be traced back to your address; the address itself is not stored here.

Purpose and legal basis: we process the details in order to arrange, confirm and hold the appointment. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). For the abuse protection via the checksum it is Art. 6(1)(f) GDPR; our legitimate interest is a working appointment calendar.

Recipients: your details are emailed to the founders of CraftPartner and stored in our database. The mail is sent through STRATO AG, which also hosts this website — see section 7. There are no other recipients.

Confirmation and calendar entry: you receive a confirmation with a calendar entry attached. That email contains a link with a random identifier which lets you cancel the appointment. Anyone who knows that link can cancel it — treat it like a password. For technical reasons the identifier appears in our server's access log.

Retention: bookings are kept without a fixed retention period. We delete them once the purpose no longer applies, and on request by the person concerned. Cancelling does not delete the record but marks it as cancelled; the slot becomes available again.

No cookies: the booking pages set no cookies either. Protection against abusive submissions works through the origin of the request and a signed, time-limited form token — not by recognising your browser.

No visitor counting: on the booking pages both counts described in section 3 are switched off — our own and Google Analytics. In particular, your screen resolution is not read there, and no script is loaded from googletagmanager.com.

Voluntary: all details are voluntary. Without a name and an email address, however, we cannot confirm the appointment. You may write to us informally instead; see section 5.

7. Hosting

This website is operated on a server of

STRATO AG
Pascalstraße 10
10587 Berlin
Germany

The provider processes the data on our behalf and on our instructions under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany; no transfer to third countries takes place as part of the hosting. For the transfer by Google Analytics see section 3 b).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to lodge a complaint with a supervisory authority (Art. 77). The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

9. Changes

We update this statement when the processing changes. The version published here applies; the date is shown at the end of the page.

Image credits

As of 19. September 2026