Datenschutzerklärung

Effective Date: 4 November 2026

1. General Information and Mandatory Clauses

The protection of your personal data is a high priority for us. This Privacy Policy informs visitors of our websites www.ososomega.com (OSOS/Omega) and osos-academy.com (OSOS Academy: training and consulting) about how we handle personal data.

Data Controller: Osos AI GmbH Cosimastraße 121 81925 Munich, Germany Email: datenschutz@ososomega.com

2. Data Collection on Our Website

Our website is designed to be informative. We aim to collect as little personal data as possible.

Server Log Files When you visit our website, the provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL (the page visited before)
• Host name of the accessing computer
• Time of the server request
• IP address (usually anonymized by the provider)

The basis for data processing is Art. 6 (1) (f) GDPR, which allows the processing of data for the legitimate interest of ensuring the secure and stable operation of the website.

Usage Statistics To understand which content is helpful and to improve our website, we record usage events on our own systems, for example page views, clicks, scroll depth, video playback and language changes. For each event we store the page, the referring page, campaign parameters of the link (UTM), the device type (mobile, tablet or desktop) and the time. We do not store your IP address: it is converted into a shortened hash value using a key that changes daily, so visits cannot be linked across days or traced back to you. No cookies are used for this, and no data is passed on to third-party analytics services.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a reliable and user-friendly website). You can object to this processing at any time (see Section 8).

Cookies and Local Storage We do not use marketing cookies or third-party tracking tools (such as Google Analytics). In your browser's local storage we only keep what a function you use requires: a random ID so that a like on a blog article is counted only once, the campaign parameters of the link you came from for the duration of your visit and, if you open the terms of participation from the Academy registration form, your entries until you return to the form. This data contains no information about your identity. Details can be found in our Cookie Policy.

Hosting Our website is hosted by a third-party service provider: Vercel Inc. 440 N Barranca Ave #4133, Covina, CA 91723, USA

The website is deployed via the Vercel platform. We have entered into a Data Processing Agreement (DPA) with Vercel to ensure that your data is processed in compliance with the GDPR and with the highest security standards. Please note that data processing may take place on servers outside the European Union; however, Vercel provides adequate safeguards for international data transfers in accordance with GDPR requirements (e.g., through Standard Contractual Clauses).

YouTube Video The homepage of OSOS/Omega (www.ososomega.com/home) embeds a video from YouTube in privacy-enhanced mode (youtube-nocookie.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the page loads, your browser connects to Google's servers, which transmits at least your IP address and technical browser data to Google. Google may also process data in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information, please refer to Google's Privacy Policy.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an appealing presentation of our offering).

3. Academy Registration (Live Online Training)

When you register for a live online training of the OSOS Academy on osos-academy.com, we process the following data:

• Name and email address
• Company (when the invoice goes to your employer)
• Billing address
• Selected date or package and your optional message
• Your acceptance of the terms of participation (with version and time)

We use this data to process your registration, to send you the access link and information about the session, and to issue the invoice and the confirmation of participation.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). If you register on behalf of your employer, your employer is our contractual partner; we then process your data as participant and contact person on the basis of Art. 6 (1) (f) GDPR (legitimate interest in performing the contract). Invoice-related data is retained in accordance with the retention periods under commercial and tax law (Art. 6 (1) (c) GDPR, generally up to 10 years). We delete all other data as soon as it is no longer required for the training.

The live sessions take place via Microsoft Teams, provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. You can join via the link in your browser without a Microsoft account. When you take part, Microsoft processes the name you enter, your IP address and technical device data and, if you switch them on, your audio and video. Microsoft may also process data in the USA; Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6 (1) (b) GDPR. For more information, please refer to Microsoft's Privacy Statement.

4. Contact Forms and Email

If you contact us via one of our contact forms or by email (e.g., at datenschutz@ososomega.com), the data you provide (name, email address and, depending on the form, phone number, company and the content of your message) will be stored by us solely for the purpose of processing your inquiry and for any follow-up questions. Form entries are stored in our database and forwarded to our team by email. We do not share this information without your consent.

The legal basis for this processing is Art. 6 (1) (b) GDPR (if the inquiry relates to a contract or pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in communicating with interested parties).

Spam Protection To protect our forms and the comment function against misuse, we limit the number of submissions per visitor. For this purpose, we store a shortened hash value of your IP address with each submission, generated with a key that changes daily. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of our website).

5. Blog Comments and Likes

If you write a comment on a blog article, the comment, the name you enter (optional, otherwise "Gast") and the date are published below the article and are visible to all visitors. Please only enter information you want to make public. Likes are stored with a random ID from your browser, without reference to your person. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an exchange with our readers). On request, we will delete your comment.

6. Service Providers

We use the following service providers, who process data on our behalf in accordance with Art. 28 GDPR:

• Vercel Inc.: hosting of the website (see above)
• MongoDB Atlas (MongoDB, Inc.): database for form entries, registrations, comments and usage statistics
• MailerSend: sending emails from our website
• Microsoft Ireland Operations Ltd.: Microsoft Teams for the live online training (see Section 3)

Where data is processed outside the European Union, this is based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.

7. Transition to the OSOS/Omega Platform

Note on Data Privacy: By clicking "Log In" or "Register Now", you will be redirected to our platform at omega123.ai. Please note that the use of the demo version involves additional data processing (e.g., project data, user accounts). For details, please refer to the specific Platform Data Policy available on that site.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You can ask for a copy of the data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate data.
• Right to Erasure: You can request the deletion of your data.
• Right to Restriction: You can ask us to restrict the processing of your data.
• Right to Object: You can object to the processing of your data based on legitimate interests.
• Right to Data Portability: You can request the transfer of your data to another organization.

To exercise these rights, please contact us at datenschutz@ososomega.com.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.