Privacy policy

Controller

Orbita Media GmbH
Ericusspitze 4, 20457 Hamburg, Deutschland
Geschäftsführer: Noah Malik, Stefan Schott
E-Mail: [email protected]

See also our legal notice and the privacy policy of our website. We are not required to appoint a data protection officer; you can reach us at the address above with any question.

What we process and why

When you book a meeting on call.orbita-media.de we process the details from the form (name, email address, optionally phone number and your answers), the chosen time, your time zone and the campaign parameters of the link you used (utm_source, utm_medium, utm_campaign, utm_content, utm_term). We use them to schedule the meeting, to send you the confirmation, reminders and changes, to prepare the call and to understand which outreach brought you to us.

Legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request); for the campaign attribution Art. 6(1)(f) GDPR (our legitimate interest in evaluating our outreach).

No cookies, no tracking

This site sets no cookies and loads no analytics, advertising or external fonts. Your preferred time zone and time format are stored locally in your browser (localStorage) and never leave your device.

Recipients and processors

• Google Calendar and Google Meet (Google Ireland Limited, Dublin, Ireland): the meeting is added to our Google Calendar with you as a guest, and a Google Meet link is created. Transfers to the USA are possible; Google is certified under the EU-US Data Privacy Framework and standard contractual clauses apply.
• Amazon Simple Email Service (Amazon Web Services EMEA SARL, Luxembourg), region Stockholm (eu-north-1): sending confirmation, reminder and change emails.
• Hetzner Online GmbH (Gunzenhausen, Germany): hosting of this application and its database on servers in Germany.
• Cloudflare (Cloudflare, Inc., San Francisco, USA): delivery and protection of the site, processing technically necessary connection data (IP address, time, requested URL); certified under the EU-US Data Privacy Framework.

Data processing agreements are in place with all processors. No other third parties receive your data.

Retention

We keep booking data as long as needed for the meeting and a possible collaboration, at most three years after the meeting. Statutory retention duties remain unaffected.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Just write to [email protected]. You can cancel your meeting at any time via the link in your confirmation email.

You may also lodge a complaint with a supervisory authority. Ours is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.