Privacy policy

1. Who is responsible

OOHLEMON GmbH
Höferlesbach 9
73525 Schwäbisch Gmünd, Germany
Email: info@oohlemon.com
Phone: +49 176 10244712

2. What we process and why

• Visiting this website: our host automatically records server log files (e.g. IP address, date and time, browser type, page visited) to keep the site running securely and without errors — legitimate interest, Art. 6(1)(f) GDPR. They are deleted after a short time.
• Analytics: we only use analytics services with your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the cookie banner.
• Contact requests (form, email, WhatsApp): your details (name, email address and, if provided, company and phone number) to handle your request and any follow-up questions — Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest). We don't pass them on without your consent and delete them once your request is dealt with, unless statutory retention periods apply.
• Customer account (v2.app.oohlemon.com): name, email address, company details and contract data, including payment data via our payment provider — to perform the contract (Art. 6(1)(b) GDPR). Only our payment providers process payment data; we don't store full card details.
• Social media connections (e.g. TikTok, Instagram/Meta, LinkedIn): only if you connect an account in your OOHLEMON account do we pass the data needed for the connection (e.g. authorisation tokens, the account's display name) to the platform. You can disconnect at any time; we then delete the access data stored with us. This website doesn't embed social media plugins that send data when you simply visit it.

3. Hosting and encryption

This website and the OOHLEMON platform are hosted by external service providers with servers in the European Union. They are contractually bound as processors under Art. 28 GDPR. All data is transferred with SSL/TLS encryption.

4. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). Just email info@oohlemon.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or where the alleged infringement took place (Art. 77 GDPR).