Controller and Contact

The controller within the meaning of the General Data Protection Regulation (GDPR) is Ovador GmbH, Sven-Mertens-Allee 2a, represented by Dr. Gisela Kramer. If you have any questions about the processing of your data or wish to exercise your rights, please contact our Data Protection Officer at info@ovador.com or by telephone at +49 (0881) 4102870.

Collection and Processing of Personal Data

We collect and process personal data only to the extent necessary for the provision of our services and compliance with legal obligations. The categories of data processed include in particular:

• Inventory data (e.g., name, address, email address, telephone number)
• Usage data (e.g., pages visited, access times, IP address)
• Contract data (e.g., services provided, payment information)

Data processing is carried out on the basis of Art. 6 (1) lit. a, b, c and f GDPR, in particular for contract fulfillment, compliance with statutory retention obligations, and the protection of legitimate interests (e.g., security and optimization of our offer).

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure functionality, analyze usage, and provide personalized content. The legal basis for the use of technically necessary cookies is Art. 6 (1) lit. f GDPR. For all other cookies, we obtain your consent in accordance with Art. 6 (1) lit. a GDPR.

You can adjust your cookie settings at any time via our consent tool or delete cookies in your browser. Please note that disabling cookies may restrict the use of certain functions.

Disclosure of Data to Third Parties

Your personal data will only be disclosed to third parties if this is necessary for contract fulfillment, you have given your consent, or we are legally obliged to do so. Recipients may include in particular:

• Service providers for hosting, email dispatch, and payment processing (data processors)
• Authorities and courts within the scope of legal obligations

Data processing agreements have been concluded with all service providers in accordance with Art. 28 GDPR. Data is transferred to third countries only in compliance with legal requirements (e.g., adequacy decision or standard contractual clauses).

Your Rights

You have the right at any time to obtain information about the personal data stored by us (Art. 15 GDPR). Furthermore, you may request the rectification of inaccurate data (Art. 16 GDPR), erasure (Art. 17 GDPR), and restriction of processing (Art. 18 GDPR). If processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

You also have the right to object to the processing of your data on grounds relating to your particular situation (Art. 21 GDPR). To exercise your rights, please contact info@ovador.com. You also have the right to lodge a complaint with the competent supervisory authority.

Data Security and Storage Duration

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Your data will only be stored for as long as is necessary to fulfill the stated purposes or as required by statutory retention obligations (e.g., commercial and tax regulations). Once the purpose ceases to apply or the retention period expires, your data will be deleted.

Changes to this Privacy Policy

We reserve the right to adapt this privacy policy as necessary to reflect changes in legal requirements or new functionalities of our website. The current version is always available on this page. Status of this statement: October 15, 2025.